Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File:                     J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier:          3pA8mvuseIRZ0dmcOWoMkP7aK/3P80+eHwspAwl+wck=
Subject key identifier:   61:47:D4:3C:0C:79:CF:81:98:6E:C6:39:3B:93:D8:05:E7:C6:D8:2B
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer:       /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial:       05E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number:          05E1
Signing time:             Sat 04 Apr 2026 22:44:43 +0000
Manifest this update:     Sat 04 Apr 2026 22:44:43 +0000
Manifest next update:     Sat 11 Apr 2026 22:44:43 +0000
Files and hashes:         1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: 1xjKZOgD5+kHNtmLWH+aFgxyLB5BEuOQEPmMfx9b1SY=)
                          2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: xyL9vaBiGiRh4WvFs0MIb3j4FJIXwUneeWSkmubICJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
                          rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
        Validity
            Not Before: Apr  4 22:44:43 2026 GMT
            Not After : Apr 11 22:44:43 2026 GMT
        Subject: CN=69d1945b-bf6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:ca:4f:c3:b3:9d:4b:4c:6a:b1:21:26:c8:
                    75:4f:b3:04:85:8f:43:f4:4d:42:b2:3a:eb:ed:fd:
                    78:cb:42:e7:e4:ad:64:c3:6a:d0:a9:06:3a:39:fd:
                    03:11:8f:25:46:1c:b2:0b:1c:0e:7e:d6:93:03:50:
                    1b:a1:09:3e:f7:86:6d:ae:82:c6:37:f2:58:53:dd:
                    46:7b:d6:9e:6a:08:38:0c:f9:7c:c8:b1:76:e9:fa:
                    ae:d6:50:7b:7f:be:1f:e3:f4:12:00:6b:0a:57:03:
                    78:3e:4c:42:61:a5:f2:65:7c:a6:3d:ec:2b:0d:82:
                    79:86:31:20:f7:9b:13:2d:8a:b2:b0:6a:9a:6a:a8:
                    ab:ca:0a:a9:14:76:fb:ff:57:67:2e:cc:77:b6:94:
                    e6:02:e0:95:66:06:a5:42:a5:f1:26:08:53:ae:79:
                    4c:98:eb:11:e0:2a:8b:82:37:35:e5:09:a1:b6:a7:
                    dd:01:e8:66:54:04:14:de:97:f8:91:f6:f9:2b:82:
                    f4:9e:32:ae:74:de:0a:32:e4:01:c4:3b:d6:ec:b0:
                    33:2c:f5:24:35:b4:18:16:35:f9:a8:46:24:d9:71:
                    4d:aa:61:ae:e9:f8:42:c0:d3:14:a7:54:23:bc:55:
                    fc:6d:83:82:3f:c8:39:4a:ca:ef:b6:f5:cd:ac:7b:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:47:D4:3C:0C:79:CF:81:98:6E:C6:39:3B:93:D8:05:E7:C6:D8:2B
            X509v3 Authority Key Identifier:
                keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:7d:26:2f:11:68:b9:33:e9:ef:64:36:98:30:76:21:df:43:
         1f:8e:cb:5d:fe:c2:b0:c0:7f:e9:6e:36:93:13:f5:0c:13:3e:
         f8:21:08:30:68:67:20:8e:29:8a:57:f4:6b:e9:0c:c5:49:5a:
         a5:c4:f4:b1:71:55:3d:98:20:8b:75:63:0f:2d:69:f8:fc:06:
         15:b5:24:9d:6d:5e:28:e7:45:1b:8c:3b:71:55:f7:d3:02:63:
         1a:b8:ab:fb:cb:7a:cd:cd:f8:79:82:93:30:d9:d3:e1:ae:bb:
         1f:e4:4b:4d:df:b0:e6:97:29:f1:73:60:4b:43:07:d4:1d:a0:
         fc:a2:e2:ef:ef:9c:1a:2d:db:09:ab:c8:8d:a0:5d:88:66:fc:
         ab:54:76:5a:2c:19:87:92:c3:e5:7e:a3:b7:cc:76:a3:80:0c:
         b6:fd:40:12:61:a2:bf:0a:6f:4f:9e:6d:0c:d6:f5:c4:2f:42:
         21:8f:29:ce:ff:d5:1f:70:fe:65:42:72:41:fd:68:79:19:82:
         2e:62:46:95:70:e9:e1:d4:d1:0b:60:9a:47:90:62:e2:40:bc:
         bb:0b:55:a3:ca:bf:77:26:97:d7:6f:00:0e:c6:6a:92:57:ae:
         4c:b1:6c:3f:67:65:db:42:a2:76:90:50:36:b2:95:ae:06:75:
         94:b0:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:54:22 2026 by rpki-client