Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File:                     4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier:          g/9lyaVWBoA+GdJEW367dH8W7rKqL2rs9E8RHofSQnU=
Subject key identifier:   E8:70:90:4D:A1:77:77:99:F7:5C:B7:02:D0:E6:E1:09:4C:FF:57:61
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer:       /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number:          40
Signing time:             Sun 11 Oct 2026 09:09:01 +0000
Manifest this update:     Sun 11 Oct 2026 09:09:00 +0000
Manifest next update:     Sun 18 Oct 2026 09:09:00 +0000
Files and hashes:         1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: NP4YuNLiWp6rYrarqFpnTEur9dljDaJlZGwaEAiRrPw=)
                          2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
        Validity
            Not Before: Oct 11 09:09:00 2026 GMT
            Not After : Oct 18 09:09:00 2026 GMT
        Subject: CN=6acb522c-8bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:ce:3d:43:b2:86:e3:be:20:96:7e:56:9d:
                    82:12:93:fd:b0:3c:c4:65:e1:54:8e:af:fa:60:26:
                    ec:f8:c5:59:05:18:d2:c2:f5:a0:0c:16:c1:43:bf:
                    76:60:36:7c:af:5d:2d:b0:61:01:7b:08:e5:98:13:
                    ce:df:fe:9f:0c:7b:1e:05:cb:50:e7:cf:38:40:cc:
                    e3:cc:cb:5b:9f:69:54:a7:cb:31:7a:0e:61:9e:9f:
                    63:c3:2e:a2:37:b3:3b:a7:67:63:9c:b8:3b:89:a1:
                    e4:71:f2:fc:02:56:44:25:3e:92:22:e8:34:0f:03:
                    6c:7b:ca:3c:5c:a6:14:c6:26:34:72:7d:34:f6:7b:
                    2a:2a:ca:cd:d5:ef:c7:40:21:95:cc:01:a1:46:84:
                    89:03:76:4a:43:79:17:74:82:d0:89:5f:06:b8:16:
                    99:33:45:16:ae:11:b3:6c:c0:cd:a9:2a:75:4d:31:
                    65:8d:d2:06:aa:4d:97:91:47:09:24:74:86:24:8a:
                    be:ec:95:cc:c9:fc:ae:9b:88:4e:4d:02:77:31:fd:
                    29:71:ca:ef:f8:9e:b4:3c:e5:7d:fd:82:44:c8:a7:
                    ff:0c:1d:2e:73:46:f5:88:bd:79:9a:34:60:e5:39:
                    34:e1:34:c6:77:a3:19:46:e8:bc:46:2f:93:d5:df:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:70:90:4D:A1:77:77:99:F7:5C:B7:02:D0:E6:E1:09:4C:FF:57:61
            X509v3 Authority Key Identifier:
                keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:1b:16:5b:42:1b:72:c6:29:7b:f8:9e:c0:81:12:a0:5d:15:
         b0:43:13:cc:20:0d:da:af:d0:3b:42:b3:d9:d2:2b:1b:d8:24:
         ef:33:6e:e7:94:d6:70:63:6e:17:00:80:85:8d:8a:b5:47:bc:
         4a:f0:28:15:0f:33:ff:fb:c3:49:b2:53:af:b8:b4:35:a3:c4:
         d0:4f:c6:93:9c:94:1e:f5:12:90:49:b5:0b:aa:9d:c1:15:df:
         74:4b:83:a8:56:4c:cd:5b:91:46:44:d4:11:fd:df:2a:28:67:
         8d:20:b1:b7:b2:0c:da:cc:6e:48:c6:48:d5:68:d4:77:3c:ae:
         21:11:f9:c8:8e:a8:3d:4d:02:4d:62:bc:59:4a:11:e5:76:a7:
         a3:93:60:ed:41:4a:6f:f2:75:61:eb:fe:bb:cc:fb:51:fc:72:
         62:e3:d5:35:d2:d4:05:eb:55:ea:0b:9b:9a:34:a2:60:4e:40:
         96:50:6a:5f:b3:06:6e:76:77:02:48:0d:08:6c:e1:37:c4:df:
         c5:de:b8:19:e2:2f:fc:42:9a:c0:ae:2f:b7:cb:80:f0:13:67:
         27:ee:72:10:1d:32:71:3d:34:2b:40:bd:46:f3:0d:d6:73:7d:
         5f:26:a7:f7:84:8a:25:f4:40:9c:d2:36:e9:77:ef:dd:92:6f:
         a4:86:15:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:01:26 2026 by rpki-client