Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
File:                     jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json)
Hash identifier:          FUigbP15pJaLkiPzfMKA8+tayd5CToEoztvy47/8Z7M=
Subject key identifier:   5D:D5:D9:3D:36:B0:B4:C3:72:36:8B:C6:A3:C4:BF:65:B3:31:76:AA
Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66
Certificate issuer:       /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
Certificate serial:       0BB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
Manifest number:          0BAC
Signing time:             Sat 04 Apr 2026 18:50:13 +0000
Manifest this update:     Sat 04 Apr 2026 18:50:13 +0000
Manifest next update:     Sat 11 Apr 2026 18:50:13 +0000
Files and hashes:         1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: UQW2koUg08vrGr5CM+7QIeQHQZSOHLCOP/pbSCw5uwI=)
                          2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: ybu4TRi1kWC8ch99fNXPnIw41VP/i805qg2nqD/B1Eo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl
                          rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2997 (0xbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
        Validity
            Not Before: Apr  4 18:50:13 2026 GMT
            Not After : Apr 11 18:50:13 2026 GMT
        Subject: CN=69d15d65-1653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:e2:48:74:df:36:29:14:2e:2c:2b:92:2d:
                    37:d7:10:5f:b0:fe:26:83:72:aa:31:ba:5a:cd:a1:
                    29:bd:ae:eb:a3:32:a1:b2:eb:5a:8c:1d:ed:d6:60:
                    a1:e4:03:21:8f:b6:71:29:27:f0:3c:26:d9:3e:ea:
                    5e:c9:f3:70:29:a5:ee:d2:af:86:84:17:74:b2:36:
                    f6:1b:cc:3e:87:dd:9c:fb:54:32:c4:41:ed:3f:3f:
                    e7:73:5b:00:2e:dd:48:ef:af:fd:ae:1c:db:77:a3:
                    0d:74:43:3d:5a:a2:c5:b6:a9:50:39:19:2f:bf:9a:
                    73:41:37:ae:7f:f4:ed:d3:9e:50:fa:86:dc:cd:92:
                    c2:f9:41:9a:64:4a:0d:b7:97:8a:9a:6d:b8:a4:7f:
                    f8:48:a9:53:b8:21:74:f2:00:40:23:cc:d3:97:2a:
                    28:29:06:e0:92:a0:ea:1c:2e:02:ec:c8:f9:e5:45:
                    5b:6b:fb:4e:8e:ff:1b:2b:17:2f:a3:11:c5:77:ee:
                    a9:c5:0a:67:66:58:53:9b:96:65:95:f1:cc:50:df:
                    0a:06:b7:ab:03:49:51:e2:59:d4:82:21:fd:cf:22:
                    14:cb:2c:09:c4:0f:c8:c6:b6:37:e1:b9:c7:10:5f:
                    9b:84:7c:04:c9:ec:3e:f7:85:cf:f3:6e:5f:28:26:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D5:D9:3D:36:B0:B4:C3:72:36:8B:C6:A3:C4:BF:65:B3:31:76:AA
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6d:a5:70:a9:f8:61:95:68:99:5a:95:d4:75:d2:4f:c7:8a:
         4e:0d:fb:fe:40:c8:57:5f:86:14:22:e0:4c:19:e2:7f:13:19:
         a5:c0:09:56:b6:f2:46:f9:24:fa:fc:b4:ed:09:c8:e5:75:e2:
         08:1b:14:da:9d:31:be:3d:86:e4:1f:80:4b:ce:d8:72:03:db:
         c2:27:9d:43:5b:8e:28:86:38:61:45:7e:a3:b0:ee:17:58:73:
         9d:4a:39:ef:f2:b8:97:c7:5c:f7:44:6e:c5:b6:cb:05:1e:8f:
         54:80:0f:5c:bd:ea:8b:a8:ba:46:2f:4e:52:fe:7a:ac:7c:2d:
         96:ac:08:63:ff:f2:5b:61:e3:b6:75:5c:63:a3:22:42:5a:bd:
         65:f3:8e:2f:67:00:b2:67:37:ac:67:19:44:82:eb:e7:b4:cd:
         d4:e3:63:96:b7:b6:c2:4b:51:14:df:a4:87:27:c7:5a:d1:f1:
         ed:3a:27:f7:03:1e:3a:b3:3d:89:8d:47:1c:73:c9:b7:44:07:
         53:e1:a1:de:81:6b:4e:cc:06:86:69:7f:64:a1:56:80:74:89:
         64:36:03:4a:d9:a3:c9:95:d4:54:ef:8a:30:22:15:88:91:66:
         88:5e:13:97:82:dd:36:ac:ab:58:9a:70:40:90:2b:48:6d:49:
         33:15:98:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:15 2026 by rpki-client