Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File:                     cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier:          RPpF16CZSVjUofRdm/XlwFoYFTCQY9MvtsNgP+rY/C8=
Subject key identifier:   48:04:66:54:D9:3B:2A:79:A7:68:86:77:4A:13:D2:13:3F:A9:35:92
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer:       /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial:       0FD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number:          0FC3
Signing time:             Fri 12 Jun 2026 17:29:17 +0000
Manifest this update:     Fri 12 Jun 2026 17:29:16 +0000
Manifest next update:     Fri 19 Jun 2026 17:29:16 +0000
Files and hashes:         1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: HLm5qLG+PF+vudu3l0AN7ISfP2NX3IX1rznU5y1Q5aU=)
                          2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: IEwmF1YPiOGApN7H4VHhpg4ij4obs6SexWhQUYa7bXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
                          rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4057 (0xfd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
        Validity
            Not Before: Jun 12 17:29:16 2026 GMT
            Not After : Jun 19 17:29:16 2026 GMT
        Subject: CN=6a2c41ed-5e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:ee:a9:5f:bf:23:26:05:39:60:ea:62:f5:
                    9d:eb:f5:cc:40:4d:4a:39:6a:47:d4:9c:23:63:cc:
                    27:d9:4d:62:62:58:4c:b8:0c:62:4f:64:41:e8:e5:
                    bb:df:30:87:ae:a0:73:fb:1e:11:d8:b7:94:40:1c:
                    93:b5:af:eb:f3:76:2b:d3:05:55:3a:ca:b7:af:57:
                    e0:a6:f8:98:c0:90:fc:a5:e2:f2:b8:90:9c:35:f3:
                    8c:d4:9d:0c:3b:0d:e5:a9:93:fb:3c:ef:c3:6c:7f:
                    1a:c5:da:7a:29:c8:af:d4:2f:0c:78:9c:7a:c4:d5:
                    85:87:11:30:a5:c2:d6:64:91:6b:8a:b0:cf:77:51:
                    5d:6d:5a:41:fa:ad:09:51:4b:72:50:1e:41:3b:70:
                    9a:9c:6c:3e:99:3b:15:d6:0f:c5:87:9f:03:f4:05:
                    cd:93:88:4e:7f:1f:37:5d:20:bc:d4:bc:c9:96:9e:
                    2d:87:36:ae:b9:17:66:03:2c:04:be:5f:b0:2b:d3:
                    c8:a2:38:ca:10:48:bf:8f:02:46:34:d9:34:d4:d8:
                    c6:62:b4:57:56:0a:e4:b4:f7:c2:fb:e0:36:40:ce:
                    e1:94:94:8b:6e:df:ce:e3:f5:14:c5:38:2c:c5:1d:
                    70:b4:53:02:71:fd:6f:a1:ec:ef:07:7a:c8:54:65:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:04:66:54:D9:3B:2A:79:A7:68:86:77:4A:13:D2:13:3F:A9:35:92
            X509v3 Authority Key Identifier:
                keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6c:f9:b5:39:0e:a8:85:58:13:39:57:c1:c4:d3:ff:ca:c7:
         7c:49:f2:a8:b8:71:a7:ae:03:93:39:15:c3:17:e6:d6:42:8f:
         0d:f2:6f:af:9f:8e:15:d4:b5:80:f7:3a:20:20:21:0d:a0:06:
         8b:82:9e:af:0d:b2:fe:26:99:91:4b:6a:00:3f:7a:f5:b7:9d:
         5e:18:ba:e1:94:1e:19:a8:c7:db:c7:19:60:82:f2:ce:d6:0c:
         ba:f2:77:69:a0:5c:b0:f8:45:d0:07:73:88:ab:64:9a:3f:ca:
         15:ab:06:35:d7:8b:28:99:2b:07:d1:5b:57:95:40:7b:ee:c1:
         3f:bd:ba:6e:41:e2:af:e2:bb:f7:b7:e1:4d:47:81:5a:be:ad:
         ac:73:f8:e2:51:fa:20:6a:dc:28:23:9d:6d:1b:4f:c1:9b:55:
         f7:fe:91:94:0f:c3:b0:1a:31:7e:06:48:1d:09:d9:4b:29:7e:
         e8:fc:c7:62:5e:ed:d8:1e:32:31:06:80:6e:1f:6a:99:a8:fb:
         21:eb:f4:14:c1:1e:37:51:30:7b:16:66:25:70:42:37:d7:0e:
         f3:12:21:0b:7e:90:b7:53:74:ce:ef:d9:60:08:7f:c0:25:83:
         02:76:4d:5f:5a:12:50:dc:b3:f9:59:ce:85:ce:21:c8:3f:bd:
         91:01:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:38 2026 by rpki-client