Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
File:                     jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json)
Hash identifier:          YX2sypAPX8pue6WLTCOL6tLVs7floEmUXfGCfU/m2es=
Subject key identifier:   98:07:43:90:CF:50:F9:7A:B0:AD:01:9B:1A:0A:E5:83:F5:FD:FC:1F
Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
Certificate issuer:       /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Certificate serial:       3555
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
Manifest number:          3549
Signing time:             Wed 20 May 2026 15:07:37 +0000
Manifest this update:     Wed 20 May 2026 15:07:37 +0000
Manifest next update:     Wed 27 May 2026 15:07:37 +0000
Files and hashes:         1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: SbLDsmMiVGvdpma7XDNHo9xF3DLqZf6Liwg1nKmY4dA=)
                          2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: rcFyozuFtBU24Fj/puD3Y3gAMLE1tFWBMfsBdsY0Lgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
                          rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13653 (0x3555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
        Validity
            Not Before: May 20 15:07:37 2026 GMT
            Not After : May 27 15:07:37 2026 GMT
        Subject: CN=6a0dce39-1485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:e8:8e:d8:eb:fa:0a:5d:ee:48:67:2a:3b:
                    e4:95:4b:3d:22:74:3b:52:a9:10:b0:60:8f:eb:33:
                    0d:c8:64:5d:5d:cd:7e:26:e7:52:df:01:1a:6d:44:
                    ae:a5:53:f5:76:61:a8:10:45:e3:06:df:68:12:62:
                    b2:6a:ce:5c:b9:09:49:63:c7:1d:51:ac:41:5b:aa:
                    59:60:60:83:15:14:36:ac:40:02:54:7f:70:b2:26:
                    7b:2d:74:99:d0:48:11:7f:62:a2:ce:7a:e2:ac:45:
                    2a:1f:1c:4c:d2:fb:65:a6:62:af:4b:e8:3d:16:c7:
                    53:4e:33:ec:45:ca:04:09:df:34:e9:5b:f4:33:0f:
                    4f:88:aa:2c:dd:d9:79:80:b2:7f:5d:95:c9:f6:24:
                    b8:07:cb:b4:c0:cb:89:96:f0:ba:f1:e5:1f:11:03:
                    77:c7:59:1e:c6:be:2c:e5:0c:bd:bb:8a:cc:5a:4e:
                    52:4d:f2:2e:be:64:c3:fa:ef:ea:7a:d9:01:15:b4:
                    66:78:e9:ba:f5:4b:d0:1d:6e:71:d1:53:bf:d9:c5:
                    be:71:c1:a2:2f:ea:15:a8:3a:46:ee:df:cc:8f:a0:
                    95:3e:1b:6c:97:2b:2b:96:bf:a3:8c:f2:e1:11:10:
                    58:e1:36:3d:b8:11:59:e5:b9:9b:91:28:99:1f:ad:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:07:43:90:CF:50:F9:7A:B0:AD:01:9B:1A:0A:E5:83:F5:FD:FC:1F
            X509v3 Authority Key Identifier:
                keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3b:ad:03:1a:16:2d:67:1a:55:2b:69:77:c7:87:c4:9c:4a:
         eb:3e:1b:eb:75:ae:0a:87:71:bf:04:9b:39:39:d5:51:8f:8f:
         e2:2e:96:33:89:f9:c2:72:05:29:b1:63:3a:89:c9:bc:f9:bf:
         7f:91:d6:43:5c:48:f2:31:29:81:34:fa:b7:73:20:f2:62:70:
         51:d3:5f:b0:f4:5b:a4:5e:7a:42:53:95:98:08:b6:60:b5:e4:
         98:fd:5e:58:5e:3c:60:59:ed:4c:0b:03:c6:01:1d:81:d2:b0:
         3a:21:d7:13:a4:af:7d:bd:9d:c5:a2:0f:fa:5f:62:27:41:08:
         a7:fc:e8:1a:fa:18:16:13:83:67:e5:6a:c6:1f:65:74:9f:5a:
         a4:89:df:a3:8a:51:1f:4d:de:15:d3:55:26:5d:48:10:00:c4:
         27:35:57:04:98:39:7e:c7:f3:63:29:af:e8:db:97:b5:fa:f0:
         b6:96:d1:98:77:5d:58:b4:f5:2d:fd:26:e7:11:88:9e:00:4f:
         c0:7f:f5:f6:3d:3d:d4:dd:88:b8:e0:b9:e2:1f:42:ae:dc:77:
         3d:80:4f:25:96:60:00:8e:7c:08:53:2b:20:a0:09:3f:cf:ad:
         83:c5:39:39:dd:cf:20:24:89:81:c3:a9:4c:88:fa:d7:7b:f2:
         b6:ac:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:14 2026 by rpki-client