Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
File:                     jedlypHSuTU2K6RMdbXBIrSmzvQ.mft (raw, json)
Hash identifier:          QHMDQ0PVIosfWy0pIpCXlNp1fmuqBEzqwcI7pATNFH8=
Subject key identifier:   EE:C2:10:04:6E:25:C8:99:07:B3:06:BE:34:CD:D4:4E:B7:14:6C:34
Authority key identifier: 8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
Certificate issuer:       /CN=A913E5F9/serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
Manifest number:          2F
Signing time:             Sun 05 Apr 2026 08:05:06 +0000
Manifest this update:     Sun 05 Apr 2026 08:05:06 +0000
Manifest next update:     Sun 12 Apr 2026 08:05:06 +0000
Files and hashes:         1: jedlypHSuTU2K6RMdbXBIrSmzvQ.crl (hash: 4RxDX3UXT1huenkEgrPB7X02DR9BeNvPNQLnm3JjrD0=)
                          2: DF3673AAF69211F094F72B3C3B6F56BC.roa (hash: fnqiKGE3K2rrneA73qgjy9hRogfZICMcrPpFNmCB2iY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E5F9, serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
        Validity
            Not Before: Apr  5 08:05:06 2026 GMT
            Not After : Apr 12 08:05:06 2026 GMT
        Subject: CN=69d217b2-3aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5f:c8:fa:54:51:36:c9:aa:27:2a:96:55:d7:
                    03:8b:29:80:a7:9e:76:d1:74:33:f5:63:e0:a6:ad:
                    30:2a:ba:e4:fc:32:f3:3e:03:1b:cd:93:f5:67:24:
                    fe:89:22:18:70:de:02:6e:34:e2:75:c8:28:1e:e0:
                    c4:0e:e8:91:fc:9d:81:41:2b:f3:8c:e7:00:47:1e:
                    ee:c5:f1:3e:a3:54:45:5d:79:5c:2b:97:6d:ac:9c:
                    48:9d:bc:94:db:36:51:eb:83:8c:b0:40:18:cb:64:
                    c3:c1:88:75:89:fd:4f:e4:bc:f1:36:e1:ef:26:81:
                    c3:ab:d9:0b:af:43:20:2c:34:41:fc:12:99:66:b8:
                    53:32:04:ba:7c:f2:94:81:32:de:47:1e:d7:f6:47:
                    f9:6e:bd:5b:4c:3c:38:b0:ca:5e:0a:94:44:91:83:
                    69:2c:46:4e:b7:b0:3b:14:19:bb:8f:dd:62:0d:07:
                    c1:8f:bc:92:af:62:a8:00:5b:7e:45:2a:a9:03:12:
                    c2:70:c3:fb:9f:b6:25:11:3e:23:dc:5f:4d:7e:20:
                    fe:5f:ed:0f:5c:d2:cb:5d:51:6c:88:3a:ff:89:2d:
                    17:de:88:23:83:c6:1d:3e:e4:e4:96:35:d7:c5:94:
                    49:4f:f9:89:25:93:2d:0f:5b:45:60:4a:c5:0c:d7:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C2:10:04:6E:25:C8:99:07:B3:06:BE:34:CD:D4:4E:B7:14:6C:34
            X509v3 Authority Key Identifier:
                keyid:8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d1:29:f7:c0:80:cc:b3:15:75:3f:9f:df:fa:88:7a:b7:d4:
         53:18:d6:32:08:a0:bc:4e:da:51:6a:0c:af:47:f6:56:ac:8e:
         18:6c:67:45:ac:c5:18:16:fc:ae:6b:c0:c6:41:47:36:60:b0:
         3a:fa:dd:9d:2f:e2:32:09:f3:8d:a9:f0:95:5b:86:ef:38:f0:
         f4:3a:cb:2e:00:68:4a:e6:e6:6b:60:48:12:48:6d:65:66:db:
         18:b6:b1:40:5c:cd:44:4b:a9:14:9b:5b:cf:4f:f2:98:b5:b8:
         c9:53:94:96:15:cd:fa:62:1f:ec:2b:da:3f:3b:1a:7e:a7:7f:
         01:50:dd:2d:16:df:ea:44:09:6c:fa:80:76:2f:45:26:33:43:
         68:dd:5c:bc:cc:d8:4b:e6:da:27:84:b9:15:2b:3c:00:f4:e9:
         bb:43:11:78:bd:c8:28:5a:26:f7:c9:8e:5b:d4:aa:af:a6:19:
         fe:8a:b4:af:72:75:93:3a:80:bb:68:84:bf:5e:0e:9e:ba:3d:
         b0:b0:97:be:05:d3:4e:7c:e4:aa:f5:b5:7e:37:70:a8:09:eb:
         28:ac:dc:c7:e6:1f:e8:16:8f:6c:17:6d:7c:e8:85:8a:b3:9c:
         e4:b0:1d:d8:57:f4:09:15:e4:29:e1:74:30:90:a8:95:60:fc:
         c1:24:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:12:10 2026 by rpki-client