Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File:                     4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier:          wK5fII+oNc31ZuJYKC+822TATUTDkpqfJi63chHlDW0=
Subject key identifier:   36:D1:90:5A:F8:01:73:3D:E0:26:23:6E:C1:1C:88:F4:99:31:D0:33
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer:       /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial:       05A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number:          059F
Signing time:             Thu 16 Apr 2026 23:05:31 +0000
Manifest this update:     Thu 16 Apr 2026 23:05:30 +0000
Manifest next update:     Thu 23 Apr 2026 23:05:30 +0000
Files and hashes:         1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: jLt41z7EQCvFN3IRN2wgamiHcGwBV/T3I6WPq1tC6ww=)
                          2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: WdImnCcnZcMtzi9Kuo/0VUvS1a6vE4XzsB1x3n+OVA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
                          rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
        Validity
            Not Before: Apr 16 23:05:30 2026 GMT
            Not After : Apr 23 23:05:30 2026 GMT
        Subject: CN=69e16b3b-1ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:20:36:55:18:c0:df:e7:49:5d:cd:15:2d:
                    de:c7:b4:a5:f7:95:fa:0a:2c:8f:4d:7d:9a:bc:30:
                    6f:73:bc:5b:bb:cf:9d:0f:73:a6:4e:b2:8a:4a:b2:
                    c6:5b:7d:bd:3b:2c:a1:86:43:2d:5f:46:5f:5e:1c:
                    4f:52:b8:50:ee:d2:3f:59:91:3b:2e:8d:8a:71:66:
                    b3:6c:b6:87:58:59:a7:c9:90:b4:c9:0b:11:c4:be:
                    56:f5:c1:a2:54:a7:db:af:74:f6:25:41:5b:2c:bd:
                    2b:64:0a:f1:b9:7b:13:c1:eb:5b:27:9e:ba:90:f8:
                    d1:0a:06:52:63:e7:74:34:68:fe:af:36:92:45:46:
                    c0:b6:c3:1b:69:67:70:32:62:ec:ba:6b:ce:54:d9:
                    8e:9f:ec:f9:ab:35:b0:c4:17:b0:bc:aa:a1:2b:95:
                    a5:52:ab:95:89:a0:ec:b0:41:e1:df:ad:7f:80:82:
                    81:3f:f8:ec:0a:51:97:25:d6:a4:4e:f4:6c:67:85:
                    98:16:02:c2:45:18:58:6d:75:95:5a:57:82:4d:b4:
                    33:66:9b:02:43:2b:4b:e1:1d:a8:2d:61:09:67:92:
                    e9:ac:6c:86:87:83:32:96:77:7c:54:02:80:6c:27:
                    53:aa:76:90:76:e8:e5:fc:7b:b6:a3:a1:e4:28:c3:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D1:90:5A:F8:01:73:3D:E0:26:23:6E:C1:1C:88:F4:99:31:D0:33
            X509v3 Authority Key Identifier:
                keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ea:9a:cb:6f:d9:8d:ba:7c:aa:4a:dd:bb:22:7f:77:46:6f:
         78:b7:f8:86:6a:17:b5:c4:42:6e:8f:7f:30:30:8f:d8:f6:13:
         8d:6b:2e:b9:98:04:e8:a6:d8:c0:cc:27:27:81:0d:fa:76:6c:
         66:f8:82:8a:f9:4e:b5:83:88:6d:1b:24:77:c3:ba:ec:32:99:
         f1:58:ae:01:f9:b0:5a:61:91:73:92:45:1a:17:80:f6:92:93:
         a2:bf:d2:c3:9a:64:1b:15:d6:01:4b:f9:3f:a4:50:74:4b:21:
         65:3c:67:83:f8:7d:6c:92:00:a4:22:34:bf:eb:59:59:4f:02:
         1a:04:d5:34:0e:d0:15:05:5c:41:09:88:10:b0:d8:82:01:ac:
         08:33:71:87:d1:17:9e:82:e9:55:2d:a6:f4:9e:3d:70:fb:d5:
         3a:f9:41:e4:3d:8f:d1:27:69:fe:b2:23:25:12:36:35:31:1b:
         ea:e6:c9:13:62:00:44:bb:8e:3d:46:91:35:25:1c:70:76:c3:
         aa:f3:5f:28:12:3d:9a:a7:56:5b:58:db:8b:16:c3:1c:ed:06:
         de:d0:05:ed:0d:24:eb:d0:13:26:c6:9a:7c:3f:aa:af:b0:d3:
         ae:9b:69:c2:a3:26:d6:73:c4:00:18:f5:47:7d:09:28:d8:de:
         44:13:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:20 2026 by rpki-client