Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File:                     JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier:          hjPBjkPk/0OnzgrwOZwZn3tX2YHOjHGkRIl9SRYVH4o=
Subject key identifier:   30:74:FF:E6:70:05:F9:1C:55:C3:C9:EF:7F:30:5D:D1:8B:6D:42:96
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer:       /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number:          0152
Signing time:             Sun 05 Apr 2026 04:34:38 +0000
Manifest this update:     Sun 05 Apr 2026 04:34:37 +0000
Manifest next update:     Sun 12 Apr 2026 04:34:37 +0000
Files and hashes:         1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: BWi2tOKDvAku3lK9NPabVtchoFE3b57ycGqhk/VlYLE=)
                          2: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: M6ls0jXTH4pUjtm2iE2jOj7mJz7/jJFkAHSHdBjdY6o=)
                          3: 79A1CFF0F2F311F08CC9D9AA476F56BC.roa (hash: ImLzfO9eYPkP8TeOeHFGuBUxwADU7Ur8U4TyxjSkGl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
        Validity
            Not Before: Apr  5 04:34:37 2026 GMT
            Not After : Apr 12 04:34:37 2026 GMT
        Subject: CN=69d1e65e-2c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:03:a3:96:d8:92:a5:f6:6a:cd:67:f4:e7:
                    ea:72:af:7c:95:97:23:b9:01:21:5c:de:4a:bf:0c:
                    16:d9:c0:40:c8:bb:db:0e:07:b5:ed:1e:d8:01:26:
                    e6:58:41:32:e5:09:2a:f7:a9:80:94:d8:95:73:74:
                    14:e1:68:f2:02:f8:e0:23:1f:21:6a:3a:10:b2:06:
                    b6:87:f4:a5:bb:18:93:2d:38:de:ac:ff:89:c0:2a:
                    f7:18:9b:79:ae:c8:b5:7a:d2:27:fc:9d:bd:6e:89:
                    1b:46:0d:ca:ca:b2:a8:f6:2b:d6:7a:4e:91:d8:5b:
                    46:f4:04:f5:e1:20:dd:23:47:7e:b2:e4:9b:95:d3:
                    0d:11:b1:ca:3f:c0:62:4a:b0:54:b2:79:93:d1:d6:
                    7b:ed:24:23:20:df:4e:4f:f2:3e:e1:be:cc:e8:08:
                    a4:47:40:7e:73:6d:fb:66:a6:16:9a:ae:6e:ee:0b:
                    5f:38:5c:56:61:85:6f:88:89:2e:ee:6b:ba:a3:16:
                    f9:d7:62:bb:ab:cf:a0:30:d2:4b:48:bd:7a:9d:ec:
                    3f:f7:15:0c:fc:6e:8d:68:54:01:ba:06:7f:cd:49:
                    34:6c:6e:9f:e6:86:46:28:77:08:35:80:64:d3:8b:
                    18:83:f6:25:6b:97:be:d9:25:c4:45:b5:46:99:56:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:FF:E6:70:05:F9:1C:55:C3:C9:EF:7F:30:5D:D1:8B:6D:42:96
            X509v3 Authority Key Identifier:
                keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:37:59:fd:2d:db:42:36:c6:e7:c3:6b:ad:b2:42:93:09:
         45:9c:b1:6f:b1:16:06:52:57:26:38:37:eb:94:44:32:57:55:
         fd:8d:16:f2:47:6f:bb:76:21:14:11:6a:b3:27:58:05:28:67:
         67:d4:73:5f:80:98:00:6f:8b:1a:d9:ea:6b:bb:15:2d:3f:67:
         72:ad:0a:a1:24:58:f2:b8:53:a7:8b:3d:f5:55:81:cc:70:6f:
         a0:9e:f3:c5:de:5f:64:e3:08:db:20:29:9a:af:bc:b2:f6:d6:
         2d:48:61:16:13:80:90:37:fd:8c:7c:42:e6:27:47:34:33:e9:
         8e:79:45:7e:28:a9:9c:47:af:ca:ad:37:65:d2:e2:bc:92:77:
         bf:e4:9e:92:4a:77:51:a4:0d:09:af:1a:cc:05:d2:f2:96:ef:
         c6:14:fa:e5:6e:7c:f1:25:e8:19:ed:04:6c:63:16:04:9e:af:
         5e:fe:85:59:01:56:53:c2:ae:b4:b4:38:59:61:4b:b7:b3:36:
         3f:82:f6:a5:70:6e:6a:e8:ee:a2:64:0b:68:86:d1:01:3b:5a:
         c9:6d:4e:19:3f:16:80:3b:6b:ef:c9:0b:db:8a:6d:6a:e6:ba:
         38:24:5f:1b:7f:71:bf:cb:96:18:81:f3:73:ed:82:88:04:eb:
         24:1e:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:37:12 2026 by rpki-client