Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
File:                     E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft (raw, json)
Hash identifier:          DNdGtqglIDwYR7Iwo0GUuOrAhQPornWGZxKS3weMuos=
Subject key identifier:   53:BC:E2:93:58:27:28:8F:E7:2D:2F:90:CE:04:C3:79:BE:C5:04:9B
Authority key identifier: 13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
Certificate issuer:       /CN=A91A68C0/serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
Manifest number:          4C
Signing time:             Mon 01 Jun 2026 09:08:15 +0000
Manifest this update:     Mon 01 Jun 2026 09:08:14 +0000
Manifest next update:     Mon 08 Jun 2026 09:08:14 +0000
Files and hashes:         1: E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl (hash: 59MLruuOw5qjDzEwzxBZkMxqo1IaMjrn3tFujQpTiFs=)
                          2: 53134072F0E511F09202A4D23F6F56BC.roa (hash: 7QaNcrtRXFfDvmT/IQFQ8jEHpmg7vJSCEBEkxGI5xTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl
                          rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A68C0, serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
        Validity
            Not Before: Jun  1 09:08:14 2026 GMT
            Not After : Jun  8 09:08:14 2026 GMT
        Subject: CN=6a1d4bfe-c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:86:5d:c7:b9:78:35:4d:b1:8e:e6:c9:48:
                    d3:c5:1d:92:57:be:08:03:31:d1:ac:4e:7d:09:a2:
                    49:e5:a1:2e:28:97:11:b4:10:fa:d4:18:b6:8d:19:
                    dd:37:69:0b:51:b1:98:9c:88:7c:2f:53:29:16:35:
                    c7:2f:ef:74:6d:9e:84:94:97:fb:34:6e:c7:c5:cf:
                    14:d6:13:ca:6d:48:58:c2:41:76:f2:55:85:44:d8:
                    3f:15:ec:f1:0c:8f:a2:32:21:0f:bc:a2:0f:00:c8:
                    03:19:70:10:c8:3a:00:84:9e:aa:d7:4a:cb:1e:24:
                    9d:85:6b:1d:a7:27:06:4f:50:09:8b:13:5d:78:86:
                    93:a3:e8:8d:6b:34:25:e2:07:98:12:42:dc:c0:ff:
                    e4:a3:fb:16:ab:e0:dc:44:45:97:e5:71:9e:b4:b4:
                    4d:f2:7d:34:05:f8:ae:89:c0:78:e3:64:9f:86:7a:
                    5d:48:c0:0a:06:c7:ae:de:fa:ca:02:c6:7c:40:b0:
                    49:82:4f:0a:4a:ce:19:d5:aa:b2:dc:14:0b:04:17:
                    ef:4a:b3:5a:3b:da:55:a5:39:ea:03:d6:8b:59:fe:
                    9c:30:62:6e:77:dc:31:76:7a:8e:8e:30:cc:9e:14:
                    c9:58:8f:99:0f:06:84:63:8f:c0:2b:40:0c:22:e0:
                    53:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:E2:93:58:27:28:8F:E7:2D:2F:90:CE:04:C3:79:BE:C5:04:9B
            X509v3 Authority Key Identifier:
                keyid:13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d6:07:04:fc:0b:99:cb:19:b1:46:f9:7f:4d:a7:5f:7b:24:
         1f:9a:b4:df:e7:54:af:b6:98:fd:be:35:b8:30:60:47:ee:f6:
         e7:3a:61:aa:ce:9e:6a:89:38:f2:04:b8:5d:c4:a4:af:66:14:
         72:7a:40:0b:77:d9:f7:02:53:a4:71:9c:0a:f6:18:39:f7:d2:
         30:51:9e:f1:4c:f5:94:f1:60:d7:6f:a2:34:83:e1:af:7c:75:
         09:5d:9f:40:dc:82:19:9e:a0:ff:2c:48:a0:6e:b4:8d:63:17:
         76:59:1a:73:af:38:02:33:a5:d5:fa:fb:d1:2e:21:4f:1e:86:
         76:38:2f:43:64:bc:06:e5:65:9c:07:6a:d4:ff:84:ed:a9:28:
         13:b4:e3:77:78:3b:57:dd:f4:fb:d0:19:f1:d8:f7:55:72:a6:
         5e:92:f7:db:86:ac:c0:73:0a:09:1a:33:d4:13:15:97:32:c2:
         33:b2:a0:42:85:83:a8:3d:4f:40:0c:b5:f7:ce:ad:ea:86:9e:
         e2:8d:67:5b:9b:f9:f6:73:80:5a:6b:94:2e:23:b3:52:c0:20:
         b1:01:55:ee:65:5d:49:5f:c3:c6:e3:36:77:d8:cd:d0:3b:e3:
         7e:e4:9c:a4:41:e6:0f:89:d8:34:5d:e9:2b:91:5f:e7:22:37:
         29:1b:47:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:44 2026 by rpki-client