Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
File:                     jprppXQf-n7Wju-jrYsFjQHMJRk.mft (raw, json)
Hash identifier:          /cQRvJTT9tcQSPUJ85ZjNgDWfxgu2aB+zJ1kFqCHYgM=
Subject key identifier:   1D:EB:7E:A8:38:87:6C:E2:C8:31:71:1A:22:6A:6A:65:36:53:C5:D0
Authority key identifier: 8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19
Certificate issuer:       /CN=A91B0C2E/serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519
Certificate serial:       068E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
Manifest number:          068C
Signing time:             Mon 04 May 2026 22:30:46 +0000
Manifest this update:     Mon 04 May 2026 22:30:45 +0000
Manifest next update:     Mon 11 May 2026 22:30:45 +0000
Files and hashes:         1: jprppXQf-n7Wju-jrYsFjQHMJRk.crl (hash: MAobYr17XNVrI7kzeCWW6uFw9xMD/JN5ajjvzz0/DXg=)
                          2: F9C09A980A4C11F1AEEDD02C083D8C67.roa (hash: G4jpOGgm54Mqn0I6D0+KcortaSwcEa3HeZv9ctm8xdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0C2E, serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519
        Validity
            Not Before: May  4 22:30:45 2026 GMT
            Not After : May 11 22:30:45 2026 GMT
        Subject: CN=69f91e16-606b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:c2:8a:2d:ad:2f:fb:12:3d:4e:5e:e1:4b:
                    ce:98:3a:96:75:ff:04:26:a9:d9:5b:cd:a4:7b:69:
                    b8:77:64:1a:e5:25:e8:a0:55:49:df:3c:3c:1d:41:
                    ca:e5:01:44:a4:3a:af:4c:c3:a0:bd:d1:51:d7:64:
                    d8:dc:bd:08:1e:d0:5b:5f:97:1a:67:2e:89:00:28:
                    3c:e0:3b:e6:28:27:4f:74:f7:f4:4e:c8:6a:27:a0:
                    01:1b:92:6f:0a:0c:67:08:b9:9a:8c:2b:2f:d2:a5:
                    3e:83:6b:57:90:82:7b:f2:f4:40:da:dc:a0:17:77:
                    28:c4:87:95:35:91:ff:b2:08:39:fc:2e:28:e9:ca:
                    4a:b5:4f:b2:6b:fe:d1:a2:a9:a9:0c:f2:6e:63:e2:
                    5d:fb:a1:45:3e:42:78:b7:8f:72:8d:c7:7a:7f:4d:
                    77:c5:36:79:1f:70:f3:d0:22:c3:5f:72:bf:53:44:
                    89:3b:a3:6b:c7:03:32:29:43:32:c9:86:3c:94:bb:
                    df:b3:22:bd:64:a3:73:82:5a:96:2b:4b:6a:3a:49:
                    8e:b2:4a:b4:2c:de:34:fc:f0:c2:04:34:d4:96:b7:
                    ec:9c:de:9b:94:b1:d2:b9:2d:08:f1:15:78:64:3e:
                    c7:a1:f7:57:65:79:0d:04:03:2b:92:70:8e:2e:e6:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:7E:A8:38:87:6C:E2:C8:31:71:1A:22:6A:6A:65:36:53:C5:D0
            X509v3 Authority Key Identifier:
