Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File:                     4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier:          MvaLJHLZpGKk08nNPFp+9QnxsxmtyWMBf01gbi7BbcA=
Subject key identifier:   78:35:9C:B5:32:97:63:21:A5:98:93:FA:EF:79:17:63:C1:15:4D:56
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer:       /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number:          08
Signing time:             Sun 21 Jun 2026 09:14:26 +0000
Manifest this update:     Sun 21 Jun 2026 09:14:26 +0000
Manifest next update:     Sun 28 Jun 2026 09:14:26 +0000
Files and hashes:         1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: FEBxFDmojin4lCLeyEnNXEmGKLz6WXXKrbo75izBcEg=)
                          2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Jun 2026 09:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
        Validity
            Not Before: Jun 21 09:14:26 2026 GMT
            Not After : Jun 28 09:14:26 2026 GMT
        Subject: CN=6a37ab72-0c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:f5:b3:fb:50:87:58:8a:d8:eb:a7:66:34:
                    3b:d8:18:db:67:54:03:08:61:2f:12:f5:e8:43:70:
                    49:c6:d6:f9:26:74:50:55:d8:59:13:1e:90:8e:e8:
                    6c:dd:78:62:e0:c8:e0:8c:27:7a:56:fd:61:38:c5:
                    8d:f3:15:09:4a:fd:d4:af:51:5d:7d:3b:97:8f:f3:
                    82:35:37:f8:94:aa:d5:01:77:c7:17:dd:5b:9d:85:
                    e5:72:f9:0d:27:6c:b8:cb:b8:eb:9f:2d:a4:8f:f2:
                    34:f1:31:f5:c8:07:33:14:92:c0:96:fa:9b:a4:dd:
                    0d:be:98:59:0c:89:9f:21:f4:ac:47:77:cc:41:33:
                    db:e1:64:38:4c:4a:68:1d:b0:df:db:11:58:fb:00:
                    80:a1:3f:d6:6e:b2:ea:07:57:ee:ff:5a:f0:cc:ed:
                    c9:78:72:3c:4e:57:c6:b0:dd:03:00:73:4c:e2:84:
                    58:5b:1c:f2:72:b1:1e:c7:3e:18:67:14:be:f8:9f:
                    24:5c:4e:bf:6f:f2:95:09:e4:a2:b2:f3:ed:5e:96:
                    37:3c:fd:ab:8a:48:30:02:f4:e0:25:d9:63:88:eb:
                    dc:51:f8:c4:96:32:1b:2b:7b:88:cf:9e:52:30:20:
                    bf:cd:b5:33:11:cd:c0:11:ab:1a:ce:09:ff:9d:d7:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:35:9C:B5:32:97:63:21:A5:98:93:FA:EF:79:17:63:C1:15:4D:56
            X509v3 Authority Key Identifier:
                keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2d:16:3e:40:65:91:2b:6a:83:1b:99:f5:70:f3:8f:34:17:
         c4:5c:34:c2:e0:cb:ff:1c:30:38:37:77:d1:71:ef:21:8e:1a:
         cc:ba:81:5a:57:c1:85:63:67:e1:e8:0a:86:42:b2:3a:41:44:
         c3:7b:50:dc:fc:07:d8:af:63:81:fd:e3:b9:f7:10:e0:70:86:
         f0:ec:22:ae:27:3b:84:79:92:a2:e0:fe:15:8b:06:d8:8a:d2:
         32:a7:51:f0:5f:cd:e0:05:c9:be:63:c0:4e:79:c5:4d:f8:b5:
         ed:61:33:d3:ea:ce:63:b4:43:e5:c3:ec:99:44:3f:98:92:67:
         7b:ca:38:89:38:9d:2b:82:58:61:40:4c:76:5e:9e:02:c2:d8:
         2f:d5:42:06:0e:77:69:5a:e3:01:7a:56:aa:9f:2e:9d:a3:0e:
         95:2c:e3:0e:aa:e8:d9:e2:88:a3:4c:77:10:45:0b:32:eb:ef:
         c2:04:fc:99:1a:2a:9c:ce:20:8e:c3:1d:6b:ab:b9:c5:c7:02:
         a7:3e:22:60:f5:7e:d7:c3:12:f2:82:92:7a:7e:99:8e:d8:dd:
         9c:8b:82:53:c3:bf:14:9f:33:6c:26:21:e9:6a:7a:90:50:60:
         8e:d3:3e:57:0e:f4:ce:b5:f6:4b:01:91:e3:6d:f4:95:ce:9d:
         7b:6c:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 10:48:44 2026 by rpki-client