Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File:                     jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier:          7IeB0P6dsU6uF4OiXxfVE9LV7vYPJSN6RqT5+vjmAO0=
Subject key identifier:   0D:8F:A1:3A:A3:C3:10:B9:44:F7:37:08:B3:9A:12:2A:70:9F:2C:C0
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer:       /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial:       1C78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number:          1C6B
Signing time:             Sat 04 Apr 2026 16:06:22 +0000
Manifest this update:     Sat 04 Apr 2026 16:06:22 +0000
Manifest next update:     Sat 11 Apr 2026 16:06:22 +0000
Files and hashes:         1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: D8fJZuRylvI0uO2cQtA4dvisEthLLc9cr46XtT18bSs=)
                          2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: k4TlMYilN23yIOsOzxylamYG8qpDaep1a1zgx1W7uB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
                          rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7288 (0x1c78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
        Validity
            Not Before: Apr  4 16:06:22 2026 GMT
            Not After : Apr 11 16:06:22 2026 GMT
        Subject: CN=69d136fe-9e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:15:c6:e6:30:9a:d3:69:63:54:a4:a7:4e:
                    df:79:47:d1:c4:28:a2:d4:82:7e:83:d9:b0:60:16:
                    4d:3d:63:30:b0:63:2c:eb:87:7a:4c:51:f6:90:7b:
                    ad:91:41:c8:36:f5:7b:70:69:aa:0b:83:0f:c0:22:
                    2d:26:29:42:46:dd:f1:a0:0f:c5:3c:c4:64:ad:03:
                    3b:4c:2e:ca:ba:f2:5d:ab:ce:3e:2e:29:33:11:20:
                    78:76:94:08:92:70:8e:67:a9:1b:2d:76:53:b8:65:
                    c5:03:a1:29:9f:5a:40:2d:32:38:21:82:0a:07:bf:
                    84:eb:15:43:ba:37:4b:a4:08:aa:da:31:4e:68:cf:
                    37:15:e8:b0:4e:cf:94:4e:9f:b2:b6:7b:37:95:e2:
                    12:4c:3b:6c:ff:b2:20:88:81:90:45:fc:c6:37:46:
                    67:74:a9:d5:2d:83:6b:c3:84:35:fc:9c:02:03:d8:
                    20:23:36:2a:ae:38:1c:2b:0d:ca:86:d0:9e:77:70:
                    ab:17:c6:d8:08:5d:2b:5f:34:62:90:de:53:0c:98:
                    ef:54:ba:7d:28:e2:ac:75:7b:2b:ed:66:0d:6e:ff:
                    0f:78:c0:06:62:05:96:67:3f:8d:48:7a:e8:79:ee:
                    b1:33:d7:9f:f9:82:08:d3:36:d6:f5:1d:1a:0a:f5:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8F:A1:3A:A3:C3:10:B9:44:F7:37:08:B3:9A:12:2A:70:9F:2C:C0
            X509v3 Authority Key Identifier:
                keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:93:eb:c1:7d:6b:c0:05:0f:54:77:f0:a0:b4:93:f7:8b:f4:
         5d:5a:55:cc:81:43:5c:a2:a8:14:4f:4b:13:20:0b:86:67:5c:
         14:2f:61:4f:25:2b:99:1c:49:eb:15:ea:71:dc:b0:20:5d:33:
         c1:03:89:20:f5:e5:4c:a7:17:38:25:8b:2d:00:96:ee:0d:70:
         39:be:38:c4:53:d4:b1:a2:cf:1c:17:f3:24:fe:6b:42:80:40:
         66:52:d7:29:46:fc:0e:30:51:66:a0:f8:44:04:65:98:57:0f:
         f3:13:88:2d:b9:f5:7a:82:cb:21:5f:7a:46:78:b7:73:d9:4f:
         13:8c:5d:29:c6:87:83:9c:a4:a6:4f:40:eb:06:2b:65:0d:5a:
         f5:09:90:06:e3:cf:c4:0b:e1:ab:6d:0d:b7:1f:c0:2d:f3:5e:
         b0:28:eb:8b:5b:62:05:c0:fa:92:d2:f2:c7:9b:97:92:c0:30:
         4e:fd:00:1a:8a:50:9f:ba:5b:28:6c:ef:6a:eb:d5:ac:3f:27:
         3b:28:b3:7b:c4:e5:65:ab:05:ef:c8:c5:86:a2:02:4b:18:3d:
         94:7c:35:21:6b:23:32:7f:50:b1:a0:2e:7e:3e:7b:4a:d1:38:
         b9:a8:9c:8a:94:2e:8d:a0:d3:d2:18:c9:72:5d:74:71:c7:bd:
         cf:95:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:41 2026 by rpki-client