Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File:                     4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier:          OXoI++rlc9IKHNroOAPW3E16SJw1sngr2i/+5mprXmQ=
Subject key identifier:   BD:A0:E0:2A:A2:83:0A:D5:79:BD:93:0B:05:28:23:C8:AE:21:82:E9
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       0575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number:          0568
Signing time:             Fri 12 Jun 2026 23:25:04 +0000
Manifest this update:     Fri 12 Jun 2026 23:25:03 +0000
Manifest next update:     Fri 19 Jun 2026 23:25:03 +0000
Files and hashes:         1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: dJvS4UDqi9GKBiX3qVGZgJGuqYAFOpvJqeZcIYuzBsQ=)
                          2: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=)
                          3: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Jun 12 23:25:03 2026 GMT
            Not After : Jun 19 23:25:03 2026 GMT
        Subject: CN=6a2c954f-c02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:ce:85:fe:38:88:55:46:35:9e:de:5d:9d:
                    21:af:61:65:28:93:4f:65:04:57:20:65:6b:21:db:
                    7b:a8:44:42:e4:18:3e:40:b2:6a:45:de:a5:2d:22:
                    e6:04:84:5b:e1:31:28:10:c7:8c:78:65:fb:3a:f1:
                    3c:90:e3:2c:01:3f:e1:88:c9:7f:02:37:ed:de:3a:
                    2d:7f:9a:a0:6b:1a:1a:d4:1c:71:6d:30:6c:6d:ec:
                    b3:28:85:e4:83:19:36:1f:b9:e7:f0:ae:b8:52:a0:
                    6b:b3:97:9b:6d:e4:f9:9c:09:e5:49:dd:e3:2b:68:
                    55:11:02:16:02:20:cc:71:4d:86:c0:c8:b4:bb:26:
                    f6:45:f6:ec:f9:28:5f:cf:33:21:15:a7:e2:f7:ea:
                    04:89:68:1e:08:39:fe:ba:94:a8:40:22:1d:63:fc:
                    f6:7c:e0:79:68:76:e1:ea:b2:c7:e7:db:7e:f7:1e:
                    63:3f:54:e7:4c:4a:db:7f:04:82:55:58:ef:9b:d7:
                    59:0d:b8:83:25:7b:12:57:4c:73:6c:de:48:14:50:
                    91:58:8b:7f:58:b3:76:19:71:0f:ea:4b:df:a5:f8:
                    7d:f9:55:90:24:3a:aa:19:cc:12:29:49:a2:e0:78:
                    6b:91:c9:8d:62:44:50:d4:e8:a4:52:39:d1:5e:67:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A0:E0:2A:A2:83:0A:D5:79:BD:93:0B:05:28:23:C8:AE:21:82:E9
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d2:85:23:4e:c5:27:7e:55:2e:e7:7c:10:ae:17:fc:f3:da:
         ca:f0:fc:89:aa:e3:74:80:2c:9a:9f:43:dc:70:88:55:dc:d5:
         cb:69:96:17:6e:88:27:60:77:b5:cc:60:8d:60:a9:98:c3:fe:
         96:73:da:f0:46:12:ca:2f:58:1b:20:81:f4:af:ec:e8:fd:de:
         c0:7a:de:37:0e:7f:74:7e:d1:7b:19:51:72:a2:46:e6:76:4a:
         2e:af:20:ea:b5:11:aa:d3:c8:b7:48:63:8b:d4:3f:33:ad:b1:
         12:e8:b7:7b:bb:ec:7d:5c:45:c1:16:be:cd:06:2d:49:45:f8:
         18:b1:03:3a:7f:73:41:1a:d8:3f:74:e3:5c:83:8b:52:e9:97:
         f3:86:50:98:44:43:82:ee:81:b0:93:00:e5:dc:a2:30:23:df:
         13:49:93:0b:9f:e1:14:8e:ae:64:48:b2:c9:9e:a5:9f:2e:d8:
         72:18:02:bf:57:23:74:ac:4a:98:91:41:b6:d2:ec:86:43:f9:
         69:2f:8f:1f:5d:3c:56:4c:a0:e7:a5:9b:77:0c:58:e5:8d:35:
         4d:c7:33:1d:b4:7a:c5:e3:ea:4d:09:b7:e1:75:cd:2d:b4:82:
         25:3f:89:26:3b:c4:9f:cf:e5:73:ae:36:e3:60:e8:ee:51:0e:
         b3:9a:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:24 2026 by rpki-client