Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
File:                     4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json)
Hash identifier:          tA8X9k77izMKylSJVM5YrhdRKNkTVqx8zv4GXicmAh4=
Subject key identifier:   A7:27:F6:E2:16:85:4F:F0:88:31:E0:FE:C9:BB:BE:1F:46:CE:0E:91
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Certificate issuer:       /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial:       0E56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
Manifest number:          0E4E
Signing time:             Wed 20 May 2026 17:47:08 +0000
Manifest this update:     Wed 20 May 2026 17:47:07 +0000
Manifest next update:     Wed 27 May 2026 17:47:07 +0000
Files and hashes:         1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: Ml5R5/JOyjAuqAL6MHyguoUjVIb8g02sE8WBU9dVns4=)
                          2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: QV4VcOWMjw2Q8agZQUCaZHMoZiK398hrWlFAisrLEf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3670 (0xe56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
        Validity
            Not Before: May 20 17:47:07 2026 GMT
            Not After : May 27 17:47:07 2026 GMT
        Subject: CN=6a0df39c-193e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:67:af:1b:0d:66:b7:e7:75:39:d3:12:b8:
                    86:ec:18:68:65:04:b4:33:ba:78:6f:36:19:35:6c:
                    fc:d4:19:f9:e7:3a:0e:d7:b9:e1:05:50:65:ee:5a:
                    b6:f7:ec:e8:59:f6:5b:d3:24:cb:11:2a:64:c4:59:
                    47:22:d9:97:a7:d5:42:9f:b8:6a:7f:b9:8e:06:11:
                    1c:94:a5:0c:70:b1:26:21:61:c3:3a:0c:84:53:da:
                    f9:db:e8:3a:7a:a4:5d:1a:96:74:fd:e0:10:41:65:
                    c7:e9:a2:76:d9:e0:0b:e2:4a:34:5f:78:df:b3:44:
                    80:ec:f6:c8:38:63:5e:27:13:a9:9f:88:dc:88:d5:
                    04:b5:5a:35:72:60:d9:76:61:a5:6b:4c:3a:f2:5d:
                    d1:16:0b:26:4b:d5:79:6d:0a:7f:e1:67:d1:3a:e2:
                    62:2a:a0:ad:eb:69:b0:80:a1:e6:cf:b8:71:71:4a:
                    3e:a6:9e:23:a0:39:fb:2f:6c:18:6a:e7:20:a1:6a:
                    dd:af:a0:2a:6c:58:1d:4c:1d:c0:5a:41:50:e5:6a:
                    5d:c9:c5:62:97:61:86:36:23:fa:93:bb:9e:82:f5:
                    89:8b:bb:c2:6b:3b:a5:4c:44:08:ea:2d:2e:94:a9:
                    be:bb:d4:12:c4:c6:65:87:f2:a7:d6:ce:63:f6:bc:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:27:F6:E2:16:85:4F:F0:88:31:E0:FE:C9:BB:BE:1F:46:CE:0E:91
            X509v3 Authority Key Identifier:
                keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b6:1b:6e:7d:2f:b0:b6:1a:3f:10:a9:c9:d5:96:e5:c2:7b:
         7e:64:f9:e1:36:04:58:af:af:0f:1d:ed:f5:6e:ef:31:f6:a2:
         59:32:f2:6e:ae:5b:a0:f1:c3:de:4a:96:2e:e9:2a:0e:63:f8:
         69:6c:7f:c4:be:b2:01:8c:69:0b:9e:2c:e3:66:97:c6:2c:21:
         31:e1:5e:e1:7f:4a:33:ec:6a:ce:35:e8:ca:6f:07:52:5b:07:
         94:7f:34:07:f0:c8:61:a4:61:6b:a3:9d:42:a6:da:d2:11:01:
         18:42:9b:cc:47:5b:2e:8d:2b:4a:35:ed:02:12:4e:50:f8:be:
         1d:fa:5c:e4:d6:81:fb:9c:95:c1:7a:9f:9b:72:81:53:45:90:
         d0:cb:65:20:35:d6:1e:5c:48:5a:40:0a:d7:d4:a8:c1:c8:91:
         ae:35:6a:d1:c2:9a:88:4d:ef:84:f4:ec:a2:f3:99:f1:0e:27:
         3d:0b:91:ae:cc:a3:b8:c7:d8:fb:24:62:53:1f:52:44:de:ca:
         9e:21:be:f0:f1:35:87:a4:f9:63:13:af:df:38:e1:65:86:2a:
         99:ec:46:da:6c:51:37:61:a3:45:3a:2f:a3:b2:f2:32:e9:dd:
         2a:05:6c:b7:80:28:56:84:1f:26:ba:fc:79:4f:d3:4e:2b:64:
         0c:20:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 17:09:41 2026 by rpki-client