Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File:                     JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier:          AYMiwGCbpV0zwH8rSIontbQk8A+MUlyfP9+MPjgqIlA=
Subject key identifier:   8A:A6:FD:2B:73:79:DD:05:25:AB:B4:E0:2A:F6:BF:42:DA:18:00:06
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer:       /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial:       0252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number:          024C
Signing time:             Sun 05 Apr 2026 01:54:22 +0000
Manifest this update:     Sun 05 Apr 2026 01:54:22 +0000
Manifest next update:     Sun 12 Apr 2026 01:54:22 +0000
Files and hashes:         1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: iNt/JKLn+kvMwO/hFGfGKrAycXRrTuj8Yw4Ak49GxhQ=)
                          2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: ThH+uRO/NK0/JqzhTteBatdGoRYQgyv/pPCLt6AvEMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
                          rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
        Validity
            Not Before: Apr  5 01:54:22 2026 GMT
            Not After : Apr 12 01:54:22 2026 GMT
        Subject: CN=69d1c0ce-206b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:14:4f:c0:b3:0a:fb:95:2f:02:a5:d0:7f:
                    e1:aa:72:25:9e:45:b6:10:a8:58:bc:01:f4:09:7e:
                    e5:77:a4:97:97:b2:6f:f9:d4:82:5e:34:c4:42:d9:
                    4b:72:6a:7f:2d:1e:03:62:f8:1d:a6:54:85:e3:29:
                    a9:08:40:c4:3c:66:b9:60:c6:f7:11:e0:f9:e2:45:
                    b8:91:52:96:bd:d8:63:ef:39:29:a8:9e:5e:d7:e8:
                    b7:a0:34:50:b3:a4:00:bc:18:7b:76:8f:7c:ac:bb:
                    44:b3:34:5a:78:55:08:5b:f8:6c:c0:3f:37:3a:86:
                    ae:f0:5e:1b:c7:9d:75:a7:43:0a:61:c0:e6:26:00:
                    76:b1:aa:49:c4:7c:bf:b0:52:5b:1f:82:ab:9d:a3:
                    2a:1b:f2:9c:63:c3:1e:43:9f:45:d0:fd:e0:39:fb:
                    00:8b:08:dd:b7:88:6b:59:b6:51:b6:8c:55:ab:16:
                    22:2c:96:2a:d8:e8:0b:62:1a:2f:28:9b:a2:be:65:
                    62:91:9f:3f:8e:4b:55:e0:d1:42:a6:2b:36:63:01:
                    1e:e7:c2:cb:01:b9:91:2f:4c:f6:79:92:e7:b4:5e:
                    7a:74:bf:b6:26:7a:9f:dd:4d:a7:35:d3:93:2f:19:
                    e2:d1:be:db:38:eb:41:be:fa:21:e2:ae:62:ff:03:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A6:FD:2B:73:79:DD:05:25:AB:B4:E0:2A:F6:BF:42:DA:18:00:06
            X509v3 Authority Key Identifier:
                keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:85:80:cf:0e:0f:8b:3f:39:98:d5:4a:52:f8:7e:30:4a:a7:
         a4:37:a8:36:78:b9:40:3d:65:a2:e3:f3:78:3a:e8:ee:9e:7c:
         64:41:5c:0e:9c:16:00:16:32:a5:e1:fa:cf:d5:b9:5e:64:7b:
         d2:ab:4f:71:ec:1e:71:d6:4a:03:9d:c6:92:56:ae:b4:6e:60:
         47:1d:75:7f:ce:b3:3f:fc:1e:fe:f1:1a:ce:da:5d:54:eb:b2:
         b7:ce:b2:6f:81:b1:2b:b8:e0:f2:f7:5d:b3:0c:ce:59:a2:7d:
         6b:94:82:cb:07:25:21:34:1e:01:a5:4c:7b:0e:67:12:92:f6:
         42:c5:c6:e6:3d:38:48:20:9e:be:33:ee:24:1d:cf:01:00:19:
         74:21:e1:7f:13:4c:6e:06:fd:6c:33:97:2b:36:35:35:c7:1a:
         4a:eb:b5:86:54:e4:0c:86:77:7d:d4:55:66:dc:83:d6:8c:16:
         d9:68:7b:66:dd:ab:33:da:12:fb:77:03:57:40:7f:6e:f9:9a:
         c5:d9:af:1b:ce:f3:51:66:f0:af:d6:3f:98:6b:bf:97:d7:71:
         f2:2f:0f:33:a3:c0:c5:c5:94:86:f0:e6:a8:f5:58:9f:b0:52:
         2e:22:47:c1:00:67:22:c5:3f:1d:7e:8a:e6:ae:ab:46:f7:18:
         34:49:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:02 2026 by rpki-client