Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File:                     4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier:          Nd27T828X+4dpxHe2bQ6F67vefF2gSR1x0pGpJj8J5c=
Subject key identifier:   44:80:5E:5F:EF:8E:53:CD:0F:39:07:DF:24:8A:DB:76:3B:63:62:28
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer:       /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial:       366A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number:          35E2
Signing time:             Tue 28 Apr 2026 14:30:57 +0000
Manifest this update:     Tue 28 Apr 2026 14:30:56 +0000
Manifest next update:     Tue 05 May 2026 14:30:56 +0000
Files and hashes:         1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: +KvwV2+ltMB2fw5rkCZs/BOUVAAXPV4N0o9UqInKzNE=)
                          2: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: hG8g9R9N6g9xsHSn0imR+1vWSozb3fa3uL51Vy8mhic=)
                          3: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: YixDUXuSIn+Hh+G5kFeWAZb1NF/MvO4aijdY29fevto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
                          rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 14:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13930 (0x366a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
        Validity
            Not Before: Apr 28 14:30:56 2026 GMT
            Not After : May  5 14:30:56 2026 GMT
        Subject: CN=69f0c4a1-8bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:8c:95:0c:df:b0:46:32:de:fe:3e:49:61:
                    c8:f0:a3:88:de:49:d7:0c:dc:70:ca:ad:34:5a:f2:
                    96:f0:0f:c5:7b:b2:1f:07:1b:60:f4:80:c4:26:2b:
                    6e:18:cd:34:ce:6e:2e:15:78:54:3e:ec:e7:fe:bf:
                    c1:cf:27:3e:af:88:09:61:36:d7:3c:2b:a2:c7:32:
                    89:e5:35:73:e1:20:bc:fe:99:8d:bc:08:7a:bf:b1:
                    20:ef:97:49:7d:89:bc:eb:ee:6a:77:68:e0:7c:62:
                    6d:d4:66:8b:ad:28:ad:3e:4f:6e:f3:15:d5:0e:65:
                    ae:a5:76:55:75:df:e4:c9:7a:ed:8a:04:34:50:af:
                    fa:d8:0e:5c:97:b6:6a:0b:c8:74:a2:08:af:e0:23:
                    ba:b9:22:3a:e1:9c:6e:d3:17:c3:db:d6:f4:ac:ad:
                    84:d9:c2:51:b6:7c:a4:85:ec:a3:9a:26:bb:7c:d1:
                    26:61:53:43:1a:6d:91:cd:12:f4:e7:73:68:83:31:
                    0f:92:ce:ba:30:1b:81:eb:b2:34:83:bb:3e:2a:38:
                    46:a6:ad:71:e8:cf:01:a4:c2:76:d4:56:27:6d:ec:
                    b9:c4:0e:c3:dd:99:ac:9d:2d:10:88:a0:e4:3b:78:
                    f9:37:2b:05:1c:4a:1d:a0:ba:d1:eb:4b:49:17:3d:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:80:5E:5F:EF:8E:53:CD:0F:39:07:DF:24:8A:DB:76:3B:63:62:28
            X509v3 Authority Key Identifier:
                keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7d:ac:24:a1:38:30:04:65:31:8c:e4:28:06:9e:83:c4:a4:
         2e:05:af:f5:5b:ea:45:08:4d:b9:bb:d7:ab:90:2d:0c:91:a5:
         75:86:c2:ac:79:60:20:f4:39:fe:a3:69:bd:8d:2a:7b:c2:7c:
         bf:f3:07:fd:8d:48:97:ec:4d:c8:2b:98:95:99:41:ee:35:b3:
         8a:b1:58:96:c4:81:87:78:07:1c:55:b0:86:15:db:68:7e:1d:
         03:aa:ed:b6:8a:7e:8f:7d:5d:df:0c:b2:75:a1:16:36:9b:be:
         52:d9:63:b3:d7:d9:ac:38:5a:f1:cf:61:9d:e2:c2:d2:35:40:
         c4:4c:e9:ca:96:06:9a:6b:6a:ca:16:28:27:64:fb:a5:16:de:
         cb:41:f5:74:2f:b5:8c:1f:79:1c:f4:b7:68:8f:44:11:41:9e:
         e1:10:5a:e1:30:20:40:be:28:2c:85:eb:b8:77:54:27:e4:bc:
         30:8b:35:28:7c:76:09:43:d5:16:9f:cd:b2:cf:6e:85:9d:52:
         37:dd:57:1f:0a:bf:70:cd:85:e6:0c:e2:be:07:8e:ed:7c:5c:
         16:86:4c:4a:28:09:30:0b:bb:e2:12:34:ce:92:e2:8d:35:f3:
         c4:c5:d1:67:bd:b1:7c:0f:1c:21:c4:c7:5d:37:dd:6e:0e:d9:
         cf:0f:d2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 05:42:32 2026 by rpki-client