Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File:                     B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier:          5IY16nQ/xtl7WHLe7PZ2OwpYxF8gkStIDvjXz129y7c=
Subject key identifier:   BE:C3:12:4E:E5:61:82:AB:B6:26:C6:D1:85:D7:7E:2C:4C:4E:F3:9E
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1EEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number:          1EC4
Signing time:             Sat 18 Apr 2026 15:59:07 +0000
Manifest this update:     Sat 18 Apr 2026 15:59:07 +0000
Manifest next update:     Sat 25 Apr 2026 15:59:07 +0000
Files and hashes:         1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: CFzcF9t+ZjhwaNnwjkQTqbEgGDOByHVJ1O73yhR4jzg=)
                          2: BD314CEA619711EE81211277C4F9AE02.roa (hash: 5im2El+XqMtWQp5XtOEvy4f/d1/1FRGNJyssOKlFrL0=)
                          3: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: VMJkk/VVPV9Iy+puWdZ7776oUW7EEdM96gkspmEQArY=)
                          4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: n9OEIi5D0MMrsYRQLCAAp//0ZBA0omE88k2orZdv2K4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 15:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7916 (0x1eec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Apr 18 15:59:07 2026 GMT
            Not After : Apr 25 15:59:07 2026 GMT
        Subject: CN=69e3aa4b-6375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:02:f9:0a:9d:c6:71:90:f6:e7:97:57:cd:
                    5c:d8:a2:7e:bf:90:8f:e7:5c:71:bb:9b:8f:1a:52:
                    be:0a:b1:ce:7f:f4:24:30:06:2e:78:af:cb:73:8d:
                    06:58:21:69:88:3e:bb:5e:88:a6:83:8b:65:f7:61:
                    e1:44:57:a2:93:84:f4:54:bb:fc:7a:07:74:7f:d3:
                    a9:4e:ed:ad:71:b0:5a:fa:2f:ec:91:11:0c:c3:9c:
                    02:e4:a1:2b:e8:c9:90:07:1c:0d:90:6b:53:b6:f2:
                    92:83:59:ce:f6:9e:6e:5f:7f:7e:a8:97:5c:1c:d5:
                    ba:fa:b0:fe:f4:dd:eb:15:36:fc:ea:3b:e6:7e:0d:
                    be:35:7b:d0:c8:bd:e4:6c:46:a8:d8:fd:4c:5b:b9:
                    2a:ff:2f:5f:19:1a:96:be:cd:83:06:27:1e:14:52:
                    26:66:76:ba:b9:c0:ae:a0:83:f5:5a:e5:46:e6:ce:
                    17:b0:a1:c5:a8:6d:f0:81:4c:76:35:f3:d8:b2:ae:
                    ce:91:61:ad:e1:6a:54:41:92:20:1c:8d:62:df:a2:
                    9c:38:bd:43:19:44:a5:a8:07:5d:d1:12:d8:79:51:
                    89:05:82:7f:d1:b0:22:98:e4:f8:fd:5c:84:b7:34:
                    1d:f6:e4:a4:62:48:08:43:15:6f:75:10:b8:1a:f9:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:12:4E:E5:61:82:AB:B6:26:C6:D1:85:D7:7E:2C:4C:4E:F3:9E
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:98:75:ad:e1:6d:7c:16:43:ce:8f:22:e5:de:7d:b3:bc:71:
         de:3b:b4:2f:c8:9b:5d:45:76:f3:90:d7:05:51:b5:d0:0b:a8:
         75:b2:b2:16:f2:0e:a9:7e:79:0f:0b:45:d8:35:77:cb:ae:89:
         e1:82:49:4a:8d:3f:0e:f7:bf:1e:7c:f2:c8:f7:5c:1c:9a:b8:
         ed:47:66:80:2e:de:c0:51:f7:4c:15:54:27:c6:11:ad:ac:91:
         7d:b6:58:d1:ee:d8:e1:66:2e:15:6f:8c:3e:80:6c:a1:b5:d5:
         cd:1f:29:5a:3e:8f:ef:8d:30:ad:78:bc:ac:19:d9:cb:ff:97:
         9b:95:28:ff:96:75:0a:f0:18:82:a3:9d:f5:d5:a5:65:b4:40:
         e2:33:ba:b7:38:56:b3:2b:97:84:91:ab:a4:52:5e:7c:79:00:
         d4:34:30:46:63:7c:38:52:9f:a0:8d:8c:68:c1:c0:a0:33:49:
         d5:f1:f4:60:f9:ab:3c:1d:94:09:ef:e1:fd:a3:26:55:1d:a7:
         4e:96:05:15:76:51:e2:f7:e4:8d:6b:81:d1:1a:05:de:7c:5f:
         60:c7:ab:b3:a5:cb:ec:e5:ae:7a:ec:f1:61:c7:fc:70:9e:5f:
         a4:e0:dc:02:d1:93:1c:e3:9b:11:e8:c7:56:36:ec:4f:04:16:
         2b:2f:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:58:24 2026 by rpki-client