Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File:                     JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier:          OFScMqz9+ctAy4AtJvTO6uFWide7PFSRoALH1M0XpNc=
Subject key identifier:   00:EE:72:B6:1D:9E:31:39:CB:6E:0E:A7:F2:64:5B:2A:91:E3:EE:A1
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       2FC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number:          2FAF
Signing time:             Sat 04 Apr 2026 15:25:33 +0000
Manifest this update:     Sat 04 Apr 2026 15:25:32 +0000
Manifest next update:     Sat 11 Apr 2026 15:25:32 +0000
Files and hashes:         1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: 080zPiUGCEQpuUPv7G3zc/lHU7ik+o6SmAq8jNhSQYo=)
                          2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: qMI0+qSJUDBOM2XBKVGT0iY5F9iduz0xMqXjCiho+4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12229 (0x2fc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Apr  4 15:25:32 2026 GMT
            Not After : Apr 11 15:25:32 2026 GMT
        Subject: CN=69d12d6c-afda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:b4:95:98:b1:60:d7:e8:b3:09:d1:bf:0c:
                    0f:44:b3:83:dd:b6:ef:95:27:bf:9c:fc:96:e4:89:
                    88:0d:63:95:f1:4b:d6:32:c7:f7:34:87:bd:10:1b:
                    00:c9:74:3d:2b:ad:93:a5:a2:c5:02:97:48:ec:0f:
                    25:13:db:96:20:06:d8:55:eb:c2:11:5f:18:16:8e:
                    86:57:4e:9e:8e:7e:e1:92:8a:50:b1:db:af:d2:89:
                    13:99:8e:78:7a:b0:6f:a3:75:e1:8b:73:bd:4b:14:
                    63:9a:87:45:29:bd:8d:2b:cb:76:2a:fe:75:6e:93:
                    6f:7c:03:b5:0b:5f:bb:ab:33:64:05:f9:36:cd:6c:
                    66:1e:ad:07:8a:ce:a6:cf:2c:07:64:25:24:fd:dd:
                    6d:73:2a:87:54:66:8e:e5:e9:21:a3:19:62:5a:8b:
                    fc:13:70:1f:36:1e:a3:ae:bd:c9:af:6a:42:86:a0:
                    0e:84:68:d2:0a:b9:6b:65:13:70:4e:51:3e:65:31:
                    e4:2e:ac:ca:f3:5b:06:b1:00:d1:24:8d:bb:3c:61:
                    f7:29:d1:53:78:9d:02:df:1a:c6:e5:e2:55:67:4b:
                    e0:e7:0d:5d:b4:ca:e3:fa:17:12:a2:8d:ef:dd:b5:
                    0b:06:4e:18:59:ad:17:4b:62:d5:cd:79:82:3b:4a:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EE:72:B6:1D:9E:31:39:CB:6E:0E:A7:F2:64:5B:2A:91:E3:EE:A1
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:33:03:e8:c3:dc:ae:18:22:22:fc:6a:19:57:40:cb:c1:
         64:8b:93:46:d4:64:27:85:df:c8:3a:95:29:dd:6a:56:16:f9:
         e2:53:2b:eb:7f:d1:7e:60:49:4c:68:f1:30:f1:84:78:e6:95:
         a6:0f:72:f4:7b:e6:39:c2:d6:6d:b0:fe:1e:2a:81:5f:a0:24:
         90:a7:4a:77:b7:f0:b9:24:a5:aa:34:cf:4c:95:1a:25:aa:2e:
         6f:39:09:cf:01:7f:f1:cc:6a:db:96:b2:8a:cc:a5:ea:c6:4a:
         29:8d:ad:71:0d:72:8d:57:a4:28:e3:d8:aa:25:5c:9d:83:11:
         97:d7:86:c9:99:c4:ae:00:e7:f7:61:71:c3:0e:a6:2a:91:9f:
         cb:47:bc:2d:45:67:43:ad:37:1e:55:77:7c:51:20:78:83:a5:
         df:ab:86:43:38:14:44:08:ed:1f:1e:89:c8:bf:d8:fa:45:30:
         0e:6d:2b:38:41:e2:3c:2d:cc:f8:24:fd:a3:0b:ce:65:2d:31:
         77:b7:3d:c6:d6:86:60:eb:51:5e:12:b1:15:6b:0e:8b:d2:ac:
         1d:5b:dd:92:c0:83:f8:49:ed:8b:49:34:0a:24:5f:e3:3d:4b:
         ba:71:96:3f:14:ed:69:d3:84:e6:49:40:85:dc:0d:27:a3:56:
         69:84:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:13 2026 by rpki-client