Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File:                     4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier:          Fua+77k3sMPsbVmDcGEvhxa7eNLdgFWJfkS9jjC9j7I=
Subject key identifier:   65:31:B6:42:09:6E:68:77:25:BC:7C:4E:DF:37:84:9A:BC:CD:1F:BA
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer:       /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number:          63
Signing time:             Thu 21 May 2026 08:09:32 +0000
Manifest this update:     Thu 21 May 2026 08:09:31 +0000
Manifest next update:     Thu 28 May 2026 08:09:31 +0000
Files and hashes:         1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: 2j7Ee0II+oPOmXEhfSpHoNYNW+sFT2BylI29WntC2NE=)
                          2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
                          rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
        Validity
            Not Before: May 21 08:09:31 2026 GMT
            Not After : May 28 08:09:31 2026 GMT
        Subject: CN=6a0ebdbc-fc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:75:04:18:e0:de:a0:3d:a4:db:2c:28:c8:
                    a4:dd:59:92:85:74:2f:56:0f:e5:86:1a:92:92:5a:
                    74:14:e3:cf:03:c4:a8:e9:3f:3a:c3:d1:ba:ef:21:
                    10:d1:fd:62:00:fe:db:ed:2f:de:fa:2d:e2:25:76:
                    65:fe:60:48:e2:24:aa:b9:0a:fa:42:c3:f0:4f:09:
                    74:c5:d6:85:1d:bd:62:2b:9c:09:2e:96:a7:58:3b:
                    ba:3c:42:6e:6e:35:74:85:24:25:f0:0a:aa:ea:7f:
                    e7:0d:3e:ea:4b:bd:69:de:32:d3:39:2b:f5:c5:01:
                    fb:e8:87:50:fa:88:7c:68:79:77:63:68:24:1c:67:
                    d4:18:85:6c:35:47:e9:e9:cc:14:e9:1a:3f:e2:7c:
                    87:fa:87:c9:af:05:ce:b7:36:72:93:a8:9b:e4:05:
                    66:48:de:e1:2f:d8:b1:f5:54:c5:e5:c7:96:92:94:
                    85:5c:25:4e:1d:d1:66:5d:0e:97:18:7a:4b:4a:27:
                    e6:93:18:17:d0:a8:9d:59:5d:08:74:42:37:dd:a5:
                    58:8d:b1:86:6a:6d:9c:98:f5:3d:35:3e:a3:68:7c:
                    ed:0d:ac:ad:62:0f:3c:ba:0c:0d:39:8e:29:b6:17:
                    13:d5:92:4e:e2:fc:fb:e3:f1:65:01:db:15:54:04:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:31:B6:42:09:6E:68:77:25:BC:7C:4E:DF:37:84:9A:BC:CD:1F:BA
            X509v3 Authority Key Identifier:
                keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:05:de:c9:8c:25:25:57:c8:de:ce:5b:37:11:22:b4:97:ac:
         21:d9:88:e0:82:94:94:59:d9:0d:79:81:bc:fd:5d:89:da:5d:
         dc:e4:f4:42:ba:ff:38:65:93:52:ad:7c:63:54:e5:69:b2:5e:
         cf:01:d6:a1:2f:ea:e3:a3:3e:05:b8:d7:a0:d7:4a:45:c3:5a:
         b3:e9:15:af:30:94:30:d6:04:8d:84:00:9e:94:3a:a6:90:c3:
         8c:3d:8a:e2:56:8b:b9:de:c3:b6:d5:13:c0:d2:03:d0:59:f4:
         03:d5:eb:1b:46:c9:58:e6:ff:09:1e:b4:21:99:95:5e:67:fb:
         c3:07:f6:6b:bf:d3:8a:bf:6e:1f:cf:c4:77:c8:65:bd:01:12:
         24:57:5c:03:69:53:9e:dc:fb:fa:d5:fc:6f:83:f1:02:25:92:
         2f:64:08:ad:d6:bc:e2:aa:29:03:70:a5:59:77:16:49:52:e1:
         97:67:28:02:c7:23:44:77:72:ac:81:dc:f4:c1:7a:a0:98:68:
         bd:34:91:f5:e1:a7:e2:30:be:8d:e1:6e:64:a5:81:e1:96:90:
         c3:bb:f2:25:ef:df:d9:69:ab:4a:bc:c6:5a:f4:7d:43:ab:0d:
         74:64:7e:56:5b:74:d3:3e:b9:d7:54:7b:e7:0d:f8:de:ba:1b:
         48:36:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:21 2026 by rpki-client