Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
File:                     Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft (raw, json)
Hash identifier:          Rc7X0RwFG+x/O4tmbjtYVmtVvISp++VRe8XAw4iDnSg=
Subject key identifier:   03:16:53:67:B3:11:F0:18:9A:88:E5:A1:98:DE:D2:E4:75:FF:38:AE
Authority key identifier: 26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
Certificate issuer:       /CN=A919C7D0/serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
Manifest number:          4D
Signing time:             Sun 05 Apr 2026 07:34:36 +0000
Manifest this update:     Sun 05 Apr 2026 07:34:36 +0000
Manifest next update:     Sun 12 Apr 2026 07:34:36 +0000
Files and hashes:         1: Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl (hash: GihHZ1M+JkvKIrysuxHU5o+dfSDup67eWeP84+86Ors=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
                          rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7D0, serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
        Validity
            Not Before: Apr  5 07:34:36 2026 GMT
            Not After : Apr 12 07:34:36 2026 GMT
        Subject: CN=69d2108c-300d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:47:0b:8d:f1:b3:11:4c:6d:8c:66:27:91:
                    08:be:39:e3:e0:13:6b:a2:47:81:42:3b:29:9a:ad:
                    eb:30:49:2a:5d:7c:ee:38:c2:29:6b:9e:f0:2a:ef:
                    ee:95:1f:4a:07:7e:f0:18:01:f0:5c:fc:17:fa:58:
                    10:16:7d:4e:64:c5:a7:d9:a6:11:0a:13:20:33:22:
                    44:24:8b:93:67:48:f3:4d:9d:9c:f7:d7:09:0a:d0:
                    d9:57:2b:51:e0:dd:9e:f0:94:19:18:c7:df:31:87:
                    85:98:61:c9:ca:6e:ed:b0:c2:db:74:2b:c8:31:2e:
                    55:89:17:da:e8:b5:37:3b:c4:ba:44:74:da:ce:26:
                    9c:d5:f3:db:0a:e5:e0:66:94:ed:a4:16:62:d1:4d:
                    b9:e7:9a:95:ec:7b:3b:1f:ce:fa:fb:e1:e5:ec:45:
                    f4:7c:df:2c:a0:63:b4:5d:b0:16:ad:ef:86:a8:f0:
                    0b:f3:e3:d8:e0:b8:cf:ab:25:a0:b5:6a:ca:34:30:
                    66:9d:27:e1:3d:5d:2d:2c:63:94:8c:06:cf:e9:b6:
                    cb:a1:c2:95:0b:bb:64:25:69:dc:47:91:ed:b3:1d:
                    68:99:82:f2:d3:84:58:d4:b3:c4:52:5b:59:b5:0d:
                    c2:c4:1f:85:fd:50:42:cb:20:f9:b2:1b:02:a3:5a:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:53:67:B3:11:F0:18:9A:88:E5:A1:98:DE:D2:E4:75:FF:38:AE
            X509v3 Authority Key Identifier:
                keyid:26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:ec:84:e7:09:d0:49:db:18:9e:24:a1:6c:94:34:5f:43:
         d4:df:5a:a1:02:39:69:61:44:42:46:c7:59:df:47:4c:b2:ce:
         55:07:90:79:76:98:57:17:1c:7e:8d:1a:16:43:db:9d:57:18:
         87:2b:ce:cb:eb:ce:eb:53:0b:95:aa:06:d9:f5:d9:8e:46:a1:
         91:36:e5:2c:c9:ce:c4:e6:fc:01:89:70:b8:7e:c3:bd:74:51:
         b2:6e:be:97:25:51:76:1c:22:b8:56:d3:c4:4b:a0:bc:4a:6f:
         3b:8c:6c:2f:f9:fc:e4:b3:b8:6d:3a:8f:56:6c:d5:c2:71:e7:
         24:64:03:ed:45:21:99:2a:d6:28:31:c8:54:4b:60:4f:a2:e6:
         fe:b6:f6:13:cb:50:ab:39:7a:eb:bf:89:10:18:c7:e1:6d:4e:
         39:a2:a9:c1:19:cd:c3:07:f0:cd:46:e4:e4:dc:2f:f4:e5:82:
         85:a2:45:c7:97:af:77:1c:a4:2d:ac:50:6d:45:61:b4:50:48:
         7d:04:3a:39:98:74:2f:76:1f:3c:e4:97:e8:61:7e:75:d4:98:
         ae:d1:35:5f:60:c5:a5:7f:10:72:11:b7:84:6c:2b:c0:ae:b5:
         9f:04:00:1f:ee:2b:0e:da:3e:56:48:f6:68:da:55:1b:49:94:
         36:2c:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:31 2026 by rpki-client