Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
File:                     jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json)
Hash identifier:          3Shn915TNlOaob2JffwyaW+r8MSsMar3Djq9zPnr5fE=
Subject key identifier:   D5:35:12:6A:21:92:2B:17:00:E2:09:45:99:05:A8:A6:41:96:55:B2
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Certificate issuer:       /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial:       0B64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
Manifest number:          0B4A
Signing time:             Sat 04 Apr 2026 19:03:32 +0000
Manifest this update:     Sat 04 Apr 2026 19:03:32 +0000
Manifest next update:     Sat 11 Apr 2026 19:03:32 +0000
Files and hashes:         1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: hScPls8pti51nk1ORMVWWVS+7jIeV2VzyQjT8jxrheY=)
                          2: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: bw1ZXXD3nrWTTKlM+QvM4KP4hpmIGVcK1EaM15zYDUk=)
                          3: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: TjgN6fWtBzZXfgPHTg+MA4aOrxFim9W7NjXqVTriD0Q=)
                          4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: zk9lSKL5bckK4ujX80BMa7XuYL11Sm1xpBbwBzRkhos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
                          rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2916 (0xb64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
        Validity
            Not Before: Apr  4 19:03:32 2026 GMT
            Not After : Apr 11 19:03:32 2026 GMT
        Subject: CN=69d16084-6f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3f:69:fd:38:97:0d:b0:a4:15:8e:03:ae:84:
                    11:88:75:43:a8:fc:14:1d:0c:fa:59:bf:f6:f5:ee:
                    c5:e0:28:61:b0:a5:05:8b:fd:ad:6c:e0:39:4d:ce:
                    09:69:ad:8f:b1:3b:a3:2b:11:9b:28:3a:e6:6b:d7:
                    cc:88:0d:b3:53:88:3a:bd:c5:49:ed:a3:0b:7f:cf:
                    6a:ec:90:25:fc:ab:4a:93:9e:76:8a:d5:b8:7d:99:
                    85:9f:f7:ab:af:e8:43:fe:c6:56:a6:66:67:04:57:
                    bf:7e:3e:bf:06:4e:ae:20:be:06:15:a3:72:ac:7d:
                    2b:29:c1:38:f4:33:f5:bf:ad:0d:22:73:c8:1b:bd:
                    57:c2:6d:49:55:ff:d7:ad:65:1d:a0:a2:24:f4:fe:
                    18:85:56:0c:cb:3a:69:ba:0f:7e:7d:6e:22:8b:7e:
                    cc:85:45:7c:17:28:45:11:3f:0a:3d:4e:76:40:34:
                    b8:9a:b7:80:57:94:02:55:4d:68:e3:e1:68:7e:7a:
                    98:1d:2c:81:f8:b8:3b:f5:03:21:8f:62:78:c6:0b:
                    29:e0:2c:66:c2:f2:42:9a:20:54:49:8b:2b:b0:7e:
                    a5:2f:19:d7:8c:ea:ea:15:69:a3:e7:6e:6a:3c:43:
                    d2:cd:d4:f1:5b:ba:8a:85:d5:ab:dd:fb:bc:5d:e1:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:12:6A:21:92:2B:17:00:E2:09:45:99:05:A8:A6:41:96:55:B2
            X509v3 Authority Key Identifier:
                keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c3:62:4b:a4:61:d2:3b:73:92:e5:dd:42:c3:8e:89:c1:7c:
         d2:bd:38:a3:9c:76:8c:a1:3e:c1:36:69:58:d8:ae:48:15:3d:
         eb:b8:da:09:ee:cb:8c:4d:71:72:fa:61:15:e0:b3:28:59:c8:
         3d:03:ea:71:6b:90:fb:73:30:e1:50:3d:6e:b8:4f:50:34:c7:
         f7:2d:7f:59:58:90:db:b4:4a:de:88:ec:2b:42:06:98:f1:a4:
         02:83:9a:c2:91:b2:e4:e1:cb:3b:bd:17:61:16:3b:d4:cc:d0:
         04:2f:10:e0:ca:74:a7:56:67:74:27:a9:68:83:37:e9:01:9a:
         36:fe:b7:c7:83:62:1b:76:f3:10:07:5d:45:c6:1f:6f:01:04:
         16:fa:a5:e7:ed:7f:60:8d:11:07:a5:34:50:6a:01:25:1b:3f:
         8d:85:ad:61:c6:bb:cf:9c:6b:7a:5c:60:07:bd:ea:3e:60:c1:
         2c:70:2f:ad:15:1e:15:b0:c8:fa:9e:c0:4f:7c:39:cf:34:61:
         46:c1:08:0f:0f:ef:47:f3:45:d9:9b:c9:ce:35:26:2b:90:40:
         46:71:9f:4f:e7:e3:60:9e:80:0b:4a:96:be:ea:99:ed:90:42:
         2a:4e:82:85:9a:3f:e7:7e:5b:96:37:95:51:98:7d:83:1c:0c:
         b7:cd:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:41 2026 by rpki-client