Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
File:                     RJUXO9LCk43jBnfP3ec80xuKJnY.mft (raw, json)
Hash identifier:          uHJ/H5vfQ2PBwsih3qWAGgFbT4kkN2dVBionmExR0ZM=
Subject key identifier:   A5:72:E4:24:87:ED:3A:CD:29:B1:90:E0:9D:09:06:CD:44:4B:FA:6F
Authority key identifier: 44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76
Certificate issuer:       /CN=A91A5098/serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
Manifest number:          F5
Signing time:             Sat 18 Apr 2026 16:01:47 +0000
Manifest this update:     Sat 18 Apr 2026 16:01:47 +0000
Manifest next update:     Sat 25 Apr 2026 16:01:47 +0000
Files and hashes:         1: RJUXO9LCk43jBnfP3ec80xuKJnY.crl (hash: Dq3E6CjHwrQ6rTskiFASSer4F98rAuT6E6v/eO5ywiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5098, serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676
        Validity
            Not Before: Apr 18 16:01:47 2026 GMT
            Not After : Apr 25 16:01:47 2026 GMT
        Subject: CN=69e3aaeb-b22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:57:47:15:7e:ef:55:85:45:fd:f4:af:3f:
                    c1:cb:ff:08:d4:e8:f7:22:46:28:42:ee:7f:e9:14:
                    48:be:b0:cc:17:b6:0e:a4:e1:bd:c8:ee:30:c5:98:
                    bf:2e:d9:3b:71:07:cd:a8:a3:71:3f:02:b0:b1:01:
                    05:18:ef:9b:77:e2:12:45:b0:13:61:fc:72:15:14:
                    14:09:d4:e7:43:d4:1a:9d:ce:c4:ff:90:0a:2a:7c:
                    79:63:c4:d3:16:61:f2:31:d3:54:91:ae:18:76:12:
                    d3:0a:0e:b8:15:bd:a5:17:f4:bb:01:c0:5d:f6:b9:
                    49:bc:23:39:c2:54:d7:77:22:13:33:bf:6b:72:84:
                    14:2f:89:3a:d3:54:79:33:d4:a0:c3:63:d5:88:5c:
                    18:55:40:78:73:61:41:39:ad:6d:8a:cb:4b:61:6a:
                    4c:a6:1a:21:35:a2:b9:1a:04:85:b4:38:b7:69:77:
                    87:23:54:79:fe:76:14:20:9e:46:73:da:45:37:0a:
                    10:09:bc:54:4b:e8:5a:5b:fd:a6:56:5b:47:1e:02:
                    3a:36:ff:1a:b6:07:3c:8a:ad:4c:93:8d:96:4d:3a:
                    4d:63:7c:b2:5e:c3:b8:70:fb:20:50:a3:f8:21:34:
                    36:18:58:2a:30:40:11:3b:2f:48:ef:dd:dd:89:ba:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:E4:24:87:ED:3A:CD:29:B1:90:E0:9D:09:06:CD:44:4B:FA:6F
            X509v3 Authority Key Identifier:
                keyid:44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:24:b0:60:c7:a1:ac:22:34:5b:b1:0a:d8:9a:55:7e:c7:
         96:52:fe:bf:9f:12:f4:b6:2e:0e:4c:9e:19:9f:ab:09:a8:21:
         cf:f9:19:19:58:ce:39:f7:d9:45:ec:95:40:d5:9d:16:38:50:
         32:0b:94:2b:c1:ac:2c:7e:b9:d5:7d:be:64:a7:96:68:be:ca:
         7e:4f:94:4a:71:65:a9:d3:11:77:84:94:8f:db:f9:d8:c7:6e:
         8d:c9:fb:37:e8:06:28:1b:26:ce:af:0d:f7:29:b7:f7:6c:89:
         7d:e8:fa:d0:a1:73:70:55:eb:01:4c:26:fb:66:3b:34:50:57:
         ba:58:68:3b:35:8e:7e:a1:b7:db:e4:bf:68:13:14:2d:0a:02:
         79:df:34:23:5d:d4:85:89:25:c8:a0:e7:ba:70:46:2e:23:4d:
         c6:1b:05:14:70:55:3c:a8:ce:22:5b:fd:9a:37:de:07:53:e6:
         dc:71:0f:1b:3c:1d:da:7d:41:a7:e4:3a:c9:0a:3b:ff:61:59:
         2f:ea:5c:99:84:b5:58:2d:3f:d1:a6:a1:40:1b:9a:32:40:5a:
         9a:2a:b7:f3:09:8d:bb:26:19:34:a7:3d:ea:e9:06:bf:26:eb:
         56:44:b7:78:76:21:9c:45:f5:8f:da:2c:77:dc:32:a8:da:78:
         f3:0b:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:03 2026 by rpki-client