Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
File:                     JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json)
Hash identifier:          IiJdjpnvHRG1WkDQ9ALsXkiXTV7VBdEvdASPE6IJpXo=
Subject key identifier:   4F:7D:CB:7F:3C:D7:8E:A1:06:8A:A4:F5:2F:E6:44:80:42:DF:21:AC
Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Certificate issuer:       /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Certificate serial:       0DEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
Manifest number:          0DE1
Signing time:             Mon 30 Mar 2026 17:51:31 +0000
Manifest this update:     Mon 30 Mar 2026 17:51:31 +0000
Manifest next update:     Mon 06 Apr 2026 17:51:31 +0000
Files and hashes:         1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: gtVDUFwji17J2qzztJUkISuBIfXrN7c67lTaMC6AM24=)
                          2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: OfNFpH9GIQJltS0lQZJbFqhAmufXcOZEA+1QEku0JhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
                          rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3567 (0xdef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
        Validity
            Not Before: Mar 30 17:51:31 2026 GMT
            Not After : Apr  6 17:51:31 2026 GMT
        Subject: CN=69cab823-be4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:3c:ef:b8:9b:df:d1:0e:88:44:1d:cd:3e:
                    85:e4:f0:10:c5:53:38:94:7a:04:16:f7:97:d6:4a:
                    97:95:08:13:49:40:01:bf:d4:23:4a:78:12:d4:2b:
                    b2:37:7c:2f:70:e5:60:ca:36:08:92:e9:79:11:97:
                    cc:ef:05:30:2e:75:1d:63:86:60:0e:57:a3:bf:e4:
                    22:36:7d:99:0f:ea:07:81:9c:ba:91:56:ff:79:ad:
                    2e:ed:a4:8f:8a:2e:7f:6a:ba:f0:bc:4b:cb:58:b5:
                    30:54:ea:5a:a7:17:26:32:c2:14:e6:ab:b9:d0:1a:
                    d4:45:5c:f0:a6:7f:da:f8:4a:08:3d:3c:29:bc:bc:
                    d5:44:45:4d:0b:86:3e:59:0d:37:11:2f:b7:d0:16:
                    e5:82:b9:9c:e6:bc:8f:40:d6:7c:40:7f:c4:eb:ae:
                    68:f5:c1:a8:2e:b4:7c:51:f7:c9:77:97:73:8c:30:
                    d1:5b:d9:15:f6:7d:b2:6c:58:77:2a:48:18:1d:cb:
                    42:35:ae:f4:d4:0c:46:de:36:31:5d:db:16:63:c7:
                    a6:5a:8f:a3:fb:f0:51:48:42:be:f6:5c:c5:d7:23:
                    2d:34:b1:ad:21:b2:c0:b4:6a:24:aa:e6:ea:ac:8f:
                    c1:a7:70:16:7b:47:57:12:e7:9c:50:1f:28:e1:af:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7D:CB:7F:3C:D7:8E:A1:06:8A:A4:F5:2F:E6:44:80:42:DF:21:AC
            X509v3 Authority Key Identifier:
                keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:99:2b:24:49:d4:1a:0f:15:40:3d:5a:b9:25:2a:98:09:cb:
         63:e1:d3:63:08:d3:c5:84:9c:02:6a:3b:75:39:27:9e:9d:44:
         4d:71:04:fe:da:2e:8a:5e:37:8b:ec:d7:76:17:4b:4a:2d:b3:
         55:b9:3f:a9:46:31:8d:57:66:9b:40:f0:09:c6:98:1b:f6:48:
         55:46:fe:18:26:59:1d:23:91:d1:34:64:9b:10:92:24:72:85:
         8d:51:48:65:13:3e:ee:39:7d:43:19:18:54:40:93:8c:17:d7:
         d9:52:66:ab:05:37:c9:69:8a:da:b7:47:fc:7a:e5:d5:17:07:
         27:6f:9a:c1:c3:01:44:eb:e8:6e:1d:2f:8e:38:0f:a4:da:bf:
         37:48:cc:73:9d:47:cd:e4:ab:52:52:a4:4a:58:f2:06:be:94:
         30:51:bb:a7:65:cb:f3:29:18:b3:02:9c:87:71:a7:25:dd:29:
         b1:da:b8:fa:66:6e:33:84:c9:a5:d9:e2:67:89:bf:99:06:b7:
         1b:0c:e9:68:5c:7f:46:65:df:5f:4c:d2:ba:48:43:9d:99:93:
         19:b8:41:17:e4:bc:f1:21:4a:6b:9a:a5:a9:95:7a:1f:6f:8b:
         8f:12:27:ac:d1:d4:f5:d9:ce:08:37:47:90:99:79:78:fe:30:
         2e:10:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 22:47:09 2026 by rpki-client