                keyid:8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b0:4c:62:5d:6e:21:92:c3:49:c4:6a:db:27:2f:68:3f:bc:
         75:5d:c2:ed:b9:f2:ad:03:18:2a:c0:6b:2a:a4:54:f1:2a:34:
         b3:e1:1a:b4:74:91:c3:54:b0:60:c2:73:87:e0:d8:ee:53:78:
         fe:38:6a:a0:01:0c:af:ec:30:bf:a9:b3:95:20:f2:ad:8f:5f:
         dc:3e:fa:12:77:e4:e2:08:9b:54:27:fc:7f:04:4e:62:5e:5f:
         4d:a3:11:e5:00:8e:7f:07:89:db:c1:d7:a7:85:4b:47:10:b8:
         85:9d:7e:b1:f4:1e:5e:d3:f2:38:19:80:1a:8f:00:07:5f:9f:
         75:e5:d8:ac:1a:e7:b8:10:a8:69:05:5d:33:ad:62:4a:19:45:
         da:56:3f:40:ad:a7:a6:78:7a:d1:53:00:3b:41:74:aa:d1:8c:
         f0:af:a6:4c:fa:97:08:1a:c6:f0:15:89:ef:26:31:6f:bd:b6:
         a8:3b:0d:4b:47:c5:e8:50:00:56:86:31:0f:39:3a:92:00:02:
         02:a1:b0:62:00:69:45:16:00:d6:d4:38:3e:94:98:e0:17:86:
         39:5d:c3:a3:e3:c7:a0:b1:e6:74:60:8f:3b:cc:b7:f7:2f:54:
         b6:f2:ad:50:8b:79:7b:bb:7a:e8:a2:1a:7b:b9:b5:08:ec:18:
         c2:49:b1:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBDMkUxMTAvBgNVBAUTKDhFOUFFOUE1NzQxRkZBN0VENjhFRUZBM0FEOEIwNThE
MDFDQzI1MTkwHhcNMjYwNTA0MjIzMDQ1WhcNMjYwNTExMjIzMDQ1WjAYMRYwFAYD
VQQDEw02OWY5MWUxNi02MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwi3Cii2tL/sSPU5e4UvOmDqWdf8EJqnZW82ke2m4d2Qa5SXooFVJ3zw8HUHK
5QFEpDqvTMOgvdFR12TY3L0IHtBbX5caZy6JACg84DvmKCdPdPf0TshqJ6ABG5Jv
CgxnCLmajCsv0qU+g2tXkIJ78vRA2tygF3coxIeVNZH/sgg5/C4o6cpKtU+ya/7R
oqmpDPJuY+Jd+6FFPkJ4t49yjcd6f013xTZ5H3Dz0CLDX3K/U0SJO6NrxwMyKUMy
yYY8lLvfsyK9ZKNzglqWK0tqOkmOskq0LN40/PDCBDTUlrfsnN6blLHSuS0I8RV4
ZD7HofdXZXkNBAMrknCOLuYZpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3rfqg4
h2ziyDFxGiJqamU2U8XQMB8GA1UdIwQYMBaAFI6a6aV0H/p+1o7vo62LBY0BzCUZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEMyRS9BNzE2ODM2OEI0
ODcxMUVCOTcyM0ZEMzNDNEY5QUUwMi9qcHJwcFhRZi1uN1dqdS1qcllzRmpRSE1K
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pwcnBwWFFmLW43V2p1LWpyWXNGalFITUpSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MEMyRS9BNzE2ODM2OEI0ODcxMUVCOTcyM0ZEMzNDNEY5QUUwMi9qcHJwcFhRZi1u
N1dqdS1qcllzRmpRSE1KUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATbBMYl1uIZLDScRq2ycvaD+8dV3C7bnyrQMYKsBrKqRU8So0s+EatHSRw1Sw
YMJzh+DY7lN4/jhqoAEMr+wwv6mzlSDyrY9f3D76Enfk4gibVCf8fwROYl5fTaMR
5QCOfweJ28HXp4VLRxC4hZ1+sfQeXtPyOBmAGo8AB1+fdeXYrBrnuBCoaQVdM61i
ShlF2lY/QK2npnh60VMAO0F0qtGM8K+mTPqXCBrG8BWJ7yYxb722qDsNS0fF6FAA
VoYxDzk6kgACAqGwYgBpRRYA1tQ4PpSY4BeGOV3Do+PHoLHmdGCPO8y39y9UtvKt
UIt5e7t66KIae7m1COwYwkmxyg==
-----END CERTIFICATE-----
Generated at Tue May 5 05:46:13 2026 by rpki-client