Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File:                     4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier:          MfF1cV09kcB8QkYuY+dJRlJRdg4Xmu741QGnScJk78s=
Subject key identifier:   F9:A3:F0:D5:63:46:EA:CD:FB:DF:72:E1:EC:DC:20:DF:90:3A:03:ED
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       057A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number:          056D
Signing time:             Mon 22 Jun 2026 23:25:38 +0000
Manifest this update:     Mon 22 Jun 2026 23:25:38 +0000
Manifest next update:     Mon 29 Jun 2026 23:25:38 +0000
Files and hashes:         1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: oV9L/X4h2Tjlxb10TYGi6RFkeyO/VGE0PG06Xknuz/M=)
                          2: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=)
                          3: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Jun 22 23:25:38 2026 GMT
            Not After : Jun 29 23:25:38 2026 GMT
        Subject: CN=6a39c472-16be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:88:b5:07:e0:16:5c:41:41:f3:43:34:c7:
                    9f:ff:1e:04:8b:32:ce:32:bc:16:e3:25:17:dd:e3:
                    02:64:4c:e2:8b:4e:da:93:9b:c1:f6:bb:aa:30:09:
                    6b:2c:0f:eb:f1:3a:de:19:e6:e5:2d:32:32:f2:39:
                    a5:51:60:08:b4:7d:6b:fe:54:f2:34:93:a9:e3:8d:
                    67:6e:31:21:25:5f:70:d8:5c:83:31:d3:dc:c8:c8:
                    c0:b0:ef:06:2b:89:aa:04:69:4e:85:1d:ee:10:00:
                    22:d2:5a:6d:6a:5d:eb:41:74:21:e1:c9:f9:77:ae:
                    4d:50:c5:6c:b2:57:80:41:a1:e5:aa:15:65:99:e4:
                    09:ea:d2:36:7e:73:25:0c:bd:51:f3:c8:00:6c:2a:
                    17:9d:4b:6f:15:06:d3:63:26:02:be:6e:23:06:34:
                    7b:40:98:ad:62:30:b4:43:03:53:a7:04:8f:1e:33:
                    2e:d0:94:37:1c:66:7f:bb:a5:b0:a9:df:42:b9:8a:
                    2e:12:71:c3:16:b9:72:11:c0:41:a4:df:2c:05:cb:
                    3a:47:59:fa:db:9e:4b:11:2f:dd:e0:11:78:74:02:
                    6b:45:c7:6a:87:48:b1:43:78:92:9c:c5:37:a7:d6:
                    5f:32:5d:5f:c6:a5:26:e4:40:3f:1a:e3:e5:27:8f:
                    55:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A3:F0:D5:63:46:EA:CD:FB:DF:72:E1:EC:DC:20:DF:90:3A:03:ED
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:be:ba:9c:94:26:86:69:67:88:61:6e:98:23:1f:e1:cd:b3:
         2a:8c:9c:c4:3e:d2:07:dc:54:e7:02:eb:b1:cb:76:30:04:66:
         04:85:3e:d1:d0:a7:6c:15:1b:9e:98:8c:9d:08:c1:9e:fd:4a:
         1d:5e:ae:2c:5c:90:97:ef:6d:45:e5:b9:50:15:b4:b1:7a:9f:
         cf:72:42:92:bc:fb:60:24:8b:f1:15:e2:d7:18:da:1d:46:e6:
         20:17:6a:f4:17:d7:fd:5c:88:21:b2:d3:c4:be:95:38:ad:1e:
         36:84:25:50:c7:61:14:20:12:29:91:dd:ec:5f:c8:be:a2:81:
         64:be:2b:60:d5:ce:93:15:04:f0:e0:19:c2:61:b8:b7:87:22:
         eb:f7:aa:90:14:68:f6:c9:e3:74:15:dc:3d:1f:67:15:9b:12:
         ca:bf:36:40:c4:f8:51:64:eb:ba:8c:2e:1e:42:89:ff:38:90:
         ad:76:d4:1b:6c:c9:f6:c6:10:38:97:2e:38:f2:8b:f2:a5:4f:
         c1:4e:f4:0a:cd:1b:5b:02:21:ba:05:a4:72:c0:34:a4:c0:25:
         e2:0b:bc:7e:5d:d1:15:e7:7d:42:15:93:e9:2d:c1:b9:b3:aa:
         67:30:05:78:34:52:9c:52:08:0d:cf:b4:3d:30:e3:8e:df:55:
         1d:90:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:33 2026 by rpki-client