Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File:                     Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier:          YEAUE3WZP2j9fvl5gpvoANyK0t93Cbu4vlRHr4GbMko=
Subject key identifier:   3E:91:8E:13:E0:A9:93:D4:FB:40:14:11:1E:90:2E:F8:C8:89:25:FD
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer:       /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number:          44
Signing time:             Sat 13 Jun 2026 08:32:32 +0000
Manifest this update:     Sat 13 Jun 2026 08:32:32 +0000
Manifest next update:     Sat 20 Jun 2026 08:32:32 +0000
Files and hashes:         1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: XsMKMwZOvyiskAYoAUG1BIlYUqY+LgoYNrkeeo5VhMw=)
                          2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: rAKQfqzwQK5IzLFhXtLBp7YYHEkrei2qYSNZ5UbT8L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
                          rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
        Validity
            Not Before: Jun 13 08:32:32 2026 GMT
            Not After : Jun 20 08:32:32 2026 GMT
        Subject: CN=6a2d15a0-6f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:0f:1d:42:5c:fd:01:fe:8a:06:0f:f0:52:
                    69:98:e5:5c:05:15:aa:97:e7:7a:da:29:88:44:e4:
                    5f:80:43:e4:ce:83:a9:79:99:56:0d:30:47:67:8c:
                    11:73:53:ce:1a:03:1a:5d:93:e1:df:b6:06:1b:66:
                    35:22:36:1b:9b:7d:21:ef:50:d0:25:d3:43:18:9e:
                    be:39:14:dd:87:77:5c:de:15:48:d6:0d:f1:9e:75:
                    40:55:26:c6:02:05:d7:39:6f:ec:9b:b8:74:25:d3:
                    f4:c6:f8:47:ae:c9:00:49:9b:6d:24:14:99:05:df:
                    ea:e8:cb:37:9d:04:08:4e:97:2f:59:d6:f8:11:49:
                    71:15:27:fe:73:ce:58:de:85:78:c6:49:1a:b3:7e:
                    cb:d5:de:da:8c:7d:e2:dc:75:95:c8:ad:06:51:d3:
                    20:2a:57:27:4c:e0:ac:75:28:1c:e5:19:fe:fd:b1:
                    57:39:25:56:4b:1f:d7:65:11:3c:7f:50:fc:c9:44:
                    2a:0d:c9:47:b8:b5:fc:c6:6b:8a:49:5c:30:63:42:
                    ba:42:b5:e7:9f:ae:0a:85:e7:2a:a9:18:9a:e4:29:
                    91:6f:60:4b:12:69:f7:31:59:5d:2f:0e:41:6a:de:
                    fb:70:b5:4d:3f:06:aa:4e:20:e8:6b:95:41:3f:8a:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:91:8E:13:E0:A9:93:D4:FB:40:14:11:1E:90:2E:F8:C8:89:25:FD
            X509v3 Authority Key Identifier:
                keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:e7:70:ad:ca:29:f4:f8:89:db:83:78:ba:02:44:f3:38:
         4a:78:24:0c:6d:91:0f:f0:be:80:f2:17:a0:79:13:c8:7e:cb:
         58:a5:f0:72:66:e1:24:2b:89:91:5c:9f:f5:1e:ea:48:2c:17:
         55:ca:2c:74:39:53:1a:5f:a9:9b:99:1b:15:b5:ca:07:ab:52:
         ae:2d:8a:4a:e2:27:a7:49:9c:f6:4c:38:ca:d4:5e:b6:37:6e:
         bd:fc:61:1c:5d:30:21:a5:60:c2:65:b5:a8:82:3b:3e:b3:95:
         50:f3:d1:23:01:ef:4c:52:cf:5e:2d:22:f3:87:7a:a9:06:96:
         4b:cb:e5:f7:ea:fe:4a:4f:da:5d:9d:f4:0d:64:19:db:99:94:
         cb:a4:95:73:dd:da:80:fd:3b:3f:7c:e2:46:b5:96:75:4a:e2:
         21:54:10:c3:1f:a6:48:e0:dd:2c:9f:ca:07:07:a2:2f:68:a0:
         36:b1:47:8f:e7:3d:79:cc:82:5d:0f:dc:3c:e2:56:96:10:0e:
         9f:2d:05:de:a5:58:08:8a:0b:42:cf:02:75:31:21:47:a0:0d:
         ca:fb:27:d9:30:01:f9:df:f7:f5:c9:23:59:3f:21:8e:a8:ad:
         de:3e:c1:e2:04:c2:b1:57:0e:a4:12:ca:6b:ab:8d:07:16:a4:
         1b:a5:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:15 2026 by rpki-client