Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File:                     4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier:          FXP8mha7/PkJtRMQm7rsskKBTGlRKQR3Sl1u6FGdwpw=
Subject key identifier:   3C:7C:8A:BC:19:24:00:13:97:18:B3:80:4B:D5:5C:BD:AF:46:3F:89
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer:       /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number:          04
Signing time:             Sat 13 Jun 2026 09:18:29 +0000
Manifest this update:     Sat 13 Jun 2026 09:18:29 +0000
Manifest next update:     Sat 20 Jun 2026 09:18:29 +0000
Files and hashes:         1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: waLzbEHRAotKsZbS/9HYv+SgMFPvDDQCnqz2SroOWWU=)
                          2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
        Validity
            Not Before: Jun 13 09:18:29 2026 GMT
            Not After : Jun 20 09:18:29 2026 GMT
        Subject: CN=6a2d2065-37e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:a1:9e:f9:b5:43:79:c2:f1:d3:99:ca:a8:
                    0e:1b:f6:91:97:67:15:41:d0:7a:73:00:1c:a8:00:
                    26:90:35:94:4e:b8:92:9f:57:2e:90:f8:a8:11:33:
                    cb:88:44:f6:f6:c1:98:8f:63:24:22:fa:50:17:66:
                    03:20:b1:e1:b9:c6:16:c2:d0:3d:c9:94:80:97:0a:
                    4a:94:2a:a2:c8:82:29:cf:fe:dc:cf:5c:68:30:74:
                    e1:3b:06:58:a3:96:6c:f5:29:74:90:86:a9:e1:4b:
                    2a:9f:ae:92:92:4e:d7:92:4b:37:59:60:ef:6e:6f:
                    99:fc:56:31:b0:9a:6d:37:aa:f1:79:20:00:9b:58:
                    59:df:b4:15:6d:6a:96:3e:84:16:44:c7:47:e5:1c:
                    1d:5b:4a:88:e3:f1:52:3e:8e:7d:b7:94:0d:e4:93:
                    9b:af:b7:a9:87:22:a7:ae:d9:09:6a:b3:27:85:c1:
                    c5:54:7f:7c:9c:20:db:f3:ac:45:85:29:4d:19:b2:
                    60:28:43:b8:a7:80:96:eb:9b:bd:30:0f:30:ef:d1:
                    e8:85:2e:d2:a9:e5:b9:f4:17:dc:05:d2:0c:c1:d3:
                    07:7f:e9:97:e0:6c:64:80:e1:8f:7b:0a:5d:05:fd:
                    30:70:49:b3:97:7a:f0:d0:ab:7e:90:b0:23:d1:db:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:8A:BC:19:24:00:13:97:18:B3:80:4B:D5:5C:BD:AF:46:3F:89
            X509v3 Authority Key Identifier:
                keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:14:2a:9e:7e:97:06:1f:51:34:cd:73:8a:9c:19:27:c7:
         2e:ad:d4:53:a2:44:5f:14:52:ae:de:f2:1c:21:cc:f7:cc:5f:
         8e:50:e0:40:52:bb:b7:a8:27:c7:36:7f:21:02:b3:7c:8e:c9:
         db:4b:b9:6e:50:a4:a8:39:5e:9e:34:c1:d9:eb:3b:70:cd:81:
         57:f4:27:55:35:f6:ff:ba:88:ca:c4:a5:6a:80:fd:ad:8c:47:
         60:f3:96:82:db:0a:89:18:87:e8:15:2f:62:f3:28:41:51:7f:
         76:03:8d:84:74:f4:a5:94:de:26:23:7b:4b:05:bb:f4:4e:ba:
         98:df:50:f5:30:a4:d8:8d:73:d0:af:55:8c:33:f2:10:bf:d8:
         a3:c8:34:62:2e:d0:18:6c:67:b6:8a:1b:2e:b1:04:2f:73:58:
         0f:37:90:1b:dc:02:6f:d0:a5:69:67:57:5a:cd:f7:fe:90:d6:
         92:c2:f8:12:b8:82:0f:d5:51:13:2e:d9:47:d9:0c:d6:a9:56:
         db:ce:14:74:43:f3:2c:1b:97:95:1b:1c:00:63:16:fa:fd:21:
         dd:4c:7e:f1:b4:6a:a0:bd:a5:33:1b:00:0d:a9:e3:89:bc:61:
         9e:1f:84:44:81:ca:da:fc:81:07:f1:d0:41:51:0a:34:e9:f0:
         4b:cc:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:08:10 2026 by rpki-client