Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File:                     4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier:          eQnPouqkfGx/3FlB9gyRGWHkqTS/AYQ2o1xJIX23QMA=
Subject key identifier:   A1:4E:85:A0:95:E2:F8:36:BD:AB:DF:FB:09:6F:BE:8E:D6:51:2B:E2
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       0559
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number:          054C
Signing time:             Sat 18 Apr 2026 23:22:19 +0000
Manifest this update:     Sat 18 Apr 2026 23:22:18 +0000
Manifest next update:     Sat 25 Apr 2026 23:22:18 +0000
Files and hashes:         1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: Uosfz/yB2YpKDn/a15tmOeC1RDRrTxn9/bHNO7BQon4=)
                          2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=)
                          3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Apr 18 23:22:18 2026 GMT
            Not After : Apr 25 23:22:18 2026 GMT
        Subject: CN=69e4122a-4e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:95:0c:bc:71:b6:68:bc:b1:f0:c3:f8:44:
                    49:c0:c9:c3:22:ac:d7:16:b5:e1:6c:f8:48:bc:df:
                    47:80:69:e4:89:36:e5:9a:43:a7:75:3e:af:86:2c:
                    f5:10:6b:3b:c2:5e:6e:c4:9f:ac:98:48:91:1f:fa:
                    79:5c:48:9c:58:30:b0:b1:ff:73:4c:52:c3:a3:b0:
                    54:f7:08:01:a1:0c:18:ee:d5:23:b7:66:8a:60:23:
                    ba:ad:a4:a9:26:9d:60:82:dc:2f:71:86:57:c1:16:
                    2f:42:2f:5d:a5:0b:31:bd:4b:ec:3c:57:da:23:82:
                    af:5e:14:c6:0a:37:ec:a2:28:df:65:e2:af:00:fe:
                    23:a5:a4:29:de:88:cc:11:dc:e5:43:ed:c3:44:db:
                    a3:27:0b:ad:42:2c:4e:a0:08:b6:a4:a6:c6:34:ce:
                    f2:7b:21:90:f0:d1:5a:59:66:d5:4a:9d:69:6a:fa:
                    90:a7:5a:88:f9:18:01:35:c2:2c:bb:80:f0:00:6b:
                    f7:b8:a8:79:3a:fe:d7:37:e5:c8:b2:9f:5d:a5:3b:
                    9e:28:1d:36:25:eb:74:40:76:b0:21:07:66:a1:70:
                    b6:41:56:06:b5:b3:12:4f:07:0f:57:c7:a2:d3:43:
                    fd:45:0c:d1:6a:14:12:56:2d:ec:83:9b:14:d7:1c:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:85:A0:95:E2:F8:36:BD:AB:DF:FB:09:6F:BE:8E:D6:51:2B:E2
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:82:e7:70:6d:3d:b5:8d:64:bd:1d:6a:84:0b:60:0c:6f:90:
         57:f3:8b:3f:10:c9:5c:0f:97:59:2f:b7:67:2d:b4:d6:0c:d8:
         f7:6b:a6:a5:9b:a6:06:02:7b:52:4b:7e:18:0c:af:47:ec:b2:
         bb:14:7d:38:63:94:15:56:c1:90:ba:38:15:98:4c:62:d6:22:
         ea:63:91:3e:b0:39:e5:8c:40:c4:5d:46:b3:62:8e:1e:ea:56:
         e6:e5:76:48:7d:00:fb:7d:69:be:0a:14:af:65:4f:d4:ea:b4:
         a4:00:8b:66:98:be:91:5c:8f:31:32:a9:bc:aa:46:16:45:3e:
         ac:49:79:2e:8a:11:96:3f:6f:16:56:b3:b0:b6:42:39:ed:19:
         ee:c4:1b:b5:61:23:0a:bf:15:f8:67:b9:98:6d:1b:1e:5f:66:
         7c:2b:70:14:7d:75:6b:1a:fd:c7:08:31:56:3c:f5:10:05:27:
         1b:b0:1b:88:a8:39:aa:64:3d:3a:da:1b:bd:bc:3f:8b:6b:4c:
         82:c5:07:3e:d8:8b:56:60:d4:65:ba:a2:02:b2:16:da:d0:86:
         6d:8c:79:a0:86:1d:9f:a3:be:a9:59:31:c3:97:6e:fa:d2:95:
         14:a7:c5:e0:ab:bb:71:13:8d:0b:d4:e6:2e:ff:cb:ea:63:2a:
         20:da:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 03:02:38 2026 by rpki-client