Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
File:                     jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json)
Hash identifier:          12mDabOaJwCl/kRp3ja53mWT1qoj7IX6TKcjYtwxl0g=
Subject key identifier:   43:79:76:AD:AC:E7:36:14:30:4C:3A:88:FC:DC:73:BE:37:54:93:FE
Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8
Certificate issuer:       /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
Manifest number:          27AF
Signing time:             Sat 04 Apr 2026 16:12:25 +0000
Manifest this update:     Sat 04 Apr 2026 16:12:25 +0000
Manifest next update:     Sat 11 Apr 2026 16:12:25 +0000
Files and hashes:         1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: muigPvTZwn9XhdVnkPwioN7K7yxgji/Y3Oo2EtdJ1vY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
        Validity
            Not Before: Apr  4 16:12:25 2026 GMT
            Not After : Apr 11 16:12:25 2026 GMT
        Subject: CN=69d13869-226c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:78:95:29:f6:97:03:9b:f3:46:32:cf:fd:
                    72:bb:e3:9f:29:ed:4a:f2:42:59:37:1b:72:a3:4d:
                    97:57:c2:f3:18:8a:a9:d9:49:90:ea:2b:34:00:bb:
                    ae:f3:fa:29:e0:c2:d1:50:c8:57:33:99:60:87:9e:
                    f4:b2:27:d8:dc:c8:d8:a5:74:2c:2a:f4:6d:f4:15:
                    3b:76:d9:76:8b:10:9c:47:4e:94:77:b6:d6:04:6f:
                    a1:a9:60:f3:b0:10:4c:21:c8:43:dc:50:71:d8:9e:
                    8e:c7:c2:be:79:b3:2d:c4:78:04:56:4b:6a:c6:2b:
                    08:9d:d0:5c:4f:7c:f2:73:21:b6:43:b2:3d:7c:4e:
                    29:86:82:cc:e0:f9:80:2e:15:af:08:15:67:bb:87:
                    9c:89:47:47:bf:18:23:7e:5c:03:d8:0b:61:cb:40:
                    a0:1f:61:95:11:52:50:f0:16:21:80:f3:29:be:19:
                    f3:eb:1d:cb:87:4d:39:9b:0f:d4:36:b8:5f:d6:93:
                    8e:1b:18:9c:51:4c:a6:60:7d:63:4d:c4:64:21:53:
                    10:7d:86:52:f1:7d:bd:e8:d1:ab:2c:3c:2b:00:da:
                    d9:d6:cc:8e:47:82:08:ed:2e:91:aa:06:af:83:da:
                    2a:ff:8f:35:21:97:c0:23:b2:10:67:8d:8f:cb:b2:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:79:76:AD:AC:E7:36:14:30:4C:3A:88:FC:DC:73:BE:37:54:93:FE
            X509v3 Authority Key Identifier:
                keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d9:cb:e4:8b:a1:88:09:ff:bf:49:7a:14:9a:12:32:d8:65:
         e9:b2:21:87:fb:62:7c:07:3c:40:20:6b:3a:58:59:04:6b:05:
         86:f2:ed:e6:05:f0:d4:1c:46:01:8a:c7:d7:14:2c:89:d6:85:
         de:14:42:9a:44:cf:c6:9a:fe:00:64:9c:91:08:e8:2b:33:2f:
         23:38:48:06:99:a2:a9:80:3c:09:41:25:7f:0d:b8:91:b9:d6:
         6b:48:c1:00:55:28:95:22:b2:d9:6c:3f:d7:49:02:e7:be:12:
         6d:33:94:ef:04:99:92:ae:27:4c:df:1b:e0:58:12:75:bf:49:
         a5:29:27:3e:a0:ba:65:73:e5:56:94:14:fe:99:88:6d:c8:e7:
         49:ff:4a:06:7c:ef:69:1e:c2:bf:8c:c6:d9:44:0b:2a:9d:f1:
         c6:45:c9:80:3f:95:50:71:ca:13:ca:8e:d1:d8:a2:29:a3:e8:
         2e:56:c4:81:67:cb:af:f5:64:3f:78:8a:7b:6f:cf:69:09:e9:
         0a:d8:3b:90:9b:1b:06:e4:cf:cb:45:54:78:89:fb:04:52:b5:
         9c:d2:7f:71:07:23:31:87:bb:75:cf:bd:46:03:0a:0e:0b:b8:
         2a:e3:2f:f5:f6:b1:65:b6:31:4a:71:77:22:0e:85:8d:08:3b:
         6e:b6:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:48 2026 by rpki-client