Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
File:                     4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json)
Hash identifier:          /HH6ccAKAhTCAwZeaSn7rR1HNA5S80W2tQAaDmewbVs=
Subject key identifier:   0C:4E:30:22:3C:E7:36:87:7C:75:4C:C6:DA:EE:29:13:8F:52:4F:64
Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80
Certificate issuer:       /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
Certificate serial:       06B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
Manifest number:          06AB
Signing time:             Sat 04 Apr 2026 22:10:59 +0000
Manifest this update:     Sat 04 Apr 2026 22:10:59 +0000
Manifest next update:     Sat 11 Apr 2026 22:10:59 +0000
Files and hashes:         1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: Zohs42Ga0MuBgiq2EPKt9tRmM4O4s5DKRuU+pGvDvt0=)
                          2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: 7pa2URbMwRRXzMA50+PGHDb/krBWLrMS0fjPxhWy67U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1713 (0x6b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
        Validity
            Not Before: Apr  4 22:10:59 2026 GMT
            Not After : Apr 11 22:10:59 2026 GMT
        Subject: CN=69d18c73-30d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:74:17:cf:b1:75:41:9d:4d:87:48:19:d9:
                    78:a1:1d:66:21:99:01:34:83:c6:21:d0:43:ab:bf:
                    33:83:ab:24:cf:fb:7c:e5:f3:ab:b0:d7:1a:0c:2b:
                    d6:40:6e:15:e6:cc:c6:c4:8e:6b:66:5a:0e:45:93:
                    52:51:0f:f6:12:9f:2c:fd:57:bd:76:f3:16:25:ec:
                    8e:4a:01:b1:c0:a1:9b:f1:ad:2c:ec:82:43:61:16:
                    65:36:8c:b0:68:b7:11:a8:46:82:99:93:11:60:92:
                    4f:e5:d3:2a:06:98:0b:e5:c5:47:d1:0f:17:40:00:
                    94:b7:c6:e1:1c:06:ce:c1:6d:32:3f:e8:95:0f:3f:
                    f4:b4:54:21:7b:04:3a:3e:59:e1:4d:ba:b9:bf:35:
                    4d:e4:15:ac:cb:77:b0:bc:fe:48:5b:9f:18:56:8f:
                    d8:37:86:61:99:e6:78:9d:43:53:83:58:75:ad:d4:
                    b9:b7:1c:4f:75:be:8c:91:59:fa:cc:cf:70:c5:be:
                    e9:61:93:1b:25:0a:18:b0:6b:6e:31:e6:ac:76:56:
                    7c:08:0d:16:91:e5:f7:c9:d5:c5:32:21:f3:2f:90:
                    54:3c:23:50:3c:4c:a2:ba:66:0e:b1:df:0e:a0:53:
                    9b:e2:0f:b6:7b:06:05:9a:31:4d:b1:76:22:d2:81:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4E:30:22:3C:E7:36:87:7C:75:4C:C6:DA:EE:29:13:8F:52:4F:64
            X509v3 Authority Key Identifier:
                keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:16:cb:82:32:88:12:b2:c9:fc:5a:45:84:63:1f:e0:f0:
         2f:6f:4a:ac:08:d2:20:58:92:a1:67:6c:89:06:33:5b:0a:0c:
         a0:7a:db:75:d8:46:de:da:b3:bd:f0:5b:7a:c7:74:c9:5e:5e:
         28:1e:aa:db:bd:53:4c:1a:6b:13:a6:4a:8c:6d:20:da:51:f1:
         fc:73:55:c4:a0:ca:b6:3e:79:e2:90:4f:be:2b:35:58:6e:c7:
         dd:fa:96:ef:28:40:af:47:4c:a9:83:05:1d:5d:4b:27:a5:25:
         4f:29:53:9a:b7:86:01:47:ab:3d:2c:89:d3:15:94:44:7c:30:
         a1:c7:58:27:9c:20:ef:bd:62:41:44:b9:19:44:2d:b4:24:4d:
         fa:36:c7:64:28:0e:0c:7b:e1:5a:02:bf:fe:a5:88:8d:72:bd:
         71:3d:d4:99:66:34:9f:a7:89:00:84:fa:48:d0:7a:07:de:0c:
         d8:7d:c9:20:a3:25:bb:fb:cd:4f:43:65:18:f1:4d:ad:0f:10:
         51:b6:ae:48:3b:c6:8d:02:ed:bf:6b:2e:ed:af:19:77:d8:65:
         8a:40:1d:30:61:be:9a:d7:33:b5:e5:66:a1:bd:dd:95:30:27:
         1d:21:4d:70:2d:ab:d9:c4:72:0d:51:4f:dc:ee:d4:dd:56:c2:
         a7:1c:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:06 2026 by rpki-client