Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
File:                     JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json)
Hash identifier:          //tswEasGacDC7jZZlxd9YFI5DpIgH1lZjzfk4p5sfE=
Subject key identifier:   DC:C7:AF:1E:7E:29:77:9F:9F:FA:9A:9C:3E:56:24:F2:17:7E:FC:83
Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69
Certificate issuer:       /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
Certificate serial:       0709
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
Manifest number:          0703
Signing time:             Thu 16 Apr 2026 21:54:34 +0000
Manifest this update:     Thu 16 Apr 2026 21:54:33 +0000
Manifest next update:     Thu 23 Apr 2026 21:54:33 +0000
Files and hashes:         1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: Jmr8i0k1vWkSpy8FgPrCSv0AwcjBsed93at0mvxxmmM=)
                          2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: iVXQsiS9MVHlGop0qOBrzZ2cPbPUlfxCSwxtO5XHPCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl
                          rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
        Validity
            Not Before: Apr 16 21:54:33 2026 GMT
            Not After : Apr 23 21:54:33 2026 GMT
        Subject: CN=69e15a9a-6ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:09:5b:06:14:0e:19:9c:2d:21:5a:6a:41:
                    36:bd:ce:19:7c:27:b6:a0:fd:1f:c7:fa:94:23:96:
                    5e:19:59:dd:48:b0:1f:82:87:ab:2d:8f:f7:2a:05:
                    13:40:cc:4c:55:e6:85:35:b0:21:1c:08:ce:9c:ae:
                    52:ec:f5:d3:fa:21:d7:32:35:cd:b1:c6:ce:e9:e3:
                    5d:2d:5c:19:fa:64:fb:92:75:cf:f7:54:d5:4d:8b:
                    bf:2a:25:e6:8e:8f:0e:37:97:b5:6c:da:d8:7e:3a:
                    16:26:79:8d:2d:2b:27:6b:99:23:7c:ac:24:82:0b:
                    2a:5b:3b:a7:62:bf:d6:35:ba:b3:71:32:76:d3:13:
                    8c:23:74:80:4d:05:94:46:a8:ac:79:34:cf:9a:6d:
                    8e:75:4c:f5:23:07:cb:9a:49:79:38:28:30:9e:a3:
                    0a:2e:c1:ab:b5:3c:9c:d2:92:37:a8:c1:f8:52:91:
                    fd:4c:3d:fb:70:31:8b:31:3a:45:23:66:d4:35:b2:
                    fc:e0:54:4c:b4:ec:48:44:b0:92:74:f2:1e:0b:e5:
                    e7:0a:15:79:38:f2:1f:dd:cc:76:a5:0e:fb:c9:93:
                    05:2d:6e:97:e3:fb:3d:b4:11:56:f5:16:12:ec:b2:
                    6e:f8:7a:a3:fa:06:ce:fa:a8:cb:ca:48:fe:9c:62:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:AF:1E:7E:29:77:9F:9F:FA:9A:9C:3E:56:24:F2:17:7E:FC:83
            X509v3 Authority Key Identifier:
                keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:19:4e:7f:fb:bb:45:5f:8e:46:96:ab:e4:75:51:c5:bb:
         18:0e:f1:b1:35:21:da:2a:ae:9a:8a:9a:6d:3c:8e:e6:87:48:
         30:a5:b8:4a:fa:99:6d:3d:f2:fc:a1:83:e0:75:9f:b6:93:2d:
         9e:cb:04:cf:a4:51:1d:87:e2:72:31:0b:ba:5a:32:29:09:d3:
         28:bd:e6:ef:98:e7:a2:c0:f7:7d:d6:08:13:de:e2:e8:6e:ab:
         f5:25:e8:d4:b6:34:e6:43:a6:4b:c1:38:db:81:b4:46:97:74:
         c3:e5:d6:7b:f4:89:1e:2a:10:5b:a1:92:b0:74:8b:b2:07:0d:
         4c:bf:1f:9c:7d:3f:5f:57:5b:3d:32:52:93:46:ae:9e:5e:d2:
         73:13:60:cd:40:5c:dc:70:17:c0:40:06:7e:a7:93:d3:5c:82:
         68:79:b1:75:f1:0d:25:e5:89:c2:83:18:74:83:dc:cb:75:e3:
         bf:d1:e6:2d:1d:d5:7c:ef:36:a4:5e:7c:21:00:60:8d:6e:86:
         23:40:a8:ac:1c:45:60:ab:a4:f9:a6:de:4c:1a:f5:1d:62:36:
         e2:ed:6e:f7:b6:b6:e5:59:8f:52:87:62:8f:89:a0:9f:38:82:
         1f:b0:25:84:67:50:92:a0:72:f4:28:5e:ad:38:cc:e5:ee:04:
         56:34:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:15 2026 by rpki-client