Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File:                     jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier:          zsz8D3IDzrlz7K9sOF6GuekWsGffJ7IqeO6PjUec4+w=
Subject key identifier:   A4:73:B5:9E:D4:FB:22:91:DA:DD:3A:0D:A2:36:7B:05:07:86:C6:DF
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer:       /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial:       0B42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number:          0B39
Signing time:             Sat 04 Apr 2026 19:05:00 +0000
Manifest this update:     Sat 04 Apr 2026 19:04:59 +0000
Manifest next update:     Sat 11 Apr 2026 19:04:59 +0000
Files and hashes:         1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: YjATBSKxauK9mZI2aSPHonbjSI8ymwyYpCQqrjsHpy0=)
                          2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: aXpgZXW8Cnbr8t1kmvAwuXjiQ6a1hBE+IDI1VsUVDFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
        Validity
            Not Before: Apr  4 19:04:59 2026 GMT
            Not After : Apr 11 19:04:59 2026 GMT
        Subject: CN=69d160dc-c622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:99:c2:2a:a0:fb:1e:9d:ea:9a:ea:65:55:
                    3e:d1:02:58:ca:19:08:a7:cf:63:72:a3:f1:48:44:
                    4d:86:d9:13:85:42:37:53:32:bc:15:79:13:b7:ac:
                    16:aa:51:97:16:d5:46:bc:7e:98:8c:2d:7c:1d:a3:
                    3c:18:02:b4:71:3b:db:1d:bb:5f:73:c7:be:fa:b9:
                    34:72:c9:53:4c:a8:2e:bc:be:56:01:b9:3d:be:73:
                    98:4c:75:2c:b2:fe:57:43:15:ea:00:aa:13:bd:ba:
                    69:04:dd:4e:3a:b2:e8:ee:49:c1:4b:a2:4f:67:1b:
                    fb:e6:f6:4d:ce:9d:5e:3a:b8:d0:06:e2:db:77:5e:
                    55:07:23:d5:09:80:98:14:e6:b7:43:c1:f2:2c:e0:
                    90:bb:69:2b:8c:1e:9c:2e:50:06:39:67:eb:24:b5:
                    a6:cb:79:42:a7:dd:a6:86:0e:a7:39:8c:f4:59:5c:
                    95:43:0e:c5:bd:30:dc:0c:89:1c:ce:6e:c8:ce:1a:
                    a4:35:a7:c9:cd:6e:25:99:9f:28:1f:29:24:e4:81:
                    35:ac:51:eb:99:5c:fd:38:49:ec:a6:40:f6:56:0a:
                    fe:a7:af:d9:4a:63:b3:97:d2:36:93:cd:30:91:c7:
                    15:1b:ba:78:c7:be:9c:52:a0:6b:19:3e:e5:eb:75:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:73:B5:9E:D4:FB:22:91:DA:DD:3A:0D:A2:36:7B:05:07:86:C6:DF
            X509v3 Authority Key Identifier:
                keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a7:45:1d:92:5c:af:77:92:91:34:04:76:d6:9a:1a:ea:7b:
         20:ed:ce:1d:2a:39:d8:4b:2d:d1:fb:fa:61:3b:f8:0b:6f:02:
         97:3d:1a:b3:83:18:b5:5e:13:14:21:f6:86:0c:8b:f6:37:eb:
         31:07:06:a0:80:97:4e:f2:aa:35:a4:e9:9a:b1:ea:3a:ab:5d:
         17:9a:65:f5:c8:de:47:6b:33:e8:c1:c5:e5:c4:61:f3:af:2f:
         b4:bf:41:af:2b:b2:69:8c:e0:e9:e9:6f:d7:1f:75:4b:a4:a9:
         d4:15:50:be:a5:90:23:44:34:cd:79:32:de:a9:3a:7a:6a:64:
         31:ce:c7:fd:91:f3:d5:85:3e:4c:fe:a4:47:ff:d4:fa:86:cd:
         eb:7d:3c:09:f2:01:c8:b8:a0:49:43:95:ed:8a:f6:ad:87:95:
         54:90:02:eb:08:28:5b:78:a4:43:5b:3e:17:bc:61:05:76:08:
         9e:5a:a5:87:a2:81:85:bb:90:97:05:e0:b5:e4:72:65:0a:2a:
         94:ee:cd:55:a3:5e:b4:2d:fd:4f:27:7d:90:10:11:4f:83:83:
         dc:72:30:ff:3c:dd:51:3c:00:62:6d:87:65:97:41:68:1b:4c:
         1b:7a:a7:f3:0e:ab:d5:28:69:a9:db:ce:63:88:74:d9:42:10:
         e2:5e:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:35 2026 by rpki-client