Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
File:                     J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json)
Hash identifier:          eW5q6KkloUa2AjcocK1TauMziRI/BNS3mFOPA9kODNY=
Subject key identifier:   9B:A5:FE:6F:23:CD:D3:34:DC:6F:39:F5:7B:31:5C:FC:C5:05:95:DB
Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
Certificate issuer:       /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Certificate serial:       1049
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
Manifest number:          103F
Signing time:             Sat 04 Apr 2026 17:18:20 +0000
Manifest this update:     Sat 04 Apr 2026 17:18:19 +0000
Manifest next update:     Sat 11 Apr 2026 17:18:19 +0000
Files and hashes:         1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: 7yQkXuw6uJsNXrfGyRmtQul+YTRsPE6HOS3sVYoToDg=)
                          2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4169 (0x1049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
        Validity
            Not Before: Apr  4 17:18:19 2026 GMT
            Not After : Apr 11 17:18:19 2026 GMT
        Subject: CN=69d147dc-0e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:b7:d0:33:15:f2:28:2b:2b:14:9e:79:d3:
                    dd:b4:b0:d7:12:af:8e:61:47:1f:02:9f:da:42:25:
                    aa:f9:86:19:62:4d:8d:4e:cd:b4:e9:bf:60:a4:e8:
                    b0:09:ec:93:bb:18:27:78:70:75:91:51:0d:d4:bb:
                    f4:68:1e:ad:89:f8:da:74:e9:e3:fa:72:56:e5:ee:
                    f4:cd:e9:43:9f:7e:0f:9c:cf:85:2d:ad:04:8b:0c:
                    3b:49:3f:bf:44:94:c9:10:08:2c:3b:51:e4:85:db:
                    b8:67:18:f4:8f:f1:cd:ae:17:06:fe:c8:fb:3d:8c:
                    b6:ee:ad:45:5d:18:bb:05:b5:29:33:47:0f:ef:02:
                    ed:a9:a8:9c:4b:d6:b9:5f:17:87:64:42:50:fc:5e:
                    59:c3:39:c6:f3:23:c8:e6:29:32:8d:58:86:71:f3:
                    fb:b3:94:3f:0d:9b:ac:72:b0:70:dc:b2:10:1d:e4:
                    2f:35:ba:45:12:8e:b4:9e:d4:74:a3:9a:63:1f:3e:
                    68:cd:28:33:31:14:a9:d7:9a:ca:56:d7:c2:13:8c:
                    4d:5f:98:1a:9a:f3:fa:c0:ea:b9:26:7e:3e:7e:e6:
                    ad:61:58:b8:9b:71:24:4d:f0:f7:d1:54:51:a4:a5:
                    77:a7:e3:fd:fb:96:ef:6f:61:64:50:7f:2f:20:b5:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A5:FE:6F:23:CD:D3:34:DC:6F:39:F5:7B:31:5C:FC:C5:05:95:DB
            X509v3 Authority Key Identifier:
                keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:bd:8d:cb:52:45:5f:59:bc:35:b9:85:da:29:d7:b0:49:
         f5:5c:05:12:51:78:7d:c3:79:60:c3:8a:3e:89:ef:59:47:ff:
         6c:21:7f:f3:ad:89:37:1b:54:0a:16:e3:a3:37:ae:b5:78:95:
         ee:bc:94:37:92:77:60:81:5b:3f:0a:66:97:2e:4f:5a:f2:db:
         6c:2d:74:69:45:42:68:d8:6b:78:20:84:34:44:d6:18:60:1f:
         42:6b:e7:fa:db:a9:ac:67:f2:34:79:91:41:03:f3:a6:d7:c8:
         84:0e:b1:67:f1:33:7b:02:9c:7f:2a:30:d0:db:9d:75:17:a3:
         4f:70:89:30:0a:cc:82:74:63:48:ff:cf:79:37:7c:65:3a:d9:
         b2:9b:a7:fe:42:1c:44:78:88:76:e8:a2:0d:46:31:c0:75:8c:
         5b:75:90:3f:02:de:be:24:e2:c9:90:d8:5f:f7:04:ca:00:ca:
         66:f6:80:71:50:18:ee:e1:13:3e:6f:46:23:35:72:08:30:19:
         71:b4:f2:2c:64:73:9b:ae:ee:75:6a:18:00:7a:29:3d:a6:22:
         2d:4e:78:4e:74:5e:91:30:f2:bd:ff:53:fa:66:ee:e0:09:06:
         e8:36:61:82:77:97:d4:8d:c1:d7:71:33:2a:60:82:50:67:d4:
         77:e9:a0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:37:02 2026 by rpki-client