Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
File:                     4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json)
Hash identifier:          PtBjM4QcfdPhqCGPTIZOonMs+49EwtafV0ci8YLrJeQ=
Subject key identifier:   30:5F:B2:08:D1:B6:49:27:84:25:09:FF:26:3F:B5:B7:C4:B4:59:16
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
Manifest number:          027F
Signing time:             Sun 05 Apr 2026 01:34:56 +0000
Manifest this update:     Sun 05 Apr 2026 01:34:55 +0000
Manifest next update:     Sun 12 Apr 2026 01:34:55 +0000
Files and hashes:         1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: BOjAi1NSRwJIE7i0oNpQVVAHV3abTAzBfOoIH4aP03I=)
                          2: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=)
                          3: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
        Validity
            Not Before: Apr  5 01:34:55 2026 GMT
            Not After : Apr 12 01:34:55 2026 GMT
        Subject: CN=69d1bc40-b22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:ab:e1:f7:c5:6e:08:00:d0:64:54:a6:1a:
                    26:f2:8c:1c:84:86:14:e2:34:d3:93:19:db:89:76:
                    7e:ab:12:c2:31:68:d8:2d:6e:e6:29:49:2e:a7:73:
                    76:91:c7:a8:c8:dc:da:05:19:d9:9c:c2:af:24:29:
                    c6:7d:5c:ea:c7:21:bb:f5:dc:2f:f8:3f:46:bf:0f:
                    2f:ae:03:05:c2:a3:cf:09:86:a8:c0:3d:bc:1e:e4:
                    f3:67:56:57:b7:05:1b:78:91:dc:e5:c0:3b:21:e0:
                    20:bd:14:ef:a8:28:e0:44:4e:89:63:bc:f0:68:90:
                    fe:6a:6c:b4:de:b0:7b:2a:a2:2b:f1:cd:5c:99:3f:
                    5c:76:ff:60:ef:4b:a3:41:1a:09:f1:a1:07:15:c4:
                    55:fc:5f:9b:11:c2:ae:e7:2b:fa:c9:74:cc:5e:39:
                    d4:c3:63:f2:bc:a9:d2:ea:b1:b0:45:3a:a3:bc:90:
                    50:4c:94:2c:23:a3:ec:18:11:bb:7e:f4:37:dd:0b:
                    22:85:ea:6c:a9:96:bd:eb:4c:5f:8f:63:6f:a6:a0:
                    39:93:d8:59:34:31:28:ff:4e:08:0a:61:3b:80:f2:
                    6c:af:2d:5a:73:d8:f4:33:30:d7:d7:bc:d7:4a:fa:
                    15:7f:93:03:eb:20:7b:b4:2e:f8:ce:b3:d1:8e:63:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:B2:08:D1:B6:49:27:84:25:09:FF:26:3F:B5:B7:C4:B4:59:16
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:78:74:e2:83:3b:b1:85:7f:6b:6b:34:76:07:e5:9d:3f:
         61:94:db:29:35:bc:4c:43:57:4f:f9:e2:88:e1:ac:c3:ac:35:
         bb:fa:4c:fa:10:01:df:61:0c:1f:b7:22:ea:55:25:8b:bd:8b:
         25:3b:94:af:6b:c3:8d:6b:d1:bf:ec:7d:66:40:b6:1c:28:0b:
         0c:5d:f6:23:c6:1c:19:b3:8c:95:94:ee:4d:5a:bf:00:70:5d:
         33:04:b4:a2:79:63:56:34:8c:fb:c7:97:0a:f3:75:6a:5a:39:
         57:cd:3c:14:90:47:2b:05:89:cd:e0:ae:cc:9e:bd:7d:82:93:
         07:d9:8e:99:43:2c:71:16:d7:ff:0a:2e:b8:df:ff:a3:55:fe:
         f0:68:64:80:1b:25:b0:d5:0e:01:c8:46:ff:d5:12:6c:be:d4:
         1d:8f:44:d9:6d:cc:24:9c:a7:97:ab:d8:31:cf:b9:e1:0b:eb:
         1e:45:4a:da:e7:1d:05:1a:04:cf:0e:32:dd:c8:68:2a:05:2c:
         be:3b:bb:01:2c:4a:10:66:09:b5:63:d8:45:a7:76:4f:68:bc:
         5f:fe:69:64:89:d6:ef:45:a4:65:b3:a5:c5:ef:1e:54:23:a0:
         41:4f:ba:f3:24:cc:eb:b2:56:a6:33:42:b9:2f:ca:8a:39:96:
         ae:41:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:43 2026 by rpki-client