Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          sxhbDa1vbPaX6FZ6a26ErlYPEyTDxVaumfbCKCfjO/w=
Subject key identifier:   87:FA:CE:D4:F6:D4:2E:22:3A:3A:1E:0F:9A:EC:19:32:46:C7:FC:B2
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          FE
Signing time:             Sun 05 Apr 2026 05:43:17 +0000
Manifest this update:     Sun 05 Apr 2026 05:43:16 +0000
Manifest next update:     Sun 12 Apr 2026 05:43:16 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: S/QxcvgliTdA3AH+AbnhkyNxzgqXYsWSmr0negSMfR8=)
                          2: 5090FDECFF2E11F099E36B6D89EE528E.roa (hash: PrWTL5usD2G+p37NAOHzpvbn2FCtmNcY07TLdtnld18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Apr  5 05:43:16 2026 GMT
            Not After : Apr 12 05:43:16 2026 GMT
        Subject: CN=69d1f675-da42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:e5:40:c6:59:aa:76:45:ee:95:7c:66:7b:
                    6d:06:7a:95:65:6f:59:ab:51:bf:0b:44:f0:09:54:
                    18:dc:05:53:b6:c1:0e:7d:77:ff:41:db:6d:7e:43:
                    be:83:18:b2:88:34:51:c7:f5:27:af:c0:4b:81:b0:
                    2c:d9:e6:be:4c:1c:7d:62:52:32:f9:b0:00:97:af:
                    b1:71:05:e6:b2:f1:26:c7:9c:26:2d:47:fa:5a:74:
                    2d:21:fa:1b:17:1a:35:86:18:74:3f:27:ea:1b:49:
                    00:0c:d1:a9:60:63:7a:13:a7:c2:78:d9:ce:f0:54:
                    d5:ee:e7:47:e4:b8:fd:92:ce:bb:27:b7:ef:6f:e1:
                    7f:bd:a9:2b:40:13:72:8b:93:4b:e5:14:74:fa:ff:
                    d2:52:26:bd:e6:9a:c5:68:a0:59:fd:c8:34:9d:92:
                    3b:5a:66:9d:6b:a8:22:a2:07:25:f3:d8:1e:90:9e:
                    56:97:42:1b:88:a1:6f:7e:9e:ff:5e:a1:8b:15:18:
                    7c:2b:cd:a7:5b:03:d1:21:63:0c:bf:3b:06:26:ff:
                    40:8c:29:0a:73:3b:3e:a4:6f:88:ed:8f:08:42:3f:
                    1b:ac:b5:db:9c:7e:7a:c1:73:d0:fa:02:fe:84:2b:
                    9f:f1:d7:74:23:61:8a:1d:97:4f:3e:51:18:d9:21:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:CE:D4:F6:D4:2E:22:3A:3A:1E:0F:9A:EC:19:32:46:C7:FC:B2
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:56:1b:db:6e:28:95:03:a7:88:4d:e7:02:d5:c1:83:bc:81:
         3b:b0:69:53:7c:b5:84:a6:69:fb:3d:34:f8:05:63:3c:fa:56:
         a0:57:e4:4e:ca:62:32:26:52:3e:cf:b9:27:45:5c:01:39:aa:
         bb:07:26:d0:42:e3:c7:81:63:28:7a:9e:a0:d3:76:3e:d4:fb:
         c1:32:c2:c2:a8:80:c4:99:f0:eb:e9:5a:90:48:7f:53:fe:28:
         9d:1a:a1:cf:b7:21:ea:ba:a4:98:72:51:fd:77:bc:41:e1:d6:
         89:e3:87:29:bc:e5:0e:fe:85:a9:82:31:ca:17:38:91:05:cb:
         51:d9:11:c6:98:82:31:99:db:21:0b:0d:c3:5f:fb:56:d6:06:
         3c:fe:d5:98:67:df:e9:28:2d:9e:eb:e0:f0:fb:03:e5:98:a1:
         25:b7:fe:7e:a6:b0:5b:fa:cc:3b:cc:f6:e5:21:66:c3:31:de:
         e3:18:c8:e3:35:53:45:9e:6d:2e:81:98:79:22:e8:3f:67:e1:
         15:51:27:d1:81:c6:38:1f:c2:a5:de:3e:07:71:5c:4b:dc:bb:
         ab:a9:da:60:05:52:3d:a5:9a:14:b5:bd:60:bc:a5:8b:0d:86:
         e2:3f:7c:d8:2d:f1:17:89:a1:f6:47:3d:85:32:54:2d:3e:c9:
         8a:c6:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:33 2026 by rpki-client