Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File:                     jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier:          /ZuP+P7quqx8pH78rvUiYI4oqI1ysklRDpMs++Kf2ac=
Subject key identifier:   6E:8A:BB:98:6D:51:28:F5:6A:9F:B0:7C:43:92:27:FB:34:25:26:28
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer:       /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number:          012D
Signing time:             Fri 17 Apr 2026 05:18:53 +0000
Manifest this update:     Fri 17 Apr 2026 05:18:53 +0000
Manifest next update:     Fri 24 Apr 2026 05:18:53 +0000
Files and hashes:         1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: OJukkFqDFbPfkqXORjPNJGf5GW0QEyR9IxAILlNeH4Q=)
                          2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
        Validity
            Not Before: Apr 17 05:18:53 2026 GMT
            Not After : Apr 24 05:18:53 2026 GMT
        Subject: CN=69e1c2bd-d98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:4d:4c:24:df:4f:6e:f4:51:f5:4b:84:6a:
                    9a:ac:37:2a:c7:a7:03:45:49:b3:eb:84:9d:9f:4a:
                    4e:de:4f:f6:a4:3a:c8:46:f9:08:b3:e6:80:65:14:
                    04:ca:7a:65:61:a6:82:4f:6a:b5:90:0b:79:8d:f3:
                    19:75:6a:f6:14:d1:a6:57:a1:0b:c3:7d:57:1e:35:
                    38:18:59:80:92:42:3c:25:ac:8b:9f:c6:cf:b5:c8:
                    b0:f6:b0:4d:6b:9c:cc:65:7b:7e:2f:e7:21:05:1b:
                    6c:dd:c0:8f:90:ae:af:d6:b9:0c:2d:57:37:a0:c6:
                    36:c2:62:6e:9b:c6:d6:a1:d2:c4:65:53:cf:cf:bd:
                    f1:a4:5e:4f:bb:5c:52:c0:5d:80:1d:42:5f:c7:5a:
                    7b:90:28:08:9f:cd:17:4f:e4:22:2b:34:1f:9a:83:
                    19:18:f5:94:d3:5c:c5:96:a7:95:ed:2a:bb:5f:c3:
                    49:d2:68:48:f6:e1:3e:a5:b6:c8:88:4b:fe:87:dc:
                    3c:80:ab:79:b8:cf:20:69:3c:85:97:c2:9d:2f:75:
                    7d:d9:74:5e:0e:0f:64:59:03:75:51:d7:11:14:76:
                    0f:02:81:33:3a:4f:8d:3a:41:a4:73:68:0b:53:66:
                    63:2a:30:b2:50:d5:4e:4c:c0:bb:28:e3:e3:74:49:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8A:BB:98:6D:51:28:F5:6A:9F:B0:7C:43:92:27:FB:34:25:26:28
            X509v3 Authority Key Identifier:
                keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:9e:b3:2b:98:5a:81:42:52:ad:fc:f9:7b:5f:69:fa:a8:
         7b:d6:5c:97:8f:d1:5e:20:59:67:7a:47:b7:11:3e:24:d5:e5:
         8b:cd:82:a0:a1:12:26:0e:09:c3:ca:15:5a:63:bb:6f:94:ff:
         98:ef:88:6a:dc:17:c4:6c:26:0a:0c:5b:76:af:e1:f5:74:f1:
         8e:43:25:7d:ab:61:3d:12:96:42:09:5d:ca:47:04:2e:70:5d:
         6c:eb:bb:cf:07:b1:5e:a4:08:68:37:8e:6b:7a:10:16:21:4e:
         6c:28:5b:e9:f6:62:e9:a0:86:3d:61:eb:88:1a:f4:6e:9f:6e:
         1a:9e:8f:5e:72:cb:14:6e:b7:23:20:b0:63:0c:68:17:e8:10:
         6e:7d:3f:c6:e8:fc:3a:a2:92:5c:2d:d1:a9:23:93:98:ad:10:
         f1:42:d7:94:84:fc:69:d1:08:e6:34:c8:2d:3e:81:45:33:03:
         9f:81:3c:0c:3d:cf:2b:89:86:74:7c:fd:43:4a:3c:0f:18:ae:
         aa:6a:08:07:f6:0b:c7:8b:63:dc:e2:8b:d7:84:ab:05:f9:08:
         75:04:c2:69:51:c9:f7:7d:8f:8d:90:93:6d:2a:b9:7f:0a:a7:
         3a:c1:48:43:36:ba:39:30:22:3c:26:34:56:27:96:7b:af:f5:
         6c:3d:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:24 2026 by rpki-client