Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
File:                     EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft (raw, json)
Hash identifier:          yvTmI7urtiLgUWUfTjF0gKbvUPyAghKDeY8D1RN9ZVo=
Subject key identifier:   9F:1A:D3:20:8F:AA:4E:CB:E1:8F:79:C5:68:A8:B8:A8:D3:EA:FE:28
Authority key identifier: 11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F
Certificate issuer:       /CN=A91A0807/serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
Manifest number:          4A
Signing time:             Fri 17 Apr 2026 08:02:08 +0000
Manifest this update:     Fri 17 Apr 2026 08:02:07 +0000
Manifest next update:     Fri 24 Apr 2026 08:02:07 +0000
Files and hashes:         1: EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl (hash: LSie+O74M2M1HEtFPazxDHYVIZUr3dT+FN1bA3BiUEE=)
                          2: 507C7202CCBE11F0AAAC3C24C4F9AE02.roa (hash: 32SWwd/uA3kg1otVJJYx1D2OTVjSQSkyd9lnzIXFPaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl
                          rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0807, serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
        Validity
            Not Before: Apr 17 08:02:07 2026 GMT
            Not After : Apr 24 08:02:07 2026 GMT
        Subject: CN=69e1e900-f16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:59:de:d5:3c:0b:3e:8b:9a:f2:cd:50:a6:
                    3a:40:4f:32:9a:8e:f6:5c:fb:28:f4:9d:e3:c8:d6:
                    d4:74:94:d9:3f:1f:63:ac:45:c4:5a:e6:fd:2d:a2:
                    79:ac:34:17:aa:fc:18:11:ec:ca:a3:d3:29:58:5b:
                    b3:43:26:e5:bb:84:8e:3b:8c:d5:20:e2:45:d9:f0:
                    23:6f:03:ca:11:1c:35:c1:a5:24:a6:01:9a:61:18:
                    b6:c9:49:7b:b7:12:f9:2e:3b:e8:c9:6a:55:be:02:
                    e9:e0:85:da:ef:3a:02:d4:ac:ae:c1:1f:9c:f0:4f:
                    24:c5:c7:a6:7d:9e:bc:ab:4f:3a:3a:65:f1:7c:34:
                    8f:0f:56:7e:1b:d9:3b:e6:e2:4f:b3:5f:15:0d:a0:
                    60:b4:7a:ee:1d:12:99:49:24:4f:a9:46:b2:0a:7f:
                    bd:f3:19:ef:0c:93:48:7a:e9:64:0b:be:1b:74:ea:
                    be:af:9d:a0:e9:81:1b:8e:34:9d:02:1e:38:1d:cc:
                    74:35:d9:49:2a:e4:bf:1e:b2:c0:f8:86:df:8d:9b:
                    a6:ed:75:38:fa:dc:16:cc:0c:74:6e:e1:49:87:ba:
                    f3:9d:24:2a:7d:05:12:8b:ab:9d:24:18:7b:d6:fa:
                    63:42:84:4e:de:e3:df:b7:ba:ca:e8:98:a1:d9:60:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1A:D3:20:8F:AA:4E:CB:E1:8F:79:C5:68:A8:B8:A8:D3:EA:FE:28
            X509v3 Authority Key Identifier:
                keyid:11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:81:a6:dd:37:19:3f:78:51:cf:47:3d:11:45:63:e5:a8:ea:
         ae:a8:34:77:dc:c9:2c:f0:21:d1:95:84:02:7f:e5:63:9a:2a:
         9e:89:bd:cf:43:db:e3:1c:c5:7d:50:5c:28:8d:d3:b1:88:d5:
         c4:38:94:b2:2f:b7:e9:40:bd:c1:fb:1a:6e:dc:20:8e:12:18:
         01:b4:7e:98:52:17:05:98:da:1c:f6:76:39:92:a5:ce:f9:9e:
         31:ba:0a:9d:01:9e:a8:dc:a5:f8:73:0f:ea:f2:54:f1:f2:a2:
         84:5c:a2:f1:30:c9:7b:6c:91:e5:be:5e:b2:77:9b:a5:b2:20:
         cf:1e:f6:35:3c:4a:55:e7:88:da:22:d9:36:62:53:46:c1:f4:
         02:a1:62:86:56:62:e5:05:68:65:73:aa:96:1a:6b:33:71:62:
         a5:58:26:0c:ca:e0:ae:a9:14:eb:95:89:1c:13:a3:6e:51:2d:
         a7:d5:75:3d:9a:26:d3:b1:2b:b3:56:0c:51:18:4e:18:e7:0d:
         b6:c0:6a:73:f1:2f:d2:9d:db:78:ce:2a:76:d0:5c:55:da:4b:
         53:58:7d:90:83:7e:4c:ad:a9:93:45:71:3d:e3:0e:1b:73:b2:
         d7:c7:b0:6e:14:f6:eb:f6:99:89:ef:6a:0b:a6:cb:a2:68:ad:
         41:99:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:49 2026 by rpki-client