Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File:                     cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier:          I9n275XQ3Fu/gguO+tXtglYdRvhhjJZoTos+Ys39pMk=
Subject key identifier:   98:68:53:38:A0:DD:B0:44:A3:70:EA:5C:30:B8:56:E4:08:6A:31:13
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer:       /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial:       0FFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number:          0FE5
Signing time:             Sat 08 Aug 2026 17:23:34 +0000
Manifest this update:     Sat 08 Aug 2026 17:23:33 +0000
Manifest next update:     Sat 15 Aug 2026 17:23:33 +0000
Files and hashes:         1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: DGbOWpOoxOrx3KrZsYykEihvVzWx1CVEu75kjCRhT60=)
                          2: oReYY3U_uAerOA1RBd6AfkOH-Qs.asa (hash: DmMFlOH0x9CBXu3QawMuTIKK4RotGJe3cmBZrESz284=)
                          3: 76C782CC836811E9B8830935C4F9AE02.roa (hash: FZ9WjrL5+VtnGr4MpsQD7BeQfVLvm8j2z6Poj/AmVsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
                          rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 17:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4093 (0xffd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
        Validity
            Not Before: Aug  8 17:23:33 2026 GMT
            Not After : Aug 15 17:23:33 2026 GMT
        Subject: CN=6a776616-9dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:0e:8f:01:7c:46:36:66:a9:37:b0:8d:58:
                    95:12:02:cb:e5:c0:62:2d:a2:2e:06:a6:81:2f:f4:
                    24:1d:df:8c:1a:cf:a5:7f:d4:60:82:34:c5:e2:96:
                    6f:03:f5:17:6c:f4:d6:38:10:5f:0d:af:ab:42:09:
                    ef:93:94:df:1b:e8:d6:bc:65:e6:f6:ec:d5:b3:54:
                    57:2e:61:ca:c3:25:19:e0:de:80:2d:46:1d:c0:cf:
                    a2:c9:0c:6c:2e:9b:33:f9:1f:5f:f7:5a:e4:9c:f0:
                    1b:40:20:66:21:62:49:c6:64:9a:71:52:d1:43:ed:
                    9f:be:b1:a5:ca:e3:6c:81:23:56:24:d7:72:0d:17:
                    03:98:03:ba:28:75:94:08:5d:9c:21:42:90:df:9e:
                    4a:9c:9f:b7:5a:7b:ad:1e:b9:4d:ed:74:21:4e:f0:
                    3a:76:c2:84:69:f0:d3:13:bb:64:c6:cc:97:5b:c1:
                    a0:f2:e1:bf:e1:85:73:18:22:1b:f4:53:bb:e4:1f:
                    7a:3d:d3:63:e6:ee:4d:34:08:e4:f9:85:9c:8b:ec:
                    60:6f:55:40:ea:fd:c5:f2:07:a8:1c:b6:cb:91:e1:
                    9d:46:6f:e9:74:50:27:bb:96:66:70:07:3b:3b:7c:
                    28:e3:66:24:70:72:24:1b:3e:9e:45:e3:0f:f0:8e:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:68:53:38:A0:DD:B0:44:A3:70:EA:5C:30:B8:56:E4:08:6A:31:13
            X509v3 Authority Key Identifier:
                keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:2f:4b:32:9d:bb:2d:ef:6e:aa:1d:6c:70:51:e9:cd:c5:35:
         ee:dd:b1:9b:d4:d7:36:e9:ef:51:1c:d6:79:61:e4:b0:9c:16:
         15:f2:f4:5f:41:2b:a3:ee:10:b3:82:89:72:4d:56:60:be:b9:
         c0:a0:13:4e:f8:99:7d:e1:15:c6:aa:77:6f:51:3e:4b:00:05:
         6f:fe:d9:d2:63:4c:b1:ab:ca:cb:4d:92:32:fc:bb:c0:e1:4e:
         f8:5a:5d:db:28:a1:bd:51:a8:52:8c:aa:96:4c:40:6b:ab:ca:
         81:fc:13:c9:80:ea:e1:7a:23:54:b0:4b:0c:50:9c:bc:38:93:
         9c:0c:70:8d:08:2d:28:8e:96:b4:c7:96:d5:1d:31:6b:49:41:
         c1:92:c2:42:8f:ce:29:e6:e7:87:90:aa:e4:5d:df:1b:2e:1b:
         7a:b0:be:da:55:a2:b1:96:86:e6:d2:92:9b:3a:50:2c:b0:0a:
         b6:5e:83:35:97:50:ab:49:89:c2:9e:3b:88:93:b7:23:d5:66:
         d5:c8:50:e9:73:bf:c6:f4:c0:4d:62:06:2f:c0:ff:f7:86:91:
         f4:01:0a:c5:38:22:0c:95:e1:b6:4d:75:49:31:3c:e5:fc:ee:
         3b:45:e5:71:4c:d2:02:70:fd:0b:e2:10:72:7c:c9:b2:fc:88:
         c4:05:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 00:19:54 2026 by rpki-client