Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File:                     4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier:          4y4Z+C2auirFk6gTEozJU8oN8YTJ63FfJ2dF9gadXnQ=
Subject key identifier:   93:EC:DA:67:BC:85:F9:20:D3:26:65:E2:37:BB:20:8E:5D:C2:26:99
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer:       /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number:          32
Signing time:             Sat 13 Jun 2026 08:43:47 +0000
Manifest this update:     Sat 13 Jun 2026 08:43:46 +0000
Manifest next update:     Sat 20 Jun 2026 08:43:46 +0000
Files and hashes:         1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: ZX/rlWV8U97c0EUnpJPv70Ot5RAKknWQOWGMr0txJkE=)
                          2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
        Validity
            Not Before: Jun 13 08:43:46 2026 GMT
            Not After : Jun 20 08:43:46 2026 GMT
        Subject: CN=6a2d1843-966e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:9e:aa:e0:f2:60:18:1f:6e:0f:3d:f3:4f:
                    5d:31:a4:d8:62:36:0f:15:f5:87:7c:0f:a4:59:af:
                    5f:44:73:6b:c0:38:f9:87:f7:b0:53:a4:67:07:c9:
                    05:55:b4:19:37:d6:2f:51:15:9c:3e:78:44:25:72:
                    8b:64:e1:55:22:be:45:dd:d9:b7:4f:06:ae:a3:d7:
                    42:b9:54:e5:fa:27:c7:e6:4f:83:23:7c:26:ff:c3:
                    e3:09:b7:bf:25:50:df:40:8d:33:fc:64:13:01:a7:
                    d9:ea:69:60:d4:da:13:c9:dd:45:66:e2:18:07:10:
                    e4:56:b6:ec:02:a1:79:4c:e4:af:de:61:23:64:25:
                    30:28:b1:b6:d5:3a:12:3c:54:07:5e:98:d8:9c:6d:
                    16:14:93:dd:1f:4a:40:a2:48:5a:77:57:f8:73:95:
                    3a:84:aa:2d:aa:b1:c9:8d:e8:63:ca:54:28:0b:e1:
                    21:3d:18:ad:d7:50:e5:77:96:ca:87:5e:a0:cc:79:
                    9a:65:78:c1:ed:f4:99:76:10:c3:a9:27:b1:c5:22:
                    a0:c5:95:c4:3e:e2:0c:7e:6f:0d:95:58:6e:8b:de:
                    a9:6b:06:ca:72:15:b7:49:d4:b2:29:72:07:f4:a1:
                    ef:3c:a4:6d:2c:cd:a9:0f:1d:d6:85:21:cf:80:00:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:DA:67:BC:85:F9:20:D3:26:65:E2:37:BB:20:8E:5D:C2:26:99
            X509v3 Authority Key Identifier:
                keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:7d:39:09:21:4d:cd:a6:53:08:b5:65:ef:3b:0a:d1:98:
         8f:d1:e4:5c:ff:19:be:24:91:9a:da:0c:79:31:69:74:64:90:
         83:f8:cb:1d:fb:84:7b:b7:f3:f8:d3:f6:8a:a4:f7:ee:89:27:
         44:26:6c:88:85:3d:1c:d0:ae:9a:60:58:c5:97:8f:b4:9e:9b:
         26:8b:49:53:23:78:0f:85:18:e3:bb:d7:17:90:1e:25:68:1f:
         49:c2:f1:af:a0:6b:fc:40:e6:e6:bd:ab:b3:a5:57:00:cf:d6:
         f2:44:c1:5c:58:3d:5a:ac:8f:40:06:89:0e:25:cd:c1:ab:eb:
         9b:f6:e8:91:8a:29:a5:ba:70:b7:ce:a0:fc:d3:8c:a5:58:9e:
         a8:a7:e5:1b:00:4f:7b:69:6d:8a:b8:79:22:9b:ab:39:3b:8f:
         00:21:c6:1b:cd:20:6f:75:56:27:27:0c:15:57:2a:d7:4a:49:
         b1:f4:de:84:a9:4a:f8:dd:cc:98:46:d3:f0:0c:9f:cb:bc:75:
         30:81:fa:c6:10:a9:90:1e:5d:ed:8c:2f:ae:08:df:8e:7a:44:
         39:cb:95:fd:bc:83:e5:2b:ac:eb:7e:93:dc:ad:8f:86:76:31:
         cf:9e:02:a5:f6:b7:b0:df:5c:9d:24:40:61:91:e6:77:36:3e:
         50:f2:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:25:49 2026 by rpki-client