Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File:                     4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier:          ZAKeu0qNgJ3P2lV7tFFTNplssPJAdcxR5/PHNropal4=
Subject key identifier:   CF:48:7D:AF:0A:19:89:5E:F8:6B:D5:3C:FD:71:FD:31:EE:2C:D1:E7
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       0558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number:          054B
Signing time:             Thu 16 Apr 2026 23:22:41 +0000
Manifest this update:     Thu 16 Apr 2026 23:22:41 +0000
Manifest next update:     Thu 23 Apr 2026 23:22:41 +0000
Files and hashes:         1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: BiKkmFzlYaOoVySLgwz7VxjIOUFPjHIUvUtjTuzyjng=)
                          2: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=)
                          3: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Apr 16 23:22:41 2026 GMT
            Not After : Apr 23 23:22:41 2026 GMT
        Subject: CN=69e16f41-c071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:e5:89:11:60:61:8e:b2:62:e7:8b:af:0c:
                    1c:31:b9:1b:08:41:90:c0:ea:8a:d8:49:03:62:32:
                    de:55:4f:20:95:80:67:a6:41:40:84:dc:49:10:0b:
                    6d:89:a9:2e:bd:07:4e:81:4f:a5:65:78:9b:09:73:
                    51:11:1f:2a:7c:a7:3f:e3:f8:e3:e1:b1:ed:db:0c:
                    0f:9c:d2:b4:ae:f7:f0:75:a5:0c:b9:43:1c:8c:37:
                    c8:9b:2c:08:f7:ac:4e:03:7b:3f:31:96:db:81:87:
                    fd:a9:5c:a2:6a:d6:78:82:3d:6f:51:15:11:93:f7:
                    1a:e3:ea:e9:d7:54:ec:d8:41:6d:05:fe:3d:06:01:
                    66:70:03:7a:76:9a:96:88:40:44:2f:f5:5c:ca:c4:
                    e8:55:7f:99:bf:4b:70:27:61:9b:33:32:e1:4f:69:
                    31:78:dd:6c:a3:71:e5:b5:f1:df:ab:b3:4a:15:d2:
                    28:a3:cd:f9:16:84:c2:6e:04:57:53:28:c8:20:2a:
                    d5:18:dc:d5:e0:29:f9:8b:1f:0b:a3:c1:88:56:2b:
                    ba:5b:45:45:f1:76:1f:33:5b:4b:84:c8:f7:dd:26:
                    68:9b:14:68:05:a4:d4:bd:44:8b:52:5e:03:1c:84:
                    4d:13:11:b4:d8:d1:25:9a:27:5c:a7:df:82:0f:17:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:48:7D:AF:0A:19:89:5E:F8:6B:D5:3C:FD:71:FD:31:EE:2C:D1:E7
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:69:d5:91:76:97:b8:29:36:53:5d:15:bd:18:a6:11:90:7e:
         7b:84:66:ef:53:fb:a6:7c:82:bf:81:94:06:82:bc:ec:73:84:
         83:2f:b0:06:61:f8:3a:c1:96:29:c5:95:d0:33:36:36:5b:f6:
         c6:2a:db:c2:5e:9b:15:eb:89:2f:9f:13:b9:bd:ce:db:1b:45:
         67:13:a6:e2:70:92:3e:69:7b:31:d7:22:64:d1:ff:1f:99:f1:
         ab:c2:cc:25:bf:3f:0d:28:fd:98:3b:b8:4a:12:12:17:9e:99:
         07:5e:74:87:64:e0:bd:d1:8a:a8:aa:46:32:fe:b3:60:b5:b9:
         bb:8e:c4:09:7f:c7:f1:a8:51:46:c5:f7:9d:33:69:44:fb:29:
         57:28:6a:e9:41:df:1d:f8:6d:88:ef:d2:30:88:74:93:13:90:
         ec:3c:71:f9:1b:b4:14:db:3c:a1:dc:42:3f:d0:66:ba:00:de:
         81:0a:5c:0c:bc:4f:eb:82:52:dc:88:99:93:40:c5:72:c5:b2:
         a1:0e:96:92:a5:2c:50:dd:8e:fa:1d:4e:ba:36:16:2b:41:cd:
         a4:db:b7:b8:fb:b0:13:14:22:9b:b8:7a:03:00:36:2c:e6:a2:
         2c:54:81:e1:79:19:01:38:02:51:d3:63:21:1e:87:4a:75:2f:
         ee:e0:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:01:22 2026 by rpki-client