Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
File:                     jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json)
Hash identifier:          t9+0LEhoVXh59fLhGvooow20xzHpuxnYz9BNC/Td3Is=
Subject key identifier:   4A:B4:CE:A5:86:1D:87:35:0D:C3:C1:2B:FA:ED:C0:7D:23:C0:9C:DA
Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
Certificate issuer:       /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
Certificate serial:       0A42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
Manifest number:          0A31
Signing time:             Thu 16 Apr 2026 19:39:39 +0000
Manifest this update:     Thu 16 Apr 2026 19:39:39 +0000
Manifest next update:     Thu 23 Apr 2026 19:39:39 +0000
Files and hashes:         1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: 7+LDISNkRYXfvyyