Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
File:                     J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json)
Hash identifier:          qwuy6BRbBaQ5BQc2NDkUaTZq6nuMRbj0/uQw2looJR8=
Subject key identifier:   F5:19:8D:14:33:5B:40:37:EA:30:25:A3:FF:C3:E1:81:74:DC:F9:03
Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
Certificate issuer:       /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Certificate serial:       0329
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
Manifest number:          0321
Signing time:             Sun 05 Apr 2026 00:53:11 +0000
Manifest this update:     Sun 05 Apr 2026 00:53:10 +0000
Manifest next update:     Sun 12 Apr 2026 00:53:10 +0000
Files and hashes:         1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: FzAiRzznqEMoFXA6yZrZrvaBMpB1+EU+O507MNA2jxw=)
                          2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: ZS5cuNMtd6yQQN38E7lp5FQ2jmo2L2QBDwPjFbM0irs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
                          rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
        Validity
            Not Before: Apr  5 00:53:10 2026 GMT
            Not After : Apr 12 00:53:10 2026 GMT
        Subject: CN=69d1b277-9c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:04:b4:23:76:8a:ec:b9:35:be:5a:83:b4:
                    aa:b2:f9:df:b7:cd:a5:9c:b8:53:7a:5a:36:71:db:
                    9e:9f:6c:2b:f8:78:a8:36:7e:b1:2a:79:25:1c:06:
                    03:a1:9b:93:44:db:60:9b:ee:82:fe:ca:53:e1:65:
                    00:c9:86:af:e7:15:0c:99:4e:ef:de:fa:59:91:81:
                    2d:fc:dc:11:3c:58:e0:e7:11:21:44:0f:1b:30:74:
                    e2:92:64:19:a0:6f:a2:b1:4f:52:d4:f9:59:6a:97:
                    76:4b:c5:35:3c:36:45:eb:83:2d:7f:b2:d6:5a:67:
                    b8:4a:df:0e:71:6c:10:8f:8a:b5:1a:42:86:24:52:
                    2f:89:a1:c4:c5:f5:c3:e5:75:35:d9:4e:80:ac:d5:
                    91:a8:2d:6b:a5:1b:c8:ec:d2:e6:36:5b:57:62:a3:
                    20:9b:60:dc:73:d8:b6:cc:60:df:d7:ef:74:c3:ad:
                    43:6f:e3:c5:21:b5:45:70:b3:2e:fa:17:20:48:33:
                    8e:d9:0d:06:ae:c7:98:2b:63:47:fc:4c:ee:fb:d5:
                    24:01:a1:7a:67:f9:dc:9c:88:f1:74:e1:a1:fb:28:
                    ea:75:9e:d6:2f:ef:1f:3a:10:f4:b8:fa:b1:83:e5:
                    98:27:cc:bd:62:92:a3:1c:c2:92:60:ed:e1:67:39:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:8D:14:33:5B:40:37:EA:30:25:A3:FF:C3:E1:81:74:DC:F9:03
            X509v3 Authority Key Identifier:
                keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:91:8e:e4:4b:08:4b:ce:04:9c:54:66:fd:33:7d:10:93:9c:
         90:95:f1:d4:74:9f:89:77:81:b8:95:a6:66:8c:02:d0:98:3f:
         dc:6c:f7:15:d8:fe:97:24:20:c4:10:8b:93:00:99:8b:57:1f:
         2a:ed:58:ee:6b:22:25:34:da:b0:2d:65:1d:bf:8a:e5:18:23:
         69:e0:8b:a7:7f:db:43:55:58:71:0c:dd:98:3d:a1:ac:3c:63:
         b0:c0:d4:af:52:6c:b5:7f:e4:44:8f:25:cd:68:c4:d5:aa:db:
         78:54:1f:1f:73:52:56:64:bb:0b:0d:7e:03:7d:e0:94:2d:06:
         73:32:a9:bb:d5:a2:7b:94:9a:27:79:6e:de:c3:e7:45:0b:40:
         18:57:bc:b5:e8:1e:98:ee:17:fc:86:0b:29:b6:ad:59:3b:0e:
         f1:30:ad:42:75:2f:7e:59:76:a6:ec:6a:a3:9a:b1:66:f1:e7:
         87:45:af:e3:0c:40:38:0c:8b:74:48:da:cd:c9:14:22:dd:93:
         1d:2f:3b:ff:1d:25:6b:5e:a7:8a:97:da:89:8b:be:27:93:e7:
         03:86:3b:0d:de:07:91:81:fb:c2:ce:46:2f:06:d1:fa:a3:10:
         3d:bc:df:dc:0d:e9:90:d5:c2:e9:75:25:d0:2d:23:b4:bf:a2:
         d9:4a:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:07 2026 by rpki-client