Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
File:                     j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json)
Hash identifier:          7MrKaMQfvQHkTymN/xajWa60oytvbwR5eZLXLomt4Ps=
Subject key identifier:   9B:DC:20:83:B3:A0:E6:FC:3C:C8:87:5F:C8:1D:9F:79:BC:05:ED:C2
Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0
Certificate issuer:       /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
Manifest number:          01E1
Signing time:             Sun 05 Apr 2026 02:55:43 +0000
Manifest this update:     Sun 05 Apr 2026 02:55:43 +0000
Manifest next update:     Sun 12 Apr 2026 02:55:43 +0000
Files and hashes:         1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: EYZOMQgFow29cR7KW2pWpqjtWjr19W1Qhly0bYXkL08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl
                          rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0
        Validity
            Not Before: Apr  5 02:55:43 2026 GMT
            Not After : Apr 12 02:55:43 2026 GMT
        Subject: CN=69d1cf2f-83c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:5b:27:58:ba:cf:21:8e:a5:d0:4e:fc:84:
                    24:62:a0:e2:35:3e:a4:c8:0a:aa:c5:7a:9d:ee:f9:
                    33:a9:0e:25:25:d0:ca:cc:1e:04:21:1e:4f:6c:30:
                    19:da:8b:bc:01:02:79:d9:dd:0b:e1:51:55:99:46:
                    a3:8e:18:5d:ec:c8:a1:9e:0a:48:50:fb:11:85:f4:
                    55:6e:92:41:c0:8e:c3:07:4d:9e:ee:10:28:63:df:
                    cc:d9:31:b2:f8:24:4f:02:af:39:5b:f0:4b:46:d9:
                    29:f6:b1:f0:fb:44:4f:d6:b5:9b:59:fe:22:1b:bb:
                    dc:b3:3c:8a:69:77:6b:a8:b4:c6:5f:7b:2b:e5:3e:
                    8b:98:e4:9f:d2:9d:b3:50:57:63:ba:59:6f:98:fa:
                    34:26:c7:de:7a:f9:07:c4:d7:7c:7d:ba:61:f9:f3:
                    05:0a:df:60:d7:d5:ef:cc:dd:35:bc:0f:bc:e6:5e:
                    01:90:5d:d8:f6:a0:c4:0d:76:9f:2d:b8:a7:58:9a:
                    3b:58:7c:a7:1a:fc:77:a5:a4:29:a7:97:1a:e3:bd:
                    09:aa:a2:34:9c:5d:63:13:01:4c:d0:96:bb:d9:de:
                    c6:af:e5:9c:7e:a0:aa:24:96:c6:32:a5:14:7f:a3:
                    65:d9:82:d6:c6:1c:c2:d6:6a:1f:13:e2:cf:f2:ca:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DC:20:83:B3:A0:E6:FC:3C:C8:87:5F:C8:1D:9F:79:BC:05:ED:C2
            X509v3 Authority Key Identifier:
                keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:02:7e:eb:0f:90:44:d8:52:c6:84:15:b9:7d:4a:5c:be:
         0c:71:37:33:d3:f0:08:8c:88:06:a4:1d:2c:25:19:c9:b7:a0:
         82:ce:6e:50:22:b3:67:eb:19:f6:1d:20:49:36:06:85:6a:11:
         9b:9f:9c:ed:83:4f:49:35:10:b2:cf:4f:96:8e:b0:1d:0a:3d:
         ac:4d:3a:2a:42:c0:72:56:6f:89:65:70:7f:2b:54:72:d5:0e:
         61:55:b1:0b:6e:53:73:97:67:0e:20:22:82:42:a3:09:2d:ff:
         e6:c3:d1:f3:5b:b7:ae:ce:c6:a9:43:16:04:85:69:ab:dd:74:
         50:ad:ba:44:a0:c7:34:96:7a:af:5e:20:f5:2d:9f:fb:b7:e7:
         70:14:28:2f:e5:ca:a0:09:1a:05:24:df:46:9b:25:96:54:0d:
         d3:86:60:03:95:18:7e:79:d5:56:73:7f:c7:a3:bd:3f:35:46:
         35:f6:3e:4f:60:aa:82:3b:e6:83:1d:62:ab:f0:7b:73:d1:ac:
         84:97:15:fc:a8:31:98:61:85:77:ed:a4:d3:e3:15:eb:95:2d:
         92:b0:b1:0c:42:40:73:09:f3:d4:4d:6c:6e:85:dc:d0:9b:7e:
         6f:ed:21:b7:fc:34:e0:09:d2:ee:0c:76:d2:63:10:ab:19:33:
         13:07:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:54 2026 by rpki-client