Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
File:                     JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json)
Hash identifier:          ZfR1gBHlCOPooUh1Yw/Vh+CYid02UiTptV5OpZyGVag=
Subject key identifier:   E6:04:F8:4A:6B:33:2A:C6:D8:09:35:30:1A:7B:AF:52:FF:83:1A:CE
Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
Certificate issuer:       /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
Manifest number:          071F
Signing time:             Sat 04 Apr 2026 21:37:00 +0000
Manifest this update:     Sat 04 Apr 2026 21:36:59 +0000
Manifest next update:     Sat 11 Apr 2026 21:36:59 +0000
Files and hashes:         1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: 9Q4x+rKRK5VhSbTAd8XcoEN3KBJtJfPFlJPxlCYoxeY=)
                          2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 5p6KcnLc05tJjviw0bQLNNvRQf/lT9uBBLbX63CSm5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
                          rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
        Validity
            Not Before: Apr  4 21:36:59 2026 GMT
            Not After : Apr 11 21:36:59 2026 GMT
        Subject: CN=69d1847c-7e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:bf:29:e7:39:8d:fd:3f:48:84:a5:da:65:
                    6e:b9:d8:6c:15:60:fd:8e:30:75:5b:35:c2:79:f6:
                    0c:a9:c9:4f:5c:19:8a:16:07:65:71:d2:01:bc:2b:
                    e8:66:c0:96:9f:3f:19:85:f2:95:83:3d:36:4e:dd:
                    13:96:f6:81:18:77:de:74:cc:5d:d0:d6:9f:ea:a2:
                    79:9a:65:6f:6c:a7:7b:3a:0e:71:80:0b:6f:ba:6b:
                    80:23:e5:e5:3b:3a:04:f5:7d:c4:33:96:0c:73:5b:
                    79:43:44:f9:51:82:14:0e:7d:a6:57:19:54:d1:95:
                    64:60:2a:3d:11:f9:37:80:68:da:2e:f3:12:4e:f5:
                    e2:c1:28:8e:7b:f9:d1:92:1e:da:de:b4:84:51:f8:
                    2a:a1:01:de:56:3a:a8:e1:32:2f:31:1c:14:4a:ee:
                    1c:22:fc:90:76:16:20:2d:14:34:d8:5c:d3:04:7d:
                    3d:13:89:d9:78:d7:11:4e:db:76:06:0f:19:c3:5b:
                    39:59:aa:fc:b6:33:b5:b0:29:ee:9b:d4:04:a3:9d:
                    79:82:cb:e3:5d:31:60:9c:c7:60:d4:ba:c5:0a:f8:
                    2d:f9:1e:dc:3e:dd:26:a4:1b:86:80:c2:87:6f:de:
                    c8:f5:26:b5:bd:20:f8:6b:37:f5:f6:aa:71:9f:40:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:F8:4A:6B:33:2A:C6:D8:09:35:30:1A:7B:AF:52:FF:83:1A:CE
            X509v3 Authority Key Identifier:
                keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:32:2b:d8:db:79:11:72:65:d0:aa:c0:58:02:5e:b8:a1:
         47:4c:90:89:af:0d:5b:cd:da:6a:4a:96:42:09:5c:e4:19:8e:
         ea:db:33:2e:26:57:66:59:09:d2:a2:21:d6:84:06:2d:00:93:
         56:06:9e:01:9d:b5:23:84:4e:05:59:aa:a9:d5:6b:67:45:ef:
         6b:08:33:4d:24:7f:0b:d6:73:95:d8:15:55:6d:3e:06:db:29:
         43:28:2f:21:ad:1a:da:ca:8b:5c:dc:5d:2f:87:90:ae:83:48:
         76:6c:ad:78:65:b5:5a:80:99:70:35:eb:08:66:37:bf:1a:c6:
         51:56:8f:1a:32:52:76:0a:a5:c7:34:72:59:a4:c2:d0:77:1b:
         3a:e2:74:b6:bf:c1:6c:0b:ab:56:a8:da:3e:26:36:38:a7:4f:
         17:f9:4b:88:64:a0:5f:85:21:3a:98:c5:7c:01:2f:bc:86:b4:
         29:b5:7e:2b:12:50:1e:db:d5:05:0d:c3:e9:8d:e4:2c:9f:c3:
         4f:81:1a:17:57:38:fe:32:8c:8c:39:df:2e:cd:68:a5:b0:3e:
         80:b5:6a:80:fd:f6:d7:36:60:62:89:48:0b:92:53:33:0f:57:
         f5:bd:8a:3c:1e:2c:94:4c:6f:32:6e:3f:66:99:07:af:21:c0:
         ab:47:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:02 2026 by rpki-client