Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File:                     JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier:          WdZ5I+pdF0o8rvhjf8xHCjCectw6oO6GpjWbPKLMjeg=
Subject key identifier:   1D:8F:CC:E4:68:B8:AE:8A:C4:6A:C7:2A:34:9D:61:5C:27:1F:6A:A3
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer:       /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial:       0E9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number:          0E6D
Signing time:             Sat 18 Apr 2026 17:13:14 +0000
Manifest this update:     Sat 18 Apr 2026 17:13:14 +0000
Manifest next update:     Sat 25 Apr 2026 17:13:14 +0000
Files and hashes:         1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: Vw5pdzhLMJSoHjCpvAQkfhTy+/D3aDnksB6j2Q8B/O0=)
                          2: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: yXwdOd72bbovK/lF6Uti3upvDyZiu0XdcxdU6SGbEWE=)
                          3: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: JaUMO42d058IElCDiIbG4Rs0tOfpVC1kruVkh0dRo+Q=)
                          4: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: OqElOiSTNAv1KVlC60CPfYWdntL1lekOatGd/7iB4Y8=)
                          5: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: FZBTRmN4jNtPYjIkOHiUIokPiCQDNfx5hxg3M5I9k0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 17:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3741 (0xe9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
        Validity
            Not Before: Apr 18 17:13:14 2026 GMT
            Not After : Apr 25 17:13:14 2026 GMT
        Subject: CN=69e3bbaa-7fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:57:a7:70:a7:de:f4:c9:17:fe:d2:16:cb:d8:
                    9f:1a:6b:ba:ce:19:a5:b0:5b:01:c9:d4:05:5f:b6:
                    f0:ab:4b:35:df:e2:b2:91:3f:97:65:a3:ab:94:b7:
                    af:93:d1:35:15:5d:f9:bf:09:89:9e:3a:68:0b:78:
                    8d:02:36:e6:7e:4a:75:05:94:f8:42:34:41:0a:22:
                    2d:84:7a:cb:e2:21:c0:46:f1:07:4d:a7:78:66:a7:
                    21:8c:50:45:2c:e5:ea:d3:5c:99:92:8c:c0:ef:50:
                    2e:48:06:20:fb:75:90:3c:08:73:1d:99:67:9f:9a:
                    af:24:3f:ee:6c:eb:80:09:5e:4e:a9:f9:35:48:40:
                    6c:96:d0:0b:8e:67:fc:3a:a1:c8:19:9c:1f:5d:af:
                    ca:6e:65:23:c8:f0:10:e3:86:f1:fd:d3:a5:0a:e0:
                    42:e3:eb:46:01:f8:fd:19:b4:c8:de:23:98:f5:7a:
                    b5:0a:76:a7:24:b8:c6:f6:0c:6a:46:ee:e3:f8:e6:
                    7d:90:f8:f9:80:fa:74:38:4b:d3:b8:a8:8a:37:a7:
                    9e:6b:49:9e:f5:43:7b:71:4f:7a:06:87:28:de:11:
                    83:ca:65:25:51:59:8e:67:33:3e:12:63:83:a7:7b:
                    8f:42:db:f1:c3:5f:5f:ba:ae:97:fb:67:09:df:1a:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8F:CC:E4:68:B8:AE:8A:C4:6A:C7:2A:34:9D:61:5C:27:1F:6A:A3
            X509v3 Authority Key Identifier:
                keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cb:9e:cd:83:07:5c:f1:e3:4d:88:e1:0e:8a:f2:4d:e3:c5:
         6f:4e:14:d6:eb:27:31:f9:cb:60:72:ee:f1:90:cd:a1:9f:8c:
         e0:ae:81:a7:75:72:d7:bd:62:36:44:d7:ec:14:48:93:f2:82:
         df:50:1e:c0:50:80:b4:52:cc:04:b4:c9:1a:7e:ae:e5:ac:3b:
         ea:1c:81:09:47:93:ca:b8:34:84:86:15:ed:89:dc:76:3d:57:
         53:05:60:2b:2f:d6:fb:9c:fa:63:e2:f8:1f:d3:5c:a1:83:03:
         cc:47:b0:cc:62:af:20:bf:b0:4f:82:6b:d8:67:1c:a3:20:0d:
         94:a4:4e:6c:fa:d9:61:69:d9:aa:a7:fe:74:b5:37:10:bc:2c:
         e8:ed:c1:c7:d9:e0:6d:d1:6d:de:17:3c:2f:ee:2c:52:2e:f5:
         ed:70:23:0b:a1:41:7f:3b:b6:5e:f8:4a:0e:98:5e:f2:2e:8f:
         79:28:cc:7f:e6:c3:b0:f0:c5:66:aa:8e:86:a7:a0:b3:09:62:
         1e:ba:76:2e:7d:05:c0:68:bd:eb:5d:66:9c:b1:cb:c3:c4:0e:
         1f:d4:bf:69:97:d3:48:34:db:18:f3:06:32:09:57:d1:4a:2d:
         c1:3b:2d:88:ea:ff:10:72:d6:e7:1f:03:ef:84:49:7f:ac:44:
         ab:c1:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:47 2026 by rpki-client