Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
File:                     JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json)
Hash identifier:          PKqoOA62UgA99+ca4S5RD8GdLxpVxj/J8elej8DJPVk=
Subject key identifier:   99:35:8F:06:47:13:53:72:C2:8C:33:26:B7:62:E3:0F:96:76:8B:87
Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
Certificate issuer:       /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Certificate serial:       0417
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
Manifest number:          040F
Signing time:             Mon 27 Apr 2026 00:21:54 +0000
Manifest this update:     Mon 27 Apr 2026 00:21:53 +0000
Manifest next update:     Mon 04 May 2026 00:21:53 +0000
Files and hashes:         1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: WNSCi8Zd4EkGtceEe40b/3BkdqC/3e23qWhGDpjDObo=)
                          2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: LzBOqsZicdpn+P8qH8nxZV+cR5yEe27CPqF90FV732w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl
                          rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 00:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
        Validity
            Not Before: Apr 27 00:21:53 2026 GMT
            Not After : May  4 00:21:53 2026 GMT
        Subject: CN=69eeac21-9903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:fc:2a:ef:6d:e5:db:d2:aa:7d:96:aa:28:
                    00:2f:0d:a2:57:68:34:3d:95:f0:13:8b:12:d8:55:
                    37:c8:c3:5d:e7:d2:e2:c4:fa:92:43:4f:a4:59:e3:
                    cf:9d:25:4a:09:f3:ad:0f:aa:b2:21:76:f2:77:dd:
                    a4:7f:da:b0:48:aa:e3:a1:6e:ce:fa:00:a8:97:93:
                    4e:3e:84:32:c7:1b:bd:bd:a6:63:a5:14:bd:30:c5:
                    69:2f:57:1d:4c:f0:2e:e6:33:d6:4f:7b:e0:90:c1:
                    a3:26:ac:76:cd:36:a1:f6:d4:d4:62:de:df:92:7f:
                    5d:9f:bc:91:18:e5:4c:cf:89:21:5f:3b:d6:ac:27:
                    80:41:3d:28:5e:d3:16:25:21:34:31:e2:93:44:a6:
                    03:b8:36:c7:75:a7:fc:6f:24:3f:cd:45:49:58:69:
                    e1:b3:30:c9:f7:58:f9:e4:9c:92:e6:d0:b5:9b:36:
                    8d:a8:61:f7:da:95:e7:6b:a7:90:15:5b:6b:42:6d:
                    79:1a:fb:93:3a:c3:4e:61:ca:b1:3b:2e:2a:51:2d:
                    13:a0:cf:a1:37:63:11:58:06:d5:3f:32:98:2e:da:
                    5c:87:15:dc:0b:3d:0f:ea:48:ed:93:c1:23:a3:c2:
                    0d:e7:39:97:52:fb:75:c2:2a:60:b7:63:ea:84:84:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:35:8F:06:47:13:53:72:C2:8C:33:26:B7:62:E3:0F:96:76:8B:87
            X509v3 Authority Key Identifier:
                keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fd:c9:c2:25:88:3d:00:46:e9:09:c8:4b:5b:27:c9:82:84:
         a4:69:a0:dd:37:d2:ce:2b:74:71:0c:eb:bb:8d:44:14:83:0b:
         89:ac:aa:6b:c0:cf:75:aa:11:5a:b8:c5:fa:59:69:77:42:5f:
         6b:dc:24:0c:d1:c5:dd:61:ef:8e:60:4b:a7:60:89:0c:06:ef:
         9d:ba:29:05:72:9b:56:dd:b5:fb:ce:95:c2:3f:d3:05:c2:3b:
         1a:96:50:9b:30:52:4a:a1:9e:63:a3:53:cf:54:5f:04:87:b4:
         5c:c1:86:a5:9b:a1:c3:5e:a6:4d:d9:d7:2d:59:8f:fa:68:4e:
         bb:62:8d:a1:ca:d9:95:96:d7:50:cd:63:f9:f0:c2:e5:9f:ac:
         ac:50:cd:3b:61:48:4a:42:10:06:04:54:f4:bc:31:17:2c:3d:
         e7:51:d7:a5:ee:83:11:d1:72:43:93:34:6f:e0:bf:47:97:d4:
         c4:67:96:01:a8:84:49:de:ca:47:38:09:e5:14:dd:9e:a7:66:
         39:21:1d:6e:f4:ad:1f:fe:92:fb:37:e0:64:37:ac:fe:f4:97:
         96:20:3f:64:c4:48:8d:bc:95:ce:83:1b:dd:d9:5b:fa:96:5c:
         20:e6:61:3b:e3:4b:b8:80:19:6e:3d:e4:6c:8d:4a:89:39:fd:
         ef:98:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:41 2026 by rpki-client