Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File:                     4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier:          GWljYT6PHVpTzumjY3N5eigNc6fhGz0VxGQI8mtJLcw=
Subject key identifier:   D5:8B:4E:04:53:5C:5B:E7:63:B7:EE:98:91:4D:FE:24:87:E3:BE:95
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer:       /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial:       058B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number:          0587
Signing time:             Mon 02 Mar 2026 00:22:25 +0000
Manifest this update:     Mon 02 Mar 2026 00:22:22 +0000
Manifest next update:     Mon 09 Mar 2026 00:22:22 +0000
Files and hashes:         1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: BIJ82p9nUuKdx01JgtVkvyDgsc+cpevFRX0Is8ivlxs=)
                          2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: WdImnCcnZcMtzi9Kuo/0VUvS1a6vE4XzsB1x3n+OVA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
                          rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
        Validity
            Not Before: Mar  2 00:22:22 2026 GMT
            Not After : Mar  9 00:22:22 2026 GMT
        Subject: CN=69a4d841-68c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:30:e0:fd:21:90:7f:de:9d:4f:fe:e2:18:
                    b6:ae:23:68:ff:20:d3:2f:6a:76:56:70:66:11:bc:
                    1e:6e:cf:cc:4b:fb:ed:e5:93:92:01:2e:e4:5f:08:
                    4f:43:e8:3e:ff:30:00:f2:eb:50:a3:a5:f4:da:1d:
                    f2:86:06:44:03:47:60:63:0f:1e:5e:87:db:ee:c9:
                    96:7f:2d:f3:43:d3:29:ed:13:e9:a3:5b:38:c1:1a:
                    e3:89:e2:55:fb:1d:d6:46:8e:de:50:6b:6c:46:61:
                    05:08:cd:ed:7c:a9:3b:56:e1:d1:d1:e2:3a:cd:d4:
                    b1:99:9f:8c:3b:14:6e:28:96:36:cd:f2:b7:fe:6b:
                    29:77:f0:8b:54:b5:5d:02:10:99:2f:37:5c:15:26:
                    16:88:da:d5:37:6a:bb:17:17:2b:bd:d1:35:49:a0:
                    eb:b7:d0:8c:78:79:25:d8:38:e7:a5:8a:19:13:9f:
                    7e:ca:af:77:95:08:3e:df:d9:3f:0a:5a:22:13:e9:
                    a8:8d:30:05:6d:4b:a5:7c:e9:81:4f:0d:a7:de:b4:
                    fb:60:2a:2b:b4:27:6a:9c:9a:00:5f:32:8d:b9:0f:
                    b9:5a:87:63:50:f1:cc:d3:d0:3c:d6:e0:9a:84:e3:
                    6c:50:0b:4f:5a:82:1d:14:f8:61:e0:b3:ec:08:19:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8B:4E:04:53:5C:5B:E7:63:B7:EE:98:91:4D:FE:24:87:E3:BE:95
            X509v3 Authority Key Identifier:
                keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f3:54:14:b6:a0:33:ab:39:bc:57:55:64:42:ab:19:f5:f4:
         4c:54:d6:53:06:0c:bc:fd:ea:c8:66:22:25:b8:6d:da:a0:76:
         f9:b1:b1:0a:d2:f0:aa:12:8b:b3:de:c5:af:05:b0:5b:91:4d:
         ef:0c:7c:e9:a1:95:07:1c:ad:83:3a:d3:eb:11:fa:49:74:47:
         5d:4c:73:3b:63:f2:91:e9:86:80:54:ad:2a:fe:8f:aa:ca:5e:
         48:57:f3:9f:4c:86:fc:c4:d8:ae:e6:1c:86:f3:6e:d0:84:74:
         e5:a1:69:4b:65:cc:da:6e:9b:fd:45:ee:75:b9:b3:6a:9b:6e:
         31:ba:8a:ef:2e:f1:53:68:32:e2:ac:fb:ce:d7:d2:5c:ea:07:
         33:c6:88:a2:97:a8:50:34:cb:2e:67:42:55:79:0b:ea:d5:ce:
         78:a6:8b:4f:e5:f4:1a:d0:20:cb:c7:50:33:d4:da:06:44:b3:
         f3:45:e8:90:d6:6a:c0:47:0b:14:4c:2f:db:b9:70:db:d7:2c:
         d9:86:54:61:56:ee:d7:47:d5:b8:b6:37:2a:86:5b:cd:06:4e:
         45:10:c9:fc:c1:28:b7:c3:af:f8:23:f9:06:9f:48:0b:63:c8:
         1a:2a:46:d1:b2:1d:76:06:b3:e2:13:50:d6:6b:2e:35:c0:4b:
         4b:a4:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:38 2026 by rpki-client