Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File:                     JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier:          e92Uqy7C6OcsLjhjU0KULl7HPhq1rSXuYn9DDKstVJg=
Subject key identifier:   CE:82:00:60:11:36:2C:B5:81:B3:AC:B2:39:D6:26:0B:E6:18:4C:7E
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer:       /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial:       1DD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number:          1DC5
Signing time:             Sat 04 Apr 2026 16:01:40 +0000
Manifest this update:     Sat 04 Apr 2026 16:01:39 +0000
Manifest next update:     Sat 11 Apr 2026 16:01:39 +0000
Files and hashes:         1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: ieQv3PPSwZoAK67ZIvOxL2oXSm6/BUXEWKzjx63nlfI=)
                          2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
                          rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7638 (0x1dd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
        Validity
            Not Before: Apr  4 16:01:39 2026 GMT
            Not After : Apr 11 16:01:39 2026 GMT
        Subject: CN=69d135e4-510b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:6c:00:72:a2:ca:f3:8b:bf:82:29:fb:b2:
                    35:72:ac:1f:a7:5f:bb:00:d5:82:90:35:10:78:a7:
                    ac:ae:e6:47:d5:d2:92:5e:a1:b5:7d:89:32:fb:7c:
                    55:33:b7:8e:52:99:b6:8f:52:ec:51:b5:d8:8b:57:
                    fe:f3:0c:fe:a4:fb:c9:5b:27:63:30:29:50:28:70:
                    e5:fb:32:34:78:7d:20:63:70:da:ad:6b:47:00:7f:
                    45:3a:62:d7:06:37:dc:68:e8:9c:d6:e6:7a:dc:6e:
                    59:3d:53:24:1e:a3:a0:28:13:1f:3f:ec:8a:21:62:
                    81:4e:f2:0d:5c:09:49:eb:26:bb:09:b6:79:44:bf:
                    77:9a:95:a6:2a:c2:19:40:62:a0:79:b6:0d:d6:80:
                    d4:d5:a7:24:3d:80:1b:c2:81:fb:a3:a3:12:28:c7:
                    ee:7c:b3:22:4c:72:94:e2:f6:38:88:6f:47:a1:81:
                    ae:ba:f6:7a:1a:f9:96:d6:bc:3e:18:3e:0b:46:4d:
                    8c:a4:7c:ba:77:71:55:5f:01:a8:d1:34:f5:b7:fc:
                    dc:d5:db:7d:a3:67:85:c7:33:0e:a0:37:c0:65:02:
                    43:e6:af:5a:37:3e:9b:39:c4:1c:b7:62:6f:67:5d:
                    22:0e:81:d9:8e:5c:d3:cc:9a:c9:b0:53:a8:ad:43:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:00:60:11:36:2C:B5:81:B3:AC:B2:39:D6:26:0B:E6:18:4C:7E
            X509v3 Authority Key Identifier:
                keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f1:f5:21:74:b5:36:83:2e:49:62:d3:9f:f6:c1:16:d0:9b:
         1c:d6:b6:eb:47:09:f0:cf:88:8f:22:05:08:84:04:76:5c:e4:
         c0:dc:61:38:76:fa:f3:d3:f7:6c:91:a6:6a:9b:95:0a:e5:37:
         1a:22:0d:ee:1d:71:d3:b1:3e:07:ff:c4:e8:d5:ff:c6:fe:a2:
         6c:96:60:1a:a6:8b:b7:5e:e0:84:95:55:15:0d:20:6a:b6:77:
         f6:60:f2:f2:dd:e0:a6:d6:f0:c8:21:99:4b:bd:c5:94:da:7d:
         15:c7:aa:3e:29:f8:eb:ed:7a:63:da:79:7f:cd:72:b6:a3:76:
         fb:49:1b:f0:3d:50:47:48:99:b0:ef:90:ef:d5:52:4b:ef:12:
         2a:0e:46:f1:82:e7:15:76:aa:99:84:0d:26:57:83:a0:63:1a:
         8f:25:34:9a:2a:3c:38:28:81:df:74:09:e6:5e:17:7e:e6:cd:
         e3:35:53:91:00:be:54:7c:b3:1c:67:0e:4b:79:b0:19:1f:af:
         36:4d:e4:e2:75:8f:e4:36:6a:33:aa:34:59:26:bf:83:5e:99:
         fd:2c:d1:c6:4a:a6:7b:1c:f0:15:a4:99:7d:79:ef:c0:5c:42:
         df:28:bd:a8:b4:2f:5f:0c:de:87:f0:b4:23:17:ca:ad:a0:ee:
         44:a7:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 03:37:54 2026 by rpki-client