Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
File:                     J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json)
Hash identifier:          CoeSkSUUaUx+ADocv9DS0J/f4uVslOSljzF8M8Xx7XQ=
Subject key identifier:   31:CB:73:85:4D:A4:83:28:47:F7:D4:8E:5B:5F:8B:8B:1E:52:1F:F1
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Certificate issuer:       /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
Manifest number:          C4
Signing time:             Sun 05 Apr 2026 06:27:19 +0000
Manifest this update:     Sun 05 Apr 2026 06:27:18 +0000
Manifest next update:     Sun 12 Apr 2026 06:27:18 +0000
Files and hashes:         1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: GpP0lQrT53Erpa0nvp55nF5Se1S0BY++ZUsgVQSLi2M=)
                          2: B0B186606D4D11F0A6237A81C4F9AE02.roa (hash: RmZJEnExUw2WVaDlvDUuaFpjpoieH5GbsGF3juvTi9A=)
                          3: E55629C4DFEF11F083E035D2586F56BC.roa (hash: sPWi5FiDO7fUcbp/+HtV4DEa+QjOMwHk89p0/p7kf+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
                          rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
        Validity
            Not Before: Apr  5 06:27:18 2026 GMT
            Not After : Apr 12 06:27:18 2026 GMT
        Subject: CN=69d200c7-fe05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:d5:ea:b1:18:cb:6c:7d:6d:fe:f8:17:2d:
                    1f:03:25:3b:cd:2f:47:15:95:9b:c6:c2:88:d1:40:
                    83:6b:55:d9:bb:b7:85:32:91:34:0b:fc:c2:8e:ae:
                    63:7b:06:9c:6d:bf:5c:35:2d:8b:a2:c1:5f:03:53:
                    1f:c8:d3:36:89:b1:bd:35:d5:54:dd:9c:f2:71:5b:
                    5f:aa:c1:e2:89:7d:20:5e:00:44:e9:75:17:34:11:
                    a5:95:f3:d8:78:76:db:79:5b:3a:28:92:15:b5:4a:
                    99:0a:aa:da:70:52:d5:16:35:df:03:e7:7a:fa:d2:
                    20:08:d7:4b:b6:77:f1:04:02:c6:a1:80:22:08:b7:
                    fa:2c:6c:8c:99:82:63:6b:80:80:d7:6c:10:15:32:
                    ca:6d:12:f0:34:b7:bd:5a:9a:f2:91:41:90:f3:e9:
                    ac:0f:c4:88:77:5d:f5:06:6d:78:48:3e:22:37:f5:
                    9a:57:6b:6d:44:90:3f:a6:17:95:c0:2d:7a:0e:31:
                    bb:53:c4:0c:13:d5:59:40:d9:5e:36:4e:a0:1d:55:
                    de:1e:80:b1:19:84:2a:ea:f3:c3:79:65:32:57:13:
                    1d:d5:a5:90:54:30:5d:6d:51:ec:17:5e:e0:c4:fd:
                    fe:86:05:90:b5:6c:93:67:83:3d:f7:a2:51:b0:bc:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CB:73:85:4D:A4:83:28:47:F7:D4:8E:5B:5F:8B:8B:1E:52:1F:F1
            X509v3 Authority Key Identifier:
                keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:af:a5:51:4f:76:b9:75:e5:fd:6e:ad:1f:6d:32:fe:81:b3:
         89:c0:de:95:e4:ea:ac:57:a7:9a:f6:82:3a:b8:50:1a:0b:e2:
         7d:c9:c8:64:59:f8:4f:09:a6:c9:09:02:f5:15:57:42:02:fc:
         17:63:9a:48:31:b1:bd:0b:32:70:f4:5d:16:fa:b9:02:e5:47:
         16:26:b5:c3:b8:17:b9:8b:01:36:07:ff:40:d8:46:e9:06:28:
         4d:d2:89:43:fd:4d:dc:7c:0a:66:43:44:1b:61:04:b7:06:54:
         0d:ef:fb:28:15:0f:16:2d:26:3e:d5:be:ff:53:5c:bc:ee:27:
         f2:62:7a:c2:1c:9b:6e:00:5c:79:0f:5e:05:ce:10:6e:a5:34:
         28:78:5e:fe:35:dc:cc:05:c5:13:3b:f4:f3:d8:4f:8e:95:44:
         f5:51:d3:92:b6:a2:80:95:e2:25:d6:05:fa:bd:28:96:bf:20:
         70:d8:c1:1a:2d:27:ad:41:29:32:eb:75:d1:d7:22:42:9d:af:
         63:a7:bc:23:7d:96:b2:cc:11:1a:43:76:6d:38:d2:81:49:8c:
         4e:0f:52:a4:d2:c0:06:b1:2a:c3:d9:25:57:4d:e3:03:51:f0:
         38:f9:8c:9f:e7:82:3e:10:fb:1d:d0:db:a4:eb:3a:65:09:5b:
         ac:13:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:17 2026 by rpki-client