Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File:                     J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier:          7MqwYRWyLNpPodtRWGPBC9kLtFlI5s2Xt8HwLiXNePc=
Subject key identifier:   CD:E7:DE:D6:44:85:73:BE:14:85:32:D3:C9:43:2A:B0:F8:88:C7:47
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer:       /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial:       0CDB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number:          0CCA
Signing time:             Sat 04 Apr 2026 18:15:36 +0000
Manifest this update:     Sat 04 Apr 2026 18:15:36 +0000
Manifest next update:     Sat 11 Apr 2026 18:15:36 +0000
Files and hashes:         1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: anqUM1a4ysHhGKVv5VvWZ7gnV1lE5bZ+yVWR4HzU800=)
                          2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: g66ApfZFK5/BwJYxiIawl59WPLIsVlwdY8bAYaAobMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
                          rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3291 (0xcdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
        Validity
            Not Before: Apr  4 18:15:36 2026 GMT
            Not After : Apr 11 18:15:36 2026 GMT
        Subject: CN=69d15548-02a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bc:5c:27:4f:e0:f0:36:05:b5:24:69:b8:e2:
                    29:53:1d:c4:3a:2e:4c:69:6a:56:b8:97:b9:c1:1f:
                    f1:5d:6d:a5:cc:1a:17:32:51:df:7d:33:a7:95:3e:
                    f8:f4:ca:d1:dc:03:82:05:60:c7:ea:95:f9:fb:29:
                    9f:79:c8:1f:b0:db:09:63:51:8b:45:40:d4:ba:e3:
                    a7:28:ab:61:92:69:7c:03:19:a2:60:04:92:a0:35:
                    ef:e8:91:e5:4d:aa:69:be:6b:7f:7a:c5:39:95:b7:
                    41:dd:77:8f:01:66:1e:60:65:33:d4:60:d8:d1:ce:
                    10:fb:d9:2e:08:c1:38:5a:f7:57:c2:43:7d:7a:28:
                    28:6d:67:29:99:01:06:66:de:36:4e:a9:b7:f4:61:
                    d2:05:d1:bd:63:36:28:88:66:bb:9c:dd:da:b8:41:
                    ad:67:4a:ca:58:5a:32:6e:e4:e9:28:cf:27:2c:c4:
                    c8:13:c8:6c:24:8a:dc:df:54:f7:ad:72:34:bc:38:
                    da:9b:ee:55:a4:4d:46:3a:0e:6f:73:48:c9:20:6b:
                    8e:30:a5:e5:96:91:47:68:92:9d:2f:e4:7c:01:7d:
                    bc:37:6d:b6:70:8f:cd:17:6e:63:48:21:cc:d6:c0:
                    95:24:12:84:87:cc:a1:c4:12:ac:08:d5:43:3e:6a:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E7:DE:D6:44:85:73:BE:14:85:32:D3:C9:43:2A:B0:F8:88:C7:47
            X509v3 Authority Key Identifier:
                keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:78:29:26:fa:aa:a0:23:de:2c:4a:ad:94:4c:a3:67:f9:
         c0:d2:ea:be:05:5a:e5:f0:36:06:8b:0f:09:98:71:8e:d3:29:
         b9:19:45:43:9c:74:d7:a0:77:fc:7b:c6:1e:0f:eb:9d:66:e8:
         df:2c:1a:93:1f:15:da:93:8e:b8:78:e5:27:ce:34:21:12:6e:
         8c:53:c1:49:55:53:ca:48:f8:ab:2d:84:c3:84:df:bf:be:33:
         c9:9b:c3:18:fc:e1:9c:df:e5:f8:7a:2a:1d:e5:49:ec:5b:b4:
         b4:e0:2c:2f:72:82:34:5c:33:14:f0:8f:f5:3f:0e:13:9f:a0:
         21:6a:85:75:7f:4f:03:dc:1f:80:5c:46:b5:95:cc:82:52:33:
         d0:6a:98:8c:1a:9a:57:40:62:2a:13:69:be:dd:9d:4c:01:7d:
         90:fc:ff:72:52:4e:3d:d1:7e:16:50:cd:6c:c5:69:99:86:c3:
         d3:b8:f5:c4:cf:2a:0d:3d:43:72:ee:79:54:71:5d:99:ed:fe:
         83:cb:45:76:08:67:60:f3:e2:81:9a:e1:b1:37:e1:d4:fc:79:
         11:fd:21:6f:cc:eb:4e:48:7a:74:38:45:ac:ff:bc:9e:08:76:
         92:42:47:14:ed:2d:88:54:ce:b5:54:ad:87:10:52:fe:3d:8c:
         7e:d7:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:25 2026 by rpki-client