Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
File:                     jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json)
Hash identifier:          bflq8xYBd21yDMiEbGlw5R8rquwSAkAeJBqWIv5z9cA=
Subject key identifier:   F4:53:55:60:CD:03:A0:72:CA:85:44:8D:B2:E9:FE:7B:88:F1:F6:ED
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Certificate issuer:       /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial:       081C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
Manifest number:          0814
Signing time:             Sat 04 Apr 2026 20:53:43 +0000
Manifest this update:     Sat 04 Apr 2026 20:53:42 +0000
Manifest next update:     Sat 11 Apr 2026 20:53:42 +0000
Files and hashes:         1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: EQ2KCUky0NfBZy1hoPaUMe052vugLbc/CQMKMoFdulw=)
                          2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: OrVBPVtRF7WGpthCgMiHldDDDE70rH33I+w5C0zy5Nw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
                          rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DF0C, serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
        Validity
            Not Before: Apr  4 20:53:42 2026 GMT
            Not After : Apr 11 20:53:42 2026 GMT
        Subject: CN=69d17a57-5a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:b5:a6:ad:b9:42:9b:e1:50:8b:c2:6e:b3:
                    b5:ec:17:50:fa:f2:57:89:ec:ec:d3:c0:c3:ba:64:
                    17:5f:0f:87:e2:8b:7b:6f:c4:b9:c9:2f:c6:29:97:
                    ba:20:95:11:8a:00:fd:5c:01:53:80:7c:67:89:9d:
                    25:48:16:9a:0c:e9:49:7d:70:29:c6:d8:a0:93:d5:
                    bb:75:8c:14:aa:be:08:b0:bf:71:80:93:4f:8d:ff:
                    91:55:1c:54:16:ad:10:16:e1:f0:7b:9c:5d:26:1d:
                    2f:89:6a:75:6c:8c:c0:5b:67:f3:4e:f7:76:18:e0:
                    7d:19:44:99:64:d0:cf:c0:7a:62:0f:a6:eb:32:f1:
                    0a:1b:18:1d:d3:a3:b0:a5:ff:60:4c:46:7a:92:13:
                    8c:7e:59:35:e8:ef:af:17:c4:08:a8:8c:71:d0:62:
                    f1:20:2d:73:e5:77:ec:92:b6:88:c9:e1:77:83:6b:
                    f3:55:c3:59:64:71:8c:da:81:16:39:e0:53:aa:d8:
                    37:66:32:73:a2:9e:50:24:99:99:d5:bc:7f:d2:e8:
                    56:42:f0:de:60:7d:b7:e7:f9:03:bd:a2:ab:2b:69:
                    11:39:53:06:29:e5:3a:06:8c:a9:55:3e:48:55:6a:
                    a2:2f:ce:b5:35:1c:fc:a5:b0:86:d5:dc:22:4f:ea:
                    f0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:53:55:60:CD:03:A0:72:CA:85:44:8D:B2:E9:FE:7B:88:F1:F6:ED
            X509v3 Authority Key Identifier:
                keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:7f:84:4a:e1:14:3c:e2:f1:3f:7c:cf:1b:77:95:d4:ca:
         5a:f9:9a:6a:b7:ff:82:ad:fa:33:12:30:64:9b:45:fd:64:b5:
         24:fb:bb:41:34:dc:07:f9:48:5e:05:c7:41:df:ec:6d:37:0f:
         fd:0f:0f:ff:5d:f2:98:96:bb:be:96:58:ad:d9:49:14:8d:20:
         9b:70:76:eb:60:f4:9e:07:f2:cd:d3:1e:9f:e4:1e:29:c9:14:
         8a:e3:8a:f0:02:f0:9c:ca:85:93:5d:6f:a7:dc:bd:e4:3b:0a:
         69:e9:fe:8b:cc:50:d8:1a:0d:ee:7c:99:c2:51:75:d4:f8:34:
         bc:5d:e2:42:35:cf:8c:7f:c2:43:4e:61:da:76:11:d9:cb:9a:
         66:9d:b7:bb:ae:2a:82:cd:25:c9:f3:6f:43:ac:23:c0:be:97:
         2d:21:57:3b:d9:70:cb:f7:f7:11:78:92:5d:89:46:7f:b7:2c:
         28:9f:13:ba:98:bb:ef:0a:13:d9:62:24:f0:db:e6:bb:d0:17:
         11:6b:5d:86:22:62:f2:11:1f:55:7e:d7:61:fd:4e:62:fa:51:
         2f:c8:fc:92:48:27:9c:77:4a:35:1d:8d:79:07:6a:a0:a0:44:
         89:8b:3b:74:2e:03:06:93:5e:73:7e:58:a2:8f:fd:ae:49:08:
         f1:60:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:13 2026 by rpki-client