Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File:                     jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier:          PfRy5Hhz6xHtpIIEB92F6td6G3LMWN5+zXT8OtB4+60=
Subject key identifier:   53:AA:AC:23:7A:96:0E:E1:F2:88:7B:27:64:FB:F6:6A:02:F4:8C:C4
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number:          DE
Signing time:             Sun 05 Apr 2026 05:58:55 +0000
Manifest this update:     Sun 05 Apr 2026 05:58:54 +0000
Manifest next update:     Sun 12 Apr 2026 05:58:54 +0000
Files and hashes:         1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: IxLTRuVVGcr1mUl9nyxwYlrRkbI73oWbjhh6TKqWqsA=)
                          2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: aH/OZI7liUoMXnfYTacg+2z5O4WF8f62aR9XKpewm/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Apr  5 05:58:54 2026 GMT
            Not After : Apr 12 05:58:54 2026 GMT
        Subject: CN=69d1fa1e-2990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:fa:3f:c2:e4:88:05:4a:2f:82:7d:82:66:
                    f4:78:ac:f9:5e:d1:62:5e:33:d5:f7:61:a5:8f:85:
                    6b:3a:7b:2e:a6:ec:79:6c:76:8a:16:8c:4c:10:c7:
                    68:b8:63:3f:97:a9:6a:1d:48:b2:e4:d9:04:15:25:
                    0e:84:e2:07:95:2c:6c:21:44:26:f8:cc:88:3e:30:
                    ff:ce:fd:d5:ea:f7:33:2e:83:68:7f:40:f8:27:af:
                    a7:04:c0:42:61:e4:ba:f5:73:cf:82:52:ae:65:d1:
                    f3:49:32:f9:a0:08:88:72:e3:60:9a:30:ea:8c:02:
                    29:d9:ef:02:31:08:34:fa:51:3d:62:fd:3b:05:54:
                    ea:ec:e8:e0:8d:35:c1:39:af:66:c8:af:83:0b:1d:
                    36:9a:7c:d3:46:18:77:c0:f4:85:ad:56:ea:0f:0a:
                    bf:1c:36:94:6c:ed:1a:65:d3:38:d9:ed:4d:87:d1:
                    b9:b8:1d:d9:88:d5:0c:1d:b1:c6:ee:76:d8:bd:eb:
                    c7:57:90:23:91:8e:44:62:4c:d7:ee:46:a6:aa:0b:
                    13:ca:75:90:7f:c7:97:b1:83:f0:18:4a:cf:fe:be:
                    bb:a6:06:be:8a:2a:59:79:6b:63:be:88:bd:f3:2b:
                    4d:09:44:2b:6c:70:de:44:76:ee:4c:b5:1b:b0:58:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AA:AC:23:7A:96:0E:E1:F2:88:7B:27:64:FB:F6:6A:02:F4:8C:C4
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8a:a4:c5:92:a2:ba:f0:65:27:97:ac:ac:2e:fc:6c:be:1c:
         e8:19:cc:7c:bf:91:61:71:7e:68:24:16:3b:41:47:53:aa:25:
         c2:7f:6b:64:f4:35:c3:be:bf:75:3d:5c:75:d8:da:ee:4c:2e:
         fb:ee:7b:98:f8:b2:a1:4f:00:3e:c1:84:5b:92:e2:66:57:d9:
         5d:49:04:79:60:b7:01:34:03:4b:a3:27:3c:c9:e9:40:f2:44:
         82:33:73:bd:06:96:92:21:32:c5:a7:1e:00:c1:f4:c4:90:c7:
         d8:64:63:c6:77:9a:10:40:fc:28:0d:7b:fb:ed:24:c0:fc:46:
         db:d7:a8:ba:45:e0:82:b6:8b:06:bd:3c:1a:f9:b3:c6:92:c0:
         75:47:70:9f:2b:b2:ae:1d:f6:47:9a:33:34:d9:b8:c8:e0:5d:
         2b:aa:c7:3b:4d:f3:35:2a:82:8f:a1:19:94:d0:55:3a:c8:09:
         da:4b:c9:5f:d9:9d:31:e1:e3:8b:dc:6f:bb:cb:f9:9a:80:db:
         70:2e:a6:0b:7c:49:4c:8f:2d:ec:4d:0b:02:1c:c8:b2:6d:3e:
         3e:7d:35:51:63:a7:6c:fc:6e:f2:2c:b7:f1:41:bf:0b:dd:ba:
         4b:5f:16:65:e5:9b:43:35:e4:09:86:6a:d6:77:25:42:98:08:
         b3:fa:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:06 2026 by rpki-client