Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
File:                     jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json)
Hash identifier:          qHUoyHA0wOHoVGa/VXVz/OUsAe2145kBt+P5BaGsIYg=
Subject key identifier:   82:FD:D2:21:C1:C6:60:3D:F0:DF:D8:A5:BB:26:76:44:7E:32:57:F1
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Certificate issuer:       /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial:       0AFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
Manifest number:          0AED
Signing time:             Sat 04 Apr 2026 19:12:15 +0000
Manifest this update:     Sat 04 Apr 2026 19:12:15 +0000
Manifest next update:     Sat 11 Apr 2026 19:12:15 +0000
Files and hashes:         1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: vj6Js320lghVpS34H7KIwMHNMKOP9R2FKjqocqLlDCs=)
                          2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: Md4VxFtS/WhfxAMcg9H7fxz+3+Xrq8E1asklNoArYag=)
                          3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: 73MoW6eQgxGOOmNhqBuDqmDpNg4gwK+uov/m5DEc8SI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
                          rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2811 (0xafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
        Validity
            Not Before: Apr  4 19:12:15 2026 GMT
            Not After : Apr 11 19:12:15 2026 GMT
        Subject: CN=69d1628f-6970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:11:cc:02:2f:0c:ae:ec:db:49:66:ac:93:
                    af:22:be:0c:31:68:e6:61:4c:4d:55:26:55:b6:c7:
                    2b:8e:af:c7:e0:3c:29:c5:94:ea:2a:9a:8f:5d:69:
                    16:6a:10:d2:af:d1:42:42:5f:b3:80:4a:d0:75:eb:
                    f8:2b:20:43:24:c2:00:99:50:37:b2:2d:93:ec:31:
                    37:70:26:97:91:93:d3:06:a0:d4:4f:8d:7a:10:78:
                    25:04:d5:30:d9:fe:d5:16:95:b5:7d:58:8b:20:63:
                    6e:ec:4a:ad:b3:cd:dd:2d:04:c1:29:09:bc:56:73:
                    41:9f:de:6b:82:e6:b0:6d:13:ad:a8:65:87:9d:96:
                    4f:b4:c5:29:bf:81:bc:c4:17:7f:6d:a6:cc:d5:66:
                    18:67:c7:53:86:1b:d5:61:7f:19:46:af:c8:f7:f8:
                    72:47:a5:20:90:fe:75:cd:31:04:66:41:27:55:d3:
                    b3:b6:c1:17:e5:03:5c:82:7c:49:78:d6:11:96:fd:
                    d6:08:f2:ac:3a:0b:b6:21:1f:7e:ba:7b:68:e1:75:
                    20:42:fd:84:bf:06:94:c9:a7:8e:07:c0:8a:07:a3:
                    db:f1:53:ee:19:b4:35:fe:ca:b6:74:12:99:11:45:
                    69:3e:98:dc:e1:9c:a0:d4:55:92:aa:f0:31:95:19:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FD:D2:21:C1:C6:60:3D:F0:DF:D8:A5:BB:26:76:44:7E:32:57:F1
            X509v3 Authority Key Identifier:
                keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:55:7d:08:ab:e7:ad:e8:55:a4:ea:92:3b:84:0d:95:32:2c:
         6e:27:40:34:3b:12:d9:22:aa:a4:7c:fc:76:2a:97:0d:fe:50:
         19:60:1b:ba:76:93:1c:8f:92:cc:8e:05:2e:30:bf:c3:8a:a3:
         ba:b4:10:12:83:01:fe:ce:8c:13:2b:f6:c3:ca:38:07:f9:0f:
         08:96:e3:0c:e4:4a:74:8c:b1:b9:c3:43:80:a5:6c:e0:b1:7f:
         2f:cf:ce:e1:0a:74:2e:11:00:d2:48:02:98:43:18:32:39:ca:
         c3:f8:0b:75:8f:4b:41:8f:31:9c:e0:57:ee:03:ce:51:61:a9:
         c1:57:5f:1c:85:43:43:4c:34:b9:0c:83:99:28:09:a0:6d:6b:
         78:68:db:22:8a:66:20:cd:7f:d2:37:bb:d4:b7:30:a8:08:c1:
         32:12:21:0d:14:6f:8c:d0:50:c9:c0:48:cc:04:87:6c:64:e4:
         e0:66:59:95:f5:c7:73:f4:bd:91:f3:9b:74:34:aa:19:2b:cb:
         1f:be:bd:bc:35:d8:a7:84:44:de:e7:2f:ff:03:dd:4e:2d:e1:
         74:21:9d:08:cc:cb:99:d5:35:24:c8:89:74:54:4c:83:5d:e0:
         bc:0b:90:ba:ea:d9:15:1e:8f:c2:50:00:b5:b3:78:c7:6d:ce:
         d5:f3:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:16 2026 by rpki-client