Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
File:                     4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json)
Hash identifier:          mSBiX70ykLj+PWBy8Ljb4H7JG8RpUu7GMiSXw2/7TCU=
Subject key identifier:   18:A3:B3:16:ED:C4:6C:CF:3C:40:9A:2A:B2:1A:CE:88:96:C9:60:86
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Certificate issuer:       /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial:       0346
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
Manifest number:          033F
Signing time:             Sat 13 Jun 2026 01:03:05 +0000
Manifest this update:     Sat 13 Jun 2026 01:03:05 +0000
Manifest next update:     Sat 20 Jun 2026 01:03:05 +0000
Files and hashes:         1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: xI8hCFrCr+d9eCFNogRUhjsaPy0r1wUPA/uKVaQXfXg=)
                          2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: TRVZ/NM/BJRiha8eAPz94grzikRFW1KWfdpr0FjIAaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
                          rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
        Validity
            Not Before: Jun 13 01:03:05 2026 GMT
            Not After : Jun 20 01:03:05 2026 GMT
        Subject: CN=6a2cac49-06a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:0a:ea:92:4c:e5:92:eb:67:d0:91:ae:48:
                    c8:e7:67:82:87:57:fc:80:e8:21:56:97:a2:1c:52:
                    ac:be:7e:0c:a6:95:61:39:43:e7:aa:14:70:67:41:
                    f8:6d:95:7d:1f:2f:6b:a2:70:a8:e9:0c:63:ae:0b:
                    45:cb:27:3e:92:88:9e:89:ab:5b:70:f1:f3:dd:57:
                    33:a3:1c:ef:f4:15:3a:85:df:4e:58:eb:bb:fb:65:
                    a6:41:a9:59:1e:d7:9c:00:98:57:9b:47:f4:2f:75:
                    77:77:6b:3e:be:97:c2:7b:00:e0:b3:2c:54:fb:21:
                    91:ce:df:22:62:24:51:bc:41:e2:4f:74:cf:23:14:
                    e8:e4:d5:17:0a:ec:d9:3d:65:e5:f9:11:79:04:7f:
                    0c:9a:c6:01:ec:1b:95:c2:b4:c9:59:3f:81:44:e3:
                    53:4e:06:04:a8:0f:ed:b5:b5:0e:76:a8:28:fd:f3:
                    2a:2f:bb:98:d7:00:6f:11:01:63:ad:af:b0:cd:e5:
                    43:99:a3:fe:ac:e8:7a:b9:76:ff:8a:da:b4:35:d7:
                    77:a4:52:d9:3e:44:a2:31:67:44:a6:67:73:68:51:
                    61:fb:2a:b6:1f:c3:df:c4:66:6f:73:7e:9e:3c:b4:
                    fc:30:3e:cb:75:ad:ca:8d:ce:33:dc:3a:2e:c8:6f:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:B3:16:ED:C4:6C:CF:3C:40:9A:2A:B2:1A:CE:88:96:C9:60:86
            X509v3 Authority Key Identifier:
                keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:63:c4:97:70:a1:74:2c:21:ac:ce:aa:56:49:9c:9e:d3:e1:
         31:8b:08:1a:53:89:a9:27:24:95:c9:f1:99:b5:a8:22:95:5d:
         f6:b8:f1:76:ad:76:b7:33:eb:2b:bb:6d:bf:41:5f:00:4c:e0:
         c1:b7:43:b2:4e:f4:b1:49:6b:1d:d1:58:b2:bd:ad:12:9c:31:
         86:28:18:80:2b:bf:63:3d:8d:2b:ff:60:64:3a:ee:27:6b:11:
         02:2a:46:7a:7a:8d:ba:31:19:9c:99:b3:69:39:67:c3:db:db:
         52:60:e9:c2:60:0f:ad:5d:e5:00:57:e5:5c:b2:9a:67:18:a1:
         54:8c:64:b5:a4:a2:5c:87:db:b8:de:2f:0c:51:6d:23:e3:8d:
         ea:27:64:be:92:33:fb:45:0e:9f:77:23:73:de:d0:47:2c:a2:
         b2:c9:3e:1d:17:9d:93:7c:95:4c:12:a8:05:23:f1:f2:bc:b3:
         8e:90:ba:b1:c8:61:6b:f8:2e:a8:21:94:33:f1:de:f8:59:4e:
         0d:f1:f5:43:6e:0e:b1:67:33:7f:5a:f5:8d:83:0e:3b:ea:4f:
         39:eb:98:d0:10:40:ab:dd:e0:ff:fa:d5:cc:5b:e8:4e:de:d2:
         b2:27:c3:f6:ec:d1:f6:91:da:48:b4:33:b1:27:a7:ae:d9:e0:
         c8:a0:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:10 2026 by rpki-client