Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
File:                     4mcctGrTmxwXJOxjzVOymz5IHpk.mft (raw, json)
Hash identifier:          gphbV4/VlDjJag3L7AGLByMHNRiSGTwgEpWo4f0NQzo=
Subject key identifier:   B9:E5:F4:C3:FB:D3:3A:71:4D:02:C5:38:0D:48:B9:14:23:F3:03:F5
Authority key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
Certificate issuer:       /CN=A914145F/serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
Manifest number:          31
Signing time:             Fri 05 Jun 2026 09:03:06 +0000
Manifest this update:     Fri 05 Jun 2026 09:03:06 +0000
Manifest next update:     Fri 12 Jun 2026 09:03:06 +0000
Files and hashes:         1: 4mcctGrTmxwXJOxjzVOymz5IHpk.crl (hash: chVrdQwnkMQjMqPJ9ygA7xfFA8ZXDaG4hIMvjs2TqFs=)
                          2: 2C8A1D2C16BA11F18FA4AADE273D8C67.roa (hash: twoRF5oqlZ7HCh1Oa3drRkDKu566LB667OHWRh/w7Jg=)
                          3: 2D0F8E9E16BA11F18FA4AADE273D8C67.roa (hash: yWwtKIoGzkza5ajepsaaRnUFxlesI9AwU+G4CnGMim4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
                          rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
        Validity
            Not Before: Jun  5 09:03:06 2026 GMT
            Not After : Jun 12 09:03:06 2026 GMT
        Subject: CN=6a2290ca-0f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:91:a5:18:90:ea:3b:ea:fa:ed:45:6f:f6:
                    86:5a:17:ea:b4:7c:6b:58:09:c4:68:21:3e:4f:96:
                    16:07:ce:9a:42:fb:b2:8d:ae:84:27:13:62:ec:4d:
                    b7:de:0d:06:0c:cf:08:88:20:36:8f:4d:93:71:66:
                    2f:f4:66:0b:91:af:08:8a:2c:3e:fd:f2:d1:2b:a4:
                    6d:5a:dc:bc:b6:a5:dd:bf:3b:a3:d1:58:ba:ce:f4:
                    a7:d3:61:31:db:f3:6a:8a:75:78:5c:3f:f1:54:da:
                    33:49:0d:6d:90:12:d5:bc:9c:10:ac:49:7d:17:ef:
                    d1:e8:c6:1d:5d:8c:1c:83:61:8f:e7:cb:3e:21:db:
                    44:32:16:a1:0a:0d:31:a2:51:61:e1:e3:c8:9b:f7:
                    86:5f:05:91:83:06:e2:ea:29:1c:7b:d6:61:da:be:
                    dd:7a:f3:bf:a1:e0:71:8c:6a:65:df:52:41:5f:6d:
                    56:27:27:f6:f2:59:28:eb:5e:e9:7c:32:28:ca:0d:
                    62:68:5a:7f:29:e4:fb:32:5b:65:fa:28:f6:86:c7:
                    d4:51:ba:7a:f8:3b:47:f2:4e:58:ef:93:f8:4c:cb:
                    31:56:4c:bb:ff:f5:49:3c:12:e7:b5:d7:22:25:47:
                    37:bc:ab:69:d8:2c:68:70:26:71:c2:5c:9a:1b:65:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:F4:C3:FB:D3:3A:71:4D:02:C5:38:0D:48:B9:14:23:F3:03:F5
            X509v3 Authority Key Identifier:
                keyid:E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:86:b6:00:1a:63:9a:3b:bd:b4:a6:20:bb:67:9b:5b:ea:c9:
         6b:ea:ff:bd:c0:1a:21:e7:74:5d:1b:1f:b6:b7:b2:6d:f4:e6:
         93:19:a0:a5:4a:11:62:7d:69:52:cc:2b:96:50:82:fa:b1:1b:
         a4:6e:80:51:aa:a0:5e:59:1c:db:a7:27:ea:b5:ed:71:4d:d2:
         b2:6e:a0:1f:0d:f6:50:89:3e:a2:f6:03:6a:3f:12:bb:9e:16:
         b1:5d:ca:5a:b9:d8:f3:d5:7d:1e:52:62:7a:f3:e6:48:f7:ed:
         cd:0d:ea:f6:39:f2:d3:ac:a4:ee:4f:c7:2f:ea:c2:64:28:24:
         1a:9c:63:3a:03:29:a7:b4:db:1b:ac:8d:69:af:01:86:72:00:
         d1:2b:d9:ee:6c:9c:70:99:ae:ea:7f:c5:1d:7c:74:b4:48:5d:
         ee:36:99:29:d6:9e:5a:d6:99:a0:23:27:1d:d4:50:98:bd:38:
         79:36:bf:58:6e:da:6f:2f:20:63:9c:98:68:90:59:f5:e1:99:
         97:a7:fd:6b:c5:02:6e:84:27:18:91:14:3a:77:d0:cb:16:0f:
         0c:96:b6:89:99:2e:b5:51:da:e9:ee:1b:f0:35:81:9f:5e:39:
         4d:f7:5d:5b:51:69:60:e2:3b:ee:99:63:dc:09:f9:05:dc:35:
         a3:03:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:07 2026 by rpki-client