Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
File:                     J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft (raw, json)
Hash identifier:          n+fm0WoUa9F6+9BkCBOoAJd78ZGVcBNG+cdF11QhvJk=
Subject key identifier:   3E:75:69:34:1C:D5:A1:07:8B:59:27:EB:51:A3:14:52:B6:1F:80:43
Authority key identifier: 27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
Certificate issuer:       /CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
Manifest number:          0109
Signing time:             Sun 05 Apr 2026 05:28:14 +0000
Manifest this update:     Sun 05 Apr 2026 05:28:14 +0000
Manifest next update:     Sun 12 Apr 2026 05:28:14 +0000
Files and hashes:         1: J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl (hash: vMTgpPJsT1YHi6jnI6HBkT2mdFluhjlqD6fErjstR34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
                          rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2610, serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
        Validity
            Not Before: Apr  5 05:28:14 2026 GMT
            Not After : Apr 12 05:28:14 2026 GMT
        Subject: CN=69d1f2ee-56f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:5f:05:be:35:90:5d:35:9e:d9:5b:dc:5f:
                    8f:81:cc:ee:c3:45:91:16:87:fc:8c:a4:71:34:38:
                    43:84:46:b7:ef:db:de:83:71:46:18:03:a4:80:38:
                    5c:7d:3c:2c:e3:e2:c9:3b:ff:a6:be:d9:d9:00:3c:
                    c2:a3:9d:50:d9:f8:69:63:df:48:f7:65:23:09:dc:
                    70:01:87:f1:05:9d:ac:cc:86:b8:ec:cc:f8:5a:34:
                    42:5b:e4:ae:96:e4:42:45:f6:3e:d3:06:4f:05:22:
                    f7:c2:b0:2b:2a:3a:19:50:81:a1:07:20:81:4a:12:
                    91:01:f9:11:d0:6a:df:ad:2f:29:88:2c:79:60:38:
                    c2:4d:4b:16:c6:82:b2:4f:fd:7a:ed:c8:52:2c:11:
                    72:33:80:2e:c4:68:13:73:e1:01:c6:16:14:46:3b:
                    7c:22:9c:b0:6e:09:1d:5d:af:d0:00:12:07:c1:e1:
                    7a:4b:9d:9b:e0:84:62:8d:47:67:70:68:46:8b:c9:
                    a3:f0:2f:4d:27:83:12:3d:d6:b2:47:17:d2:44:7e:
                    34:87:f4:77:01:5a:0c:03:eb:01:5a:a9:b4:85:f5:
                    71:3d:77:de:c1:8b:96:d0:5f:e2:79:e2:6b:06:d8:
                    43:f4:e1:e1:a7:19:61:bc:33:20:c6:75:d4:73:b0:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:69:34:1C:D5:A1:07:8B:59:27:EB:51:A3:14:52:B6:1F:80:43
            X509v3 Authority Key Identifier:
                keyid:27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:20:ef:40:f8:03:ff:18:c1:f0:d6:50:5d:9e:c6:49:89:ac:
         a8:31:1c:23:fe:da:e3:4c:70:9b:a5:16:12:cc:83:92:97:1e:
         b6:6c:da:ff:9f:a3:dd:61:b3:09:61:38:07:8f:f4:f6:1c:f8:
         1b:ac:6a:e0:dd:49:c8:21:7d:5f:24:ce:b0:8e:02:d0:77:fe:
         5f:c1:cb:ce:84:ff:a1:46:db:a2:f1:d8:23:b7:b7:3f:97:3f:
         db:bc:8a:e2:86:1a:02:55:1e:43:94:c1:fb:b4:d4:15:4b:04:
         e4:59:cd:00:72:5a:74:5b:11:e7:fa:1d:8f:fc:66:5a:3b:ec:
         90:a0:0b:ad:de:cb:fb:4a:ef:f9:f4:08:34:b9:fe:98:ca:f4:
         2c:e9:b0:45:f6:6e:81:18:4e:6f:04:23:42:73:18:18:49:c3:
         9b:8c:8d:0e:37:10:c3:ff:59:a2:62:dc:c9:9a:3b:7f:d5:1e:
         58:e9:fd:90:55:b4:7d:0d:64:6d:b7:d5:5f:0e:c8:4b:7d:35:
         ba:8c:0f:4f:88:97:51:00:2f:13:f2:75:82:34:d0:56:56:06:
         ac:f6:47:65:6e:25:8d:36:b5:9b:04:f9:ac:5c:2f:85:37:61:
         ff:93:80:9c:68:56:fd:10:42:68:c5:e9:ce:dc:bc:f5:0d:ae:
         61:4f:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:21 2026 by rpki-client