Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
File:                     74sS4pnzyE0UvzVyXwLdxQOxLgE.mft (raw, json)
Hash identifier:          YBRJ63HhDXrKYyyE82q9DikdZPzSJnpbZjPIuNMQM7o=
Subject key identifier:   0A:77:2A:5A:5F:FF:78:5A:0C:BA:2A:C1:C5:3B:DA:12:74:60:D0:80
Authority key identifier: EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01
Certificate issuer:       /CN=A91EC978/serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
Manifest number:          49
Signing time:             Sat 13 Jun 2026 08:29:26 +0000
Manifest this update:     Sat 13 Jun 2026 08:29:26 +0000
Manifest next update:     Sat 20 Jun 2026 08:29:26 +0000
Files and hashes:         1: 74sS4pnzyE0UvzVyXwLdxQOxLgE.crl (hash: 0LxkC+PgPvEebkX1D8V/A/AP7hwMfQHqR6o5xDg3pGU=)
                          2: F46C6AE2001311F1811932CE406F56BC.roa (hash: MxFfnouduq0AyvPx5Uzbe5lXPlmcgFB0L/5+2A+Av3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl
                          rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC978, serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
        Validity
            Not Before: Jun 13 08:29:26 2026 GMT
            Not After : Jun 20 08:29:26 2026 GMT
        Subject: CN=6a2d14e6-9a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:d0:96:d9:c6:89:e9:1a:e4:e2:86:48:a4:
                    b9:f6:49:71:1b:ef:95:44:96:1a:ff:0f:d8:2a:f4:
                    90:78:55:f5:f0:37:83:5f:0c:7d:f9:4e:27:89:ce:
                    d9:16:08:ff:de:2c:95:bd:bb:9e:a6:0c:6d:5d:d0:
                    7e:08:46:c1:55:7a:20:f5:ba:4d:f4:d4:87:0f:0c:
                    19:ab:2b:11:2a:dd:87:2e:d8:0b:a5:ab:62:01:76:
                    47:85:84:d4:f4:b2:96:90:c3:08:27:b8:18:32:4c:
                    f3:43:e1:3b:52:34:56:fb:d4:42:b0:02:33:91:e8:
                    7a:f6:6f:22:9b:ee:be:a2:8f:53:97:a3:1f:0d:d7:
                    e1:33:2f:38:c2:4f:b5:3c:a1:32:12:28:63:f4:69:
                    54:2a:0c:30:37:85:57:7f:f3:ab:70:5c:82:0b:72:
                    6a:d8:54:32:0f:4c:7c:44:11:46:af:42:43:19:c6:
                    ac:c4:b7:3a:3f:75:4d:cb:4f:fe:6e:df:90:f9:15:
                    83:26:78:40:39:2d:fc:de:6a:a3:56:ee:33:ee:4a:
                    6a:e6:e8:29:7d:39:f5:ea:bc:bd:e8:d0:d5:44:cb:
                    b6:88:19:17:ef:67:4b:cd:b1:b6:38:92:6c:b4:1c:
                    04:d7:8f:34:8a:c4:32:09:8c:02:12:0d:dd:68:13:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:77:2A:5A:5F:FF:78:5A:0C:BA:2A:C1:C5:3B:DA:12:74:60:D0:80
            X509v3 Authority Key Identifier:
                keyid:EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:65:50:3e:af:a7:90:e7:6a:82:17:bf:a0:70:00:f3:49:92:
         36:dc:c6:46:a4:8d:d4:b4:bc:10:9e:c3:2b:0e:83:48:0a:39:
         b7:2b:16:c5:1a:76:15:b4:0f:5b:e7:8e:06:ff:15:84:40:cd:
         15:35:08:5b:09:0d:f5:da:14:81:31:a1:d9:77:54:77:b6:b8:
         8a:fb:ee:46:d2:f3:ad:81:e7:c2:98:f5:fa:6c:5e:2b:2e:b1:
         58:d0:3e:4e:d2:40:4a:93:e6:fc:47:c7:d9:6d:06:d2:08:64:
         47:cf:d1:c5:60:90:39:9a:d9:b5:3d:34:9d:12:39:9e:6f:81:
         14:6d:86:ea:6c:8b:e5:63:4f:a3:4e:53:45:18:1b:89:f0:7f:
         ac:2b:44:3e:e8:32:b9:95:cd:9a:a4:c6:9d:d6:35:9a:20:ef:
         63:30:e4:e6:b9:81:bf:cd:94:c2:d7:7f:5b:3c:9b:db:4f:d0:
         8c:f6:5a:85:24:66:87:05:1e:74:00:17:27:87:d1:0d:3e:82:
         15:b1:b3:14:37:46:a7:e9:77:eb:06:8b:03:57:ab:03:b8:65:
         31:61:fb:ba:0f:73:f6:fb:80:e4:8a:a8:e6:b7:5a:54:26:32:
         76:08:08:66:97:49:d2:4a:c4:20:69:c6:f3:55:c0:58:8c:f4:
         0f:59:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:33 2026 by rpki-client