Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
File:                     JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json)
Hash identifier:          lpcceNqwgtR/Jzvb3uGryT2ecOLo6DKp6Ys0PVgk2X4=
Subject key identifier:   1F:57:D3:67:56:52:E6:B7:BA:78:6F:43:2E:F7:BF:82:BE:B3:CC:44
Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
Certificate issuer:       /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Certificate serial:       0E6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
Manifest number:          0E64
Signing time:             Sat 04 Apr 2026 17:38:50 +0000
Manifest this update:     Sat 04 Apr 2026 17:38:50 +0000
Manifest next update:     Sat 11 Apr 2026 17:38:50 +0000
Files and hashes:         1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: ZibCPHDyGlaAWWqihQ6Z3iwkrfHqUHbRoayo5or6J28=)
                          2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: OBgW+edgtqEgU2zYC3kqUPRhw9Mb7tvvEfxdbFYsVkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
                          rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3693 (0xe6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
        Validity
            Not Before: Apr  4 17:38:50 2026 GMT
            Not After : Apr 11 17:38:50 2026 GMT
        Subject: CN=69d14caa-0acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:52:ca:b0:12:4b:b1:69:bd:de:2f:ae:d7:
                    bc:c0:a6:84:2a:15:80:ac:9b:0b:54:87:50:da:e6:
                    b6:57:53:ad:cf:19:42:f2:e3:b2:a6:b6:50:c6:ef:
                    5b:fd:0a:e9:17:e7:85:f5:0a:24:c8:b2:dd:46:e4:
                    90:46:58:d5:0b:1a:4a:f4:10:43:5d:e8:e8:75:91:
                    7d:f4:a1:fc:ce:ca:91:38:80:98:0d:d3:a5:84:a7:
                    9c:40:30:be:72:e0:a6:4f:3d:31:b1:b4:f4:0d:84:
                    ff:c4:db:95:65:be:71:57:bd:0d:ed:5b:98:1f:71:
                    8c:b5:76:e1:75:c7:2c:fc:b4:c2:46:a5:ab:cb:6c:
                    c1:c7:15:0a:1d:92:22:67:91:21:97:d7:6c:95:39:
                    2b:fc:a8:2e:f1:b7:82:9e:73:f9:13:16:41:4d:c7:
                    8a:d6:5c:01:c8:2e:ad:5c:b0:b8:56:ff:9a:3e:cb:
                    c2:a6:83:2c:e9:45:ae:45:b8:3a:e8:e1:7d:a2:2e:
                    aa:56:63:d7:06:7b:78:5d:67:9b:91:6b:c8:db:1f:
                    59:4f:37:42:cf:0a:05:e0:15:b7:84:40:33:06:18:
                    33:92:12:79:f2:0e:1f:ae:7d:57:19:81:4b:9e:58:
                    b6:50:bd:04:c9:28:0c:b9:f0:a7:8b:ee:8a:f8:47:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:57:D3:67:56:52:E6:B7:BA:78:6F:43:2E:F7:BF:82:BE:B3:CC:44
            X509v3 Authority Key Identifier:
                keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:5d:ad:b4:4d:2b:05:f0:b7:51:09:f3:4d:5c:99:77:c8:39:
         6d:f5:d6:39:01:89:e0:b6:0c:db:d4:91:69:07:70:ac:5a:b4:
         76:05:ce:c1:23:a9:6e:fc:bc:0c:e2:c8:17:dd:20:e8:f1:2d:
         00:f0:5d:63:38:ef:d3:ea:1d:1f:45:5c:67:28:e6:df:e6:59:
         2b:c3:92:2e:c1:16:06:f3:83:e7:34:32:1d:b9:54:3e:7d:ed:
         03:81:90:07:75:b0:61:ba:48:83:d3:6d:f0:12:65:8c:4a:46:
         f5:df:35:cf:a3:2f:8d:3f:4d:bd:a7:94:c6:d0:58:be:c2:11:
         37:23:90:de:e2:47:af:c7:8e:3d:7b:47:c0:f3:b7:29:3a:0f:
         44:ec:52:6c:7f:09:99:47:af:d5:18:52:0f:f8:d6:37:6a:8c:
         e3:e6:9a:91:fd:6f:3f:91:30:22:c6:6a:33:52:cc:6f:05:c0:
         9e:4d:3a:df:d6:9e:55:46:40:2a:7f:6c:1e:1a:83:ab:80:6d:
         3e:2d:8b:be:d3:d2:57:b3:39:af:9b:3a:8a:75:1b:0c:d4:df:
         a2:a8:3f:7c:de:d4:88:fa:c6:30:5b:58:00:15:a7:ec:7d:1d:
         23:9e:22:d6:71:72:c1:d9:a4:b6:7f:75:44:27:80:8b:b2:3a:
         14:ef:91:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4
QzVGNjE5NjUwHhcNMjYwNDA0MTczODUwWhcNMjYwNDExMTczODUwWjAYMRYwFAYD
VQQDEw02OWQxNGNhYS0wYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2tSyrASS7Fpvd4vrte8wKaEKhWArJsLVIdQ2ua2V1OtzxlC8uOyprZQxu9b
/QrpF+eF9QokyLLdRuSQRljVCxpK9BBDXejodZF99KH8zsqROICYDdOlhKecQDC+
cuCmTz0xsbT0DYT/xNuVZb5xV70N7VuYH3GMtXbhdccs/LTCRqWry2zBxxUKHZIi
Z5Ehl9dslTkr/Kgu8beCnnP5ExZBTceK1lwByC6tXLC4Vv+aPsvCpoMs6UWuRbg6
6OF9oi6qVmPXBnt4XWebkWvI2x9ZTzdCzwoF4BW3hEAzBhgzkhJ58g4frn1XGYFL
nli2UL0EySgMufCni+6K+EdKywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9X02dW
Uua3unhvQy73v4K+s8xEMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5
MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt
STU0bWpFNEVhMnlNWDJHV1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb12ttE0rBfC3UQnzTVyZd8g5bfXWOQGJ4LYM29SRaQdwrFq0dgXOwSOpbvy8
DOLIF90g6PEtAPBdYzjv0+odH0VcZyjm3+ZZK8OSLsEWBvOD5zQyHblUPn3tA4GQ
B3WwYbpIg9Nt8BJljEpG9d81z6MvjT9NvaeUxtBYvsIRNyOQ3uJHr8eOPXtHwPO3
KToPROxSbH8JmUev1RhSD/jWN2qM4+aakf1vP5EwIsZqM1LMbwXAnk0639aeVUZA
Kn9sHhqDq4BtPi2LvtPSV7M5r5s6inUbDNTfoqg/fN7UiPrGMFtYABWn7H0dI54i
1nFywdmktn91RCeAi7I6FO+R+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:04 2026 by rpki-client