Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
File:                     4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json)
Hash identifier:          8rFT2hAx5DsnRVJbQXn/yPmkFM1I3uHZyeTdhCEBipY=
Subject key identifier:   19:7A:FC:53:35:33:27:18:2A:DF:A0:93:38:C7:27:11:E3:CE:75:BE
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Certificate issuer:       /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial:       088C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
Manifest number:          0872
Signing time:             Fri 12 Jun 2026 20:48:37 +0000
Manifest this update:     Fri 12 Jun 2026 20:48:37 +0000
Manifest next update:     Fri 19 Jun 2026 20:48:37 +0000
Files and hashes:         1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: KqiEMuvQ5jT4mEL5wRNVjVMC/zHbV8Kb44agb3UWeso=)
                          2: 9F8DA582EA0F11F0944A7CD7716F56BC.roa (hash: 3YwwSJL/lczWD+gAqMpWstD/Bdbs+l7Ejs50rGgef0E=)
                          3: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: VVuT0oGthuu1h4dpEkw5dwzZuqKsuK62xGDpmmEICJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
                          rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
        Validity
            Not Before: Jun 12 20:48:37 2026 GMT
            Not After : Jun 19 20:48:37 2026 GMT
        Subject: CN=6a2c70a5-e37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:57:53:fd:d8:2e:a3:c0:c6:64:8d:bb:f2:
                    ee:53:02:67:20:10:ae:b1:31:2f:d4:4b:30:e2:d8:
                    7c:fa:a9:24:6c:ac:f6:76:f2:18:df:51:0b:cb:b7:
                    c0:ea:70:b3:5d:67:b2:fc:db:d0:36:a6:bb:63:ea:
                    c2:29:6a:c9:2e:3f:8c:fb:b6:bd:4b:dd:34:bc:ee:
                    b4:8b:a8:03:38:d5:9f:d6:5e:77:fd:3f:0d:f6:04:
                    6b:bf:ea:a7:09:71:e4:8e:f3:39:99:63:3e:f8:ea:
                    9a:56:38:4a:a4:e4:50:2e:99:9b:4d:50:16:74:24:
                    56:d3:39:ef:cf:bf:59:6a:50:9b:fa:ce:93:33:63:
                    96:b3:54:c8:d4:c6:d1:68:e9:90:f0:10:a0:6d:3a:
                    fa:f6:39:4b:20:d1:e3:ed:d3:95:b6:6f:59:7b:4f:
                    35:ec:20:55:c9:54:aa:a8:40:9f:44:1b:dc:97:db:
                    22:34:fc:43:c1:20:43:f1:73:17:50:da:3e:3c:3e:
                    72:a9:cc:4a:6e:a6:f9:94:cd:94:b4:1e:03:23:2b:
                    b8:c7:3d:9e:14:2a:9b:9d:ca:10:60:ba:d9:3d:38:
                    b6:1b:92:77:4f:c5:1f:bb:11:eb:47:e6:c4:c5:fa:
                    40:0a:58:13:f7:fe:11:c2:fc:8e:c7:11:23:19:45:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7A:FC:53:35:33:27:18:2A:DF:A0:93:38:C7:27:11:E3:CE:75:BE
            X509v3 Authority Key Identifier:
                keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:0b:c4:be:82:c8:55:72:6c:0f:25:9d:fe:35:08:5e:6c:
         48:51:32:d8:4b:32:9f:01:33:63:6b:20:4f:d2:79:cd:a9:3b:
         b7:15:46:a4:42:fd:b8:72:24:4c:46:66:cb:c3:41:d2:11:20:
         a3:80:b7:74:56:06:f0:9d:f0:de:b5:55:b2:42:62:21:71:70:
         52:35:1e:87:7c:52:0b:f3:d5:d4:97:00:79:74:8d:0d:b5:af:
         47:43:4f:4f:4f:f0:d1:86:59:98:82:bc:f8:95:23:25:36:bf:
         f7:5e:53:de:9d:8b:28:41:72:ae:58:18:4a:40:5f:c3:e6:83:
         50:d4:8d:e0:9e:1d:16:f5:20:7a:a2:59:77:09:46:84:8d:d7:
         77:4e:cf:c8:1a:b8:c8:de:e6:07:a1:77:80:cf:e0:8e:3b:23:
         ba:5b:e2:70:6c:80:aa:50:0e:cb:f2:a9:29:a7:a2:25:b6:c3:
         ee:c0:9f:b0:28:a3:41:df:65:52:b4:ab:f3:73:08:3d:48:d1:
         65:1e:fb:e0:b7:b1:ef:07:e4:46:f4:45:bd:c5:7c:12:23:a0:
         eb:ed:86:95:0a:9e:a9:34:1d:ca:c4:02:58:20:e9:56:37:29:
         22:3c:d4:2d:ff:c2:09:55:0d:70:fb:ac:7c:38:5c:f1:ca:68:
         4d:1b:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:19:53 2026 by rpki-client