Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
File:                     jM-30IneJP53MO8rXFeIrgdEhCk.mft (raw, json)
Hash identifier:          uAwP5zxcOubJNAZkYe6Ci09Q7SdABAFtbjra9uD6znU=
Subject key identifier:   B0:75:C0:DB:09:00:44:A0:11:E0:EA:A3:A1:08:71:65:6F:40:54:44
Authority key identifier: 8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
Certificate issuer:       /CN=A91EEBD4/serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
Manifest number:          31
Signing time:             Sun 05 Apr 2026 07:58:09 +0000
Manifest this update:     Sun 05 Apr 2026 07:58:09 +0000
Manifest next update:     Sun 12 Apr 2026 07:58:09 +0000
Files and hashes:         1: jM-30IneJP53MO8rXFeIrgdEhCk.crl (hash: dHb1lta2U52W82Hbz6hLbX3quPOJN84PTkcgVjvvk4M=)
                          2: AEB081C8EB7D11F08F2DA3C6506F56BC.roa (hash: TKMj0SGDDWUO45H6UFrKS0aoJO0l9h24Ptk33swY28A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
                          rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEBD4, serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
        Validity
            Not Before: Apr  5 07:58:09 2026 GMT
            Not After : Apr 12 07:58:09 2026 GMT
        Subject: CN=69d21611-36c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:22:57:3a:c3:6d:65:f8:26:9d:97:eb:57:
                    97:84:f9:70:a4:77:82:96:6c:bb:44:4e:e0:7c:6a:
                    4a:ba:9d:84:73:4c:12:cf:dd:bd:cc:ab:38:ce:2f:
                    a5:1c:40:e9:05:7c:a5:c8:72:a3:94:2a:37:f2:86:
                    d8:71:9c:eb:d3:51:80:82:e4:64:12:27:61:ae:4e:
                    b7:7f:5a:5a:9a:bb:fb:20:a6:3d:9f:ba:e2:69:e3:
                    12:98:19:ec:5a:45:5c:96:23:27:6a:80:7e:e3:70:
                    73:f4:a1:94:6f:f4:35:be:2f:b5:dc:32:5c:f7:80:
                    9b:6d:bc:6e:ec:6a:0b:aa:bc:8f:87:d4:a3:51:da:
                    f1:af:cf:09:59:4c:a6:b2:54:a4:07:d8:f6:a0:b1:
                    61:8c:44:c3:0b:7c:22:42:26:c8:4f:f8:f3:06:eb:
                    42:b3:64:05:ca:81:33:6b:e3:57:93:c1:68:9c:d4:
                    81:2f:fc:dd:fe:5d:75:4b:90:fc:e6:4c:6c:50:5f:
                    81:64:c0:d7:da:89:8d:36:87:3c:a6:48:f8:47:9b:
                    54:c6:53:de:22:ef:96:7d:df:e6:27:f5:7e:9a:4c:
                    5c:03:78:82:54:be:0a:e5:6a:7e:17:2e:67:04:de:
                    dc:3b:00:4e:dd:24:98:58:32:fe:be:61:2e:35:90:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:75:C0:DB:09:00:44:A0:11:E0:EA:A3:A1:08:71:65:6F:40:54:44
            X509v3 Authority Key Identifier:
                keyid:8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:68:e7:47:66:86:d6:25:23:37:c4:59:ea:87:a8:3b:9d:
         65:65:65:aa:0f:2f:c1:4c:88:02:57:3f:e9:ca:9a:0f:ee:70:
         ae:b9:76:56:13:b5:5d:5b:a5:f8:f7:bc:5e:19:75:0b:8d:1a:
         59:f2:65:31:bd:6a:01:a4:ea:af:9d:65:9a:6b:d6:02:71:53:
         10:bd:89:bf:97:3e:d2:32:98:db:6a:61:c6:7c:92:de:73:df:
         16:ab:59:d2:5c:fb:f7:57:6e:bb:fc:5f:c7:2c:6b:f0:be:41:
         a5:34:cb:a6:fc:bd:9f:f4:80:54:9a:1d:87:47:87:89:90:b4:
         e4:29:20:d9:ac:02:e7:52:f1:d1:fa:d9:36:75:f0:3e:3a:d5:
         d8:22:75:df:72:69:3d:ab:16:9f:a1:06:6a:2f:7d:09:88:9a:
         e5:2d:22:07:46:68:48:89:72:d4:ed:e4:7f:48:40:0a:3e:a9:
         2f:01:7c:67:d7:41:34:e6:e4:11:fe:64:09:e8:0d:15:1a:60:
         f2:35:45:be:44:dd:78:f8:64:d8:6b:ef:d5:9c:3f:52:2c:04:
         5a:49:60:e7:b1:6f:5a:ad:b6:87:74:45:29:ac:fa:68:f5:9c:
         95:3a:34:19:42:34:70:fb:16:6e:9d:a7:e8:d2:a2:77:30:7f:
         c2:53:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:48 2026 by rpki-client