Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File:                     pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier:          t/IbfMGBVxteK6mPxLBnGIhhAwLGH38FCcBFH9mILH0=
Subject key identifier:   BA:D8:49:3D:C0:AF:5D:B3:FE:CB:BB:CA:19:FE:AA:A7:8D:C5:33:66
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer:       /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number:          4E
Signing time:             Fri 05 Jun 2026 08:48:25 +0000
Manifest this update:     Fri 05 Jun 2026 08:48:24 +0000
Manifest next update:     Fri 12 Jun 2026 08:48:24 +0000
Files and hashes:         1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: 1CXydwhkyZWg5y1sPL/XN4N7hmWtsrG1xfCt+I3wV7E=)
                          2: 8B10B888061111F18D858310203D8C67.roa (hash: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
        Validity
            Not Before: Jun  5 08:48:24 2026 GMT
            Not After : Jun 12 08:48:24 2026 GMT
        Subject: CN=6a228d59-3fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:b2:21:62:f9:33:49:b6:e2:72:af:39:6c:
                    2f:35:00:f7:4a:5a:01:d2:a0:27:f4:79:7c:e3:ca:
                    39:f6:cb:ba:af:7c:1e:fb:b0:37:a1:ab:49:3b:07:
                    ff:f1:47:7e:51:1f:69:e7:47:bc:4b:c0:da:82:49:
                    2e:15:53:a1:96:1b:b6:ed:9e:80:84:4a:cb:16:44:
                    25:81:61:ce:e3:13:4e:5a:bd:df:ca:4a:1d:0e:6a:
                    f9:e2:10:01:f6:5c:b8:e2:dd:73:f4:56:6e:01:4f:
                    1f:97:81:c5:e6:55:d1:7a:c7:96:86:d4:40:56:57:
                    fd:5d:cc:b9:26:8b:14:c3:54:30:7c:f6:65:ff:30:
                    42:3a:bb:93:0a:5e:e2:23:dd:76:b0:fd:c7:40:2f:
                    8a:e7:0b:d7:53:8d:45:35:6b:65:28:69:72:f6:88:
                    15:cf:92:cf:03:b7:3d:e7:af:3d:c6:6f:2e:dc:9a:
                    9f:4e:12:fe:ab:97:0c:b1:7d:ca:e6:29:88:9b:b8:
                    87:36:60:74:57:df:53:92:01:80:45:d2:d2:b4:39:
                    03:22:ef:2d:8f:0e:13:89:d5:5f:08:06:f8:eb:0a:
                    d7:41:dc:7b:1d:64:b1:f6:b3:c4:7b:0d:6d:5e:ea:
                    1b:fd:46:ac:68:f4:79:7d:38:03:2d:94:95:ee:93:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D8:49:3D:C0:AF:5D:B3:FE:CB:BB:CA:19:FE:AA:A7:8D:C5:33:66
            X509v3 Authority Key Identifier:
                keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:32:75:9f:b8:4b:c1:a6:b1:55:07:48:29:1a:36:9b:8e:85:
         57:8f:60:6c:60:ac:6a:ea:3a:ad:b4:6e:7d:b1:49:a7:c2:cb:
         c6:36:7b:6c:63:06:c4:2a:3a:cf:7e:25:61:86:ec:7a:7a:93:
         30:d6:87:e5:dd:d6:d8:7f:7e:9d:30:59:f1:92:b3:95:16:26:
         3e:1f:1d:d0:a0:2e:a9:99:eb:a5:ec:b0:39:26:ef:e3:7f:81:
         10:36:25:f3:cd:e8:f1:e5:07:86:a1:49:e5:31:ba:56:13:c2:
         04:ef:7e:d2:9c:b5:7d:47:4d:67:28:5e:39:7b:3e:ff:73:76:
         52:5d:55:0d:69:71:83:4d:18:61:92:fb:b9:ee:67:47:18:18:
         a9:ab:cb:34:d6:ac:c9:77:ac:50:2c:fc:25:e8:02:68:d9:2f:
         68:98:d3:5f:58:ed:d6:9f:5b:b6:4b:18:7a:5c:25:0c:37:ae:
         eb:45:3a:37:94:e7:25:b6:ba:3a:1c:f5:0c:f3:6a:99:8a:2a:
         1c:76:cc:bb:81:67:c7:39:7b:b4:07:8f:ef:16:23:c9:65:ee:
         92:62:cf:ee:fd:1b:dc:12:88:24:bb:af:58:ec:9a:f0:f5:24:
         57:d9:a4:02:bf:62:bc:77:72:8f:c7:b7:0f:58:1a:74:1b:f3:
         33:e3:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:04:11 2026 by rpki-client