Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File:                     4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier:          BSgSLkPtNvbLAhk8JsBOeeEGyFk4lZwQfENf/kFUvY0=
Subject key identifier:   B6:B2:F5:B5:EA:AD:30:E6:D2:D8:F0:BE:9B:E6:4B:82:65:37:C6:33
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer:       /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial:       059D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number:          0599
Signing time:             Sat 04 Apr 2026 22:58:50 +0000
Manifest this update:     Sat 04 Apr 2026 22:58:50 +0000
Manifest next update:     Sat 11 Apr 2026 22:58:50 +0000
Files and hashes:         1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: tW6xGBDu3GVtgjl5jZh0pA7Ej+iccogLQpIIISx5RAc=)
                          2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: WdImnCcnZcMtzi9Kuo/0VUvS1a6vE4XzsB1x3n+OVA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
                          rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
        Validity
            Not Before: Apr  4 22:58:50 2026 GMT
            Not After : Apr 11 22:58:50 2026 GMT
        Subject: CN=69d197aa-804a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:e5:72:3c:8a:fe:85:3c:db:7d:dc:da:2e:
                    b2:98:33:56:92:cf:0d:58:b9:4e:26:ed:c5:89:41:
                    52:03:59:76:30:a9:ea:90:54:da:1d:5e:05:30:a9:
                    7c:d9:2c:ac:a6:ef:db:c9:05:82:a9:b7:c6:71:ed:
                    16:6f:31:67:26:af:6d:6b:88:af:c7:64:d5:df:32:
                    74:c5:fc:08:de:a4:54:b1:d8:16:c9:12:c0:72:ee:
                    91:74:0c:11:71:fd:c3:c6:9d:e8:f3:39:1b:77:08:
                    72:5e:25:31:15:26:32:12:ad:2f:1a:91:a3:bc:df:
                    0e:06:7c:c2:56:16:1b:9a:7a:2b:c4:5f:31:b6:5a:
                    cc:2d:b3:6d:6a:66:e3:9c:dd:12:2d:f2:b9:27:61:
                    31:44:17:39:49:df:cc:96:65:4e:7d:cc:f2:07:ec:
                    80:1e:42:bc:1a:4a:9a:6c:b3:4f:6d:b8:52:11:58:
                    9c:23:51:6b:34:cb:eb:62:9e:df:35:25:50:43:58:
                    9f:da:a1:5e:53:86:a0:04:90:98:3f:ec:5f:c4:34:
                    37:78:8c:ec:d3:05:f6:36:3e:f9:2f:54:b2:7b:d2:
                    e5:bd:7d:a0:36:91:d3:a3:22:f6:82:9c:e4:60:58:
                    f7:96:f9:39:31:3f:ec:e8:39:2a:93:f9:f2:af:81:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B2:F5:B5:EA:AD:30:E6:D2:D8:F0:BE:9B:E6:4B:82:65:37:C6:33
            X509v3 Authority Key Identifier:
                keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:cf:a7:37:0f:55:f7:37:93:57:38:a0:02:ae:8c:93:24:
         cd:c5:ee:5d:10:8e:09:fb:ea:90:c5:98:f3:0f:68:58:41:2a:
         1a:c7:43:4d:21:e0:77:58:16:ef:a6:cf:8c:7f:f0:43:a9:14:
         2f:95:95:f1:fc:1b:86:fc:90:1d:0a:fd:3c:83:29:38:99:e9:
         cc:c6:ab:12:5d:82:0f:20:87:18:b4:08:68:3f:b5:bd:01:c4:
         2d:af:83:ac:ba:24:4e:4a:9e:be:4c:4d:ec:10:99:e4:8e:d9:
         0e:81:5b:6d:3f:69:e8:40:6f:d5:29:05:ca:44:4c:e7:21:d9:
         4d:25:a3:4f:ef:02:89:9b:d0:07:23:04:0b:ab:60:01:56:3c:
         3f:a0:45:19:c5:ff:4a:84:a0:a9:cb:fb:51:8c:b8:c6:5f:80:
         86:98:e4:61:f1:69:3f:f5:c9:07:a9:97:8b:3c:ca:27:85:a0:
         ee:41:eb:a0:d3:74:7d:2f:af:85:b4:de:5e:71:d0:88:73:7d:
         67:f3:c4:de:37:1f:f1:16:67:13:ab:ad:de:63:39:7f:5e:2e:
         af:77:13:cf:63:61:16:ca:63:25:58:e5:4c:73:1c:46:b4:aa:
         f4:b4:d3:47:39:2e:2d:17:0b:15:ce:c3:5d:9a:7e:7b:47:92:
         19:06:75:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:34 2026 by rpki-client