Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          c0lCrV7umwj7JXSXjyPhiOUwv9MjUJZQHEkt8yBlfs4=
Subject key identifier:   D4:7E:0D:48:07:33:CF:18:2D:6C:39:52:E7:68:91:08:62:E2:E1:3C
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0B8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0B69
Signing time:             Thu 14 May 2026 19:15:09 +0000
Manifest this update:     Thu 14 May 2026 19:15:09 +0000
Manifest next update:     Thu 21 May 2026 19:15:09 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: 1hsXK+8dIg9dYosQTV3mKWPiR24fIx0lNrfccTGitsc=)
                          2: 76D38708D64611EE98C44371C4F9AE02.roa (hash: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=)
                          3: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: mmuNJzdQc+EMG4vi6YI8GL1XWoSarik/6NrUTgT3yPQ=)
                          4: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: BPfB/XTTgtvHGk3VIxBnFhEcnL04DxqHE/nHRVwjG7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 19:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2958 (0xb8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: May 14 19:15:09 2026 GMT
            Not After : May 21 19:15:09 2026 GMT
        Subject: CN=6a061f3d-92a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d6:9b:7c:60:14:cc:1a:63:55:48:ae:5d:8b:
                    18:66:e4:bd:f7:96:e3:f5:2b:10:ee:33:da:05:ae:
                    8a:7d:89:b0:42:e7:3c:19:28:c3:60:42:0d:47:27:
                    ee:d1:c4:8e:e8:4f:1b:d4:ba:5c:f6:d2:05:fa:2c:
                    4d:02:46:e8:aa:42:ca:ca:3f:87:b2:51:84:1d:8a:
                    fe:f5:3f:d3:a5:10:05:e1:09:d4:3f:09:71:c8:05:
                    84:e8:76:9f:50:a0:4c:94:78:eb:e0:53:ad:14:81:
                    ce:d3:7d:67:39:3a:5b:66:b1:ff:b6:74:07:77:0f:
                    b1:4a:ea:84:c5:db:9e:cc:b4:bf:ca:04:b8:a2:c6:
                    b3:26:ae:89:ee:0b:ff:31:f9:94:6e:f6:46:6f:61:
                    e9:c0:a9:db:61:89:2e:4d:0f:08:ce:c9:09:ed:36:
                    50:54:fb:11:8c:fd:49:8d:75:a7:0a:a6:08:01:bf:
                    d9:aa:7a:8f:9b:65:1b:c8:32:ff:01:bb:9e:d8:74:
                    87:fd:0e:62:34:77:09:3b:dd:54:d9:2f:5e:bd:31:
                    ce:ef:99:22:f1:e4:60:c9:8d:ad:95:af:4c:fe:a9:
                    34:0b:81:9a:fa:75:80:06:0c:33:21:c0:2b:1d:60:
                    03:89:2e:2f:60:f6:b7:48:ed:a2:26:a6:19:86:39:
                    9a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7E:0D:48:07:33:CF:18:2D:6C:39:52:E7:68:91:08:62:E2:E1:3C
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:78:23:f7:31:4b:14:85:80:9d:5a:4f:29:b5:7f:a4:f4:
         46:25:a5:33:fd:63:e0:cd:d5:3a:57:08:41:18:be:14:34:42:
         4e:b4:7d:2e:61:65:43:3e:9e:02:26:6e:87:18:23:f5:e7:e4:
         65:64:10:ef:5e:cd:70:e0:23:3f:94:8a:88:2b:fe:11:49:66:
         e4:96:2f:f1:80:2f:37:b3:99:29:a4:79:38:af:75:6d:b0:93:
         e7:2a:7c:fd:77:63:de:49:c7:2b:c1:6c:6f:2e:6d:8f:cc:ca:
         c4:45:36:a5:64:44:ab:c6:eb:e2:51:47:bb:ab:71:a9:6f:59:
         b6:ac:76:3d:4d:f3:9f:86:7e:d4:03:0c:95:95:10:f9:4f:a0:
         cd:5e:aa:a1:29:a0:54:df:6a:3e:3d:b6:d9:1f:f6:a5:8f:45:
         bb:b0:8b:82:d0:ec:36:62:4c:6f:3b:ce:6e:ad:e7:81:4e:38:
         dc:7e:3a:18:59:19:3d:40:54:1e:85:a1:82:54:f6:0c:a5:f2:
         f8:51:f7:11:4d:22:b6:e7:3c:50:e6:32:25:51:91:72:58:c0:
         7f:b3:a4:8b:b7:04:52:78:60:a6:ee:e0:a0:4d:4c:ba:ec:cc:
         8f:e8:ea:86:69:9d:eb:ab:a0:ba:d9:2e:de:ea:f3:f0:8e:26:
         22:8b:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:14 2026 by rpki-client