Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
File:                     4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json)
Hash identifier:          E/MoCSQm20PaCzcw56wUw3hNdX3km8VxZb84YEZjay8=
Subject key identifier:   28:45:4B:0B:1B:66:DB:27:D1:12:22:D3:4C:9E:2B:39:4E:AC:DF:53
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Certificate issuer:       /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial:       0E49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
Manifest number:          0E26
Signing time:             Thu 16 Apr 2026 17:45:44 +0000
Manifest this update:     Thu 16 Apr 2026 17:45:44 +0000
Manifest next update:     Thu 23 Apr 2026 17:45:44 +0000
Files and hashes:         1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: cGXGPXSosruXhMHe7KQG6cZQQX+BQSMqg+p8SCyOQoA=)
                          2: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: GBvJaOYF1545b8b+gOGrGQUjqqr8+5hiMjlmvxSFrPM=)
                          3: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: nJEq5dcjdbygkdzbWZ20NZb/kFcLm8+8wcWhp21gyU8=)
                          4: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: qBZYKamMj/oDU4E6eK9pTMccppq/DCgF8vxu2spcuiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3657 (0xe49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
        Validity
            Not Before: Apr 16 17:45:44 2026 GMT
            Not After : Apr 23 17:45:44 2026 GMT
        Subject: CN=69e12048-a544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:28:7a:fe:c6:e3:10:70:a2:93:2a:6c:0c:
                    e3:23:3c:22:0e:05:03:02:aa:c8:bb:57:57:6b:cd:
                    f2:96:b4:e8:19:fa:55:95:8f:f6:d5:eb:1e:eb:b8:
                    d6:9c:94:2b:4c:ed:f0:9d:bb:31:71:91:82:43:13:
                    5f:80:36:13:36:e8:a7:65:2e:14:08:9c:4d:47:88:
                    0e:5b:0a:3a:19:a9:52:1f:f0:18:2d:05:66:fd:c0:
                    e8:8f:ea:b9:8a:94:07:65:30:40:c9:c8:7f:4f:c3:
                    00:eb:37:2e:73:ae:d8:d0:3f:26:2d:4e:2d:86:95:
                    2f:fd:8b:7f:04:a5:4b:dc:68:2e:c6:dc:33:48:68:
                    08:f3:f6:b9:5f:cd:69:f5:0e:cb:30:ff:20:3e:96:
                    f9:08:aa:ae:f4:7d:90:51:40:d2:e2:d3:31:3a:e9:
                    da:18:4d:cf:ff:c2:46:1e:e3:10:23:d1:0a:ee:1d:
                    ec:82:b8:be:12:1c:a6:a9:c1:1d:b7:39:e4:75:4a:
                    83:67:01:f0:b4:8a:fe:b3:f1:22:c5:42:b9:73:b8:
                    fb:c5:ec:5b:60:b5:ef:5d:28:da:35:4d:dd:c6:a1:
                    5b:48:d4:96:d7:ee:c3:b2:3a:7f:11:c9:a4:a9:c6:
                    e4:a6:a5:76:bf:e6:f9:6e:c5:51:e5:6c:7d:6f:7a:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:45:4B:0B:1B:66:DB:27:D1:12:22:D3:4C:9E:2B:39:4E:AC:DF:53
            X509v3 Authority Key Identifier:
                keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:9e:1d:4f:8c:3b:5d:ab:77:e6:ab:86:d8:42:bb:00:3b:
         eb:27:c6:ad:21:7c:3a:66:a7:fa:46:ea:82:07:20:26:b4:c9:
         53:1e:78:78:cd:ff:cc:f9:fb:0e:df:ed:8c:40:11:3d:8f:14:
         c8:82:3a:9e:8e:c7:74:32:ee:aa:12:cf:63:81:e3:17:a2:ac:
         31:22:be:ac:05:a3:6b:4d:d6:ac:60:80:c0:78:07:ad:5b:12:
         f0:fd:77:7f:61:2a:c1:f5:03:66:2c:62:ff:b2:56:e7:3d:25:
         10:9b:32:4d:fb:e0:7a:ad:c7:06:59:ef:d5:90:01:14:00:a4:
         d3:cb:59:08:48:d6:b8:2b:b3:44:ad:63:36:02:19:64:fa:a6:
         b4:8e:8d:0b:8e:14:06:75:c0:bb:c8:62:f7:0d:4e:26:15:b9:
         79:9b:01:83:ce:be:7d:3c:b1:d2:5d:d5:fd:65:90:da:de:eb:
         0d:1e:77:04:82:f9:dd:f8:19:79:97:4b:1d:99:ac:bf:26:2a:
         b0:46:48:7f:8b:85:ce:d9:df:da:f9:09:34:dd:11:b7:54:ab:
         b5:5a:4d:93:e4:5a:91:46:97:38:dd:47:f6:96:87:a8:42:b5:
         fc:2b:52:d9:c3:89:57:05:7d:78:77:8d:7f:ec:6f:30:e1:3d:
         f6:54:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:06 2026 by rpki-client