Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
File:                     -Q4hD858Z6Lysy3hTusFoEsNEOE.mft (raw, json)
Hash identifier:          M4m6aQyrz64jPYaA0GtNMwO5G9kzIyAkgfRQDX/FECs=
Subject key identifier:   8C:64:99:5B:90:13:9D:D0:A2:75:A9:DC:36:68:7B:0C:D5:40:66:07
Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Certificate issuer:       /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
Manifest number:          0204
Signing time:             Thu 21 May 2026 03:09:59 +0000
Manifest this update:     Thu 21 May 2026 03:09:59 +0000
Manifest next update:     Thu 28 May 2026 03:09:59 +0000
Files and hashes:         1: -Q4hD858Z6Lysy3hTusFoEsNEOE.crl (hash: gVZP9ztRYNOuYxDHelBCZbZ5eabFktUPuUhSJJAOsao=)
                          2: A99E5658488011EE8113A766C4F9AE02.roa (hash: PrGqSAcgp1HdiIpn0vqqOgThVUF4Ys8AxQ1iGGW7VmI=)
                          3: 10A3333E3BAC11F1B91923E195833773.roa (hash: qv+5geqvZuNiYk7aYI5fXtMxpLW2mBJm6HRn38gC5D4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
        Validity
            Not Before: May 21 03:09:59 2026 GMT
            Not After : May 28 03:09:59 2026 GMT
        Subject: CN=6a0e7787-b446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:df:ac:eb:fa:71:ac:3a:f7:88:da:d3:38:
                    b6:72:c2:ac:67:da:6f:79:71:8d:5e:5c:8e:91:3e:
                    46:80:e2:26:0c:a1:c5:00:73:25:e8:14:c2:9a:56:
                    d1:b8:5f:1e:a1:ae:d3:75:b8:91:3e:d3:45:6c:e9:
                    dc:0b:4b:e0:7a:c0:ac:e0:6f:84:9c:89:4c:c6:35:
                    8c:18:48:6e:78:ba:28:b4:a6:15:09:cf:42:08:99:
                    64:0f:c8:f4:f4:69:d3:5f:70:bd:e3:19:84:fb:64:
                    68:20:89:45:03:3b:2e:75:31:b2:2f:b1:74:4a:1d:
                    e8:69:38:95:d1:05:b5:8c:26:0c:d3:8d:ad:0a:1c:
                    5d:55:2c:4d:fa:93:6b:d5:41:a8:6a:6f:ee:9b:e2:
                    e4:e9:5f:d9:90:b8:30:7e:a8:e2:db:75:c0:9a:4a:
                    f0:97:c9:d8:be:a7:c5:91:cf:b7:c1:02:e8:c3:0f:
                    68:98:cf:3b:5a:3d:12:67:0d:c3:c5:89:b9:4c:d0:
                    d6:db:e5:7e:04:dc:3f:90:f0:57:7d:16:29:e8:2c:
                    28:f7:c2:3e:b8:6c:1c:08:75:e7:e0:11:6f:3a:3b:
                    fe:b7:2a:62:f1:28:6a:ae:69:d3:f5:f5:43:2b:91:
                    3d:30:12:ee:30:60:0a:c5:b7:dd:fd:7e:af:a4:64:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:64:99:5B:90:13:9D:D0:A2:75:A9:DC:36:68:7B:0C:D5:40:66:07
            X509v3 Authority Key Identifier:
                keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:06:26:4c:c0:05:4c:e4:d6:64:fa:9b:01:8e:b8:30:d3:79:
         90:e2:0f:0b:e3:b5:56:03:e1:db:27:47:f5:06:33:49:46:fd:
         9b:20:c0:ec:61:6e:44:3d:ed:de:ab:c0:e2:11:ee:4c:d7:a6:
         b7:aa:92:15:b1:79:e0:20:10:b6:fd:bc:4d:42:e5:b2:76:a0:
         f6:0b:ae:15:14:f9:2a:33:f6:0e:08:41:10:0b:9b:e1:0e:8b:
         7d:11:d5:14:e6:1f:c7:db:ca:7c:bb:85:51:30:bd:c4:23:71:
         c1:66:30:34:d3:73:96:22:78:5b:b4:03:e6:34:22:af:44:69:
         c0:ba:6c:d3:41:bd:cc:20:ee:d6:e1:de:35:83:4b:11:33:6d:
         dc:a1:d3:18:c5:92:aa:fc:6a:1e:28:35:68:c0:8d:43:87:f2:
         a3:89:fe:d6:38:4e:48:1e:8b:72:78:0a:cb:a3:2b:14:4a:50:
         0e:43:1d:a3:e2:36:2f:00:0e:95:4b:8d:56:60:8e:50:39:44:
         00:cb:e1:82:15:51:1b:7d:2d:fd:e6:c5:49:b2:43:7f:6e:b5:
         5b:6b:76:97:16:c6:a5:6f:9b:68:95:18:e3:74:98:e5:1a:36:
         0d:27:bf:b3:6e:b1:e7:1f:cc:83:ea:1e:94:2d:5c:24:7e:65:
         e7:54:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:59 2026 by rpki-client