Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft
File:                     jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json)
Hash identifier:          SOyCKj01Q3Ofh9q3BPArRiFbBl5V7pK/kJg+XKx/Pd4=
Subject key identifier:   FA:6A:25:0E:0C:E4:54:3B:ED:96:04:83:83:94:E3:D1:09:DC:B8:EA
Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0
Certificate issuer:       /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0
Certificate serial:       023C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft
Manifest number:          0238
Signing time:             Thu 21 May 2026 02:36:41 +0000
Manifest this update:     Thu 21 May 2026 02:36:40 +0000
Manifest next update:     Thu 28 May 2026 02:36:40 +0000
Files and hashes:         1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: +M1eyb11XUE4ege1bGOV9YpCu7kSKrnKxehXzbz01wA=)
                          2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: 5BTUk5FCMRH9uOYl6DgcqkVKLHs4oQwojpwGn/9Iqqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl
                          rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA0C1, serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0
        Validity
            Not Before: May 21 02:36:40 2026 GMT
            Not After : May 28 02:36:40 2026 GMT
        Subject: CN=6a0e6fb9-c2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:72:85:c4:61:0a:c1:6f:f3:1a:fe:ff:63:
                    ed:70:81:bb:98:5a:b8:cb:42:98:a7:3a:19:2b:7b:
                    f7:45:13:ad:aa:cb:19:85:dc:92:1e:a3:65:d9:ac:
                    75:6b:3c:a0:24:6b:f1:43:aa:20:10:51:20:85:b8:
                    1e:8a:1f:8e:b3:93:cc:5b:5c:a9:c0:66:ce:f1:5c:
                    ba:1a:f6:4f:13:2a:3f:ac:b1:7f:2e:16:b2:20:98:
                    12:e2:87:9d:97:dc:77:96:99:ef:a6:26:f7:5e:7f:
                    9d:35:24:46:7a:0f:89:96:47:f7:36:e6:39:37:42:
                    f4:c1:14:e2:59:00:28:94:d0:d8:8f:1c:de:4d:48:
                    35:b6:8d:47:67:13:fb:d2:d6:19:ab:78:1f:4d:5a:
                    f3:73:57:90:ec:3b:48:f5:31:21:62:ea:19:d5:4a:
                    aa:6a:ec:f2:93:39:cd:c2:07:8e:7f:9e:83:25:9f:
                    3b:65:a3:08:b9:10:88:e1:eb:3d:e2:07:97:d6:e9:
                    3c:29:52:09:87:41:bf:76:54:2e:a3:74:56:84:81:
                    09:41:20:e6:bc:32:d9:9c:9d:92:84:d8:bb:1c:29:
                    f2:4c:59:e1:e7:69:4e:7c:2a:07:b8:4e:b6:08:2b:
                    d1:e9:b6:44:a6:a9:99:2e:26:68:db:9b:21:1d:bd:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6A:25:0E:0C:E4:54:3B:ED:96:04:83:83:94:E3:D1:09:DC:B8:EA
            X509v3 Authority Key Identifier:
                keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:8e:67:d2:d5:7d:0c:9c:b2:48:d4:5a:34:0b:6b:b2:6f:fc:
         05:58:3c:51:98:d7:e1:a9:7b:0c:1f:b7:cf:a3:96:31:b5:f1:
         c3:24:8c:6e:7c:78:c4:eb:90:ba:6b:6c:fe:24:e4:84:c7:a9:
         d0:f4:ce:91:24:1e:10:aa:a3:a1:36:ba:18:2e:0a:ef:a7:fa:
         7b:7d:aa:8e:8b:dd:35:4c:ac:b0:5c:cc:ae:9b:5e:77:fe:cd:
         f7:d4:85:c5:80:2a:e1:84:4c:8e:6a:40:a0:b7:1b:53:34:79:
         df:7a:b3:ca:c9:52:c0:d3:e1:a3:25:5b:70:36:f8:d2:78:43:
         7e:af:c9:c3:c5:36:07:07:98:67:c0:f3:f6:48:60:2b:4f:72:
         4b:c0:49:d9:f4:a1:b2:a0:75:57:cf:e6:df:f4:5d:49:29:b9:
         99:47:df:7d:e7:5e:2a:d3:fc:11:3e:0e:46:5e:7c:4a:bf:ab:
         b0:c4:6d:18:09:88:4a:24:ea:02:b7:c9:3a:1d:73:d1:1c:b7:
         89:2f:1e:67:a1:dd:59:96:9b:d6:de:31:87:36:20:0f:59:23:
         a7:25:07:0a:cf:a9:62:80:0a:b1:82:aa:41:7b:5d:ba:3f:42:
         23:92:7f:37:ee:32:14:6e:5c:57:62:eb:a4:a7:33:55:b5:70:
         c7:3d:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:41 2026 by rpki-client