Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File:                     4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier:          1ftZQ4p6MDguuFfADyfoUJqviUIFnrctUSqMzRv0jm0=
Subject key identifier:   42:F2:C8:D1:C2:DC:5F:AA:B0:29:68:21:1D:3E:93:99:4D:27:DC:08
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer:       /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial:       05D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number:          05D2
Signing time:             Sun 26 Jul 2026 23:54:16 +0000
Manifest this update:     Sun 26 Jul 2026 23:54:16 +0000
Manifest next update:     Sun 02 Aug 2026 23:54:16 +0000
Files and hashes:         1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: U9GgxSOE/AbF+vLW3krcedS4d+OVT64GTCvsCH0gnoc=)
                          2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: WdImnCcnZcMtzi9Kuo/0VUvS1a6vE4XzsB1x3n+OVA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
                          rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
        Validity
            Not Before: Jul 26 23:54:16 2026 GMT
            Not After : Aug  2 23:54:16 2026 GMT
        Subject: CN=6a669e28-ec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:c3:28:dd:51:36:e2:d7:ce:27:fc:76:17:
                    6e:b7:66:92:bc:08:59:dc:dc:7d:87:44:53:14:f0:
                    54:fd:48:9e:90:3c:6c:47:8a:7b:a0:32:69:b6:60:
                    75:35:89:f5:bd:0e:c0:b8:48:ac:db:6d:37:c7:23:
                    85:69:87:a0:23:ee:6d:44:5c:61:23:e1:a3:ab:24:
                    be:37:f3:31:e3:b6:99:9a:9c:ec:db:12:84:2d:c0:
                    05:04:72:a8:16:a6:81:b8:f1:33:09:fc:60:e2:da:
                    f0:01:50:42:f5:e5:e9:f4:8e:f8:06:b5:d2:d6:ed:
                    67:c2:89:58:94:2e:8a:c1:8c:fb:34:c7:97:9e:90:
                    bc:c7:57:5c:e2:8b:32:2f:12:06:02:df:08:0b:97:
                    7a:e3:de:75:77:58:47:08:be:e3:2b:b2:8f:7a:99:
                    30:96:98:f2:30:99:43:98:8c:72:8d:e9:9c:75:0e:
                    07:e6:8a:d9:d6:61:7e:b5:69:58:fb:c1:38:e3:4b:
                    c7:06:c8:c1:a9:f5:a9:f2:50:92:4c:c3:47:a4:54:
                    71:78:81:83:11:3e:c6:ff:38:1d:2a:6a:c3:7e:3b:
                    eb:d0:0b:db:4a:f7:c2:2b:39:7b:db:14:b4:f1:ca:
                    ce:b9:f1:54:79:88:40:c0:3a:0c:e4:4a:63:ef:0d:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F2:C8:D1:C2:DC:5F:AA:B0:29:68:21:1D:3E:93:99:4D:27:DC:08
            X509v3 Authority Key Identifier:
                keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:79:ba:1c:77:28:46:d2:d1:40:c6:f0:2f:28:68:e6:5c:dd:
         96:1e:28:65:cd:8e:d6:72:3b:db:39:38:8c:01:49:64:64:a4:
         28:ef:2e:4c:c7:13:50:bd:d0:fa:11:ba:64:5d:69:64:f3:bc:
         5f:18:0e:98:5e:82:66:56:0b:98:80:15:95:cf:e2:25:60:54:
         e0:af:a3:f2:ae:04:ed:e7:de:1e:b0:b3:41:e9:e7:e0:51:d0:
         2c:06:ce:f7:b8:bf:85:95:98:85:32:35:ea:37:c7:6e:fb:d5:
         47:90:f4:3f:76:19:6a:5e:d7:10:ce:23:bf:83:97:c9:9b:7d:
         a1:0f:38:24:f6:bd:f9:be:2c:73:e9:80:4e:9b:05:da:1b:96:
         b5:c4:c2:ba:76:55:e7:27:46:78:2b:70:36:ff:f1:8f:8d:f2:
         1f:a8:50:e6:78:77:03:22:20:56:db:9b:12:eb:2b:27:b6:a9:
         37:ce:98:67:e1:e8:e0:98:e4:89:25:ca:96:6e:fc:9f:f9:26:
         75:f2:3f:aa:65:b1:86:b6:21:34:82:d2:10:3b:03:d1:94:e8:
         ee:22:e7:b9:42:95:ae:47:e5:f2:16:aa:aa:d7:ed:ce:70:5e:
         79:75:97:a3:40:6f:2e:04:6f:fc:53:1f:5f:b0:4a:69:19:2e:
         08:5a:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:05 2026 by rpki-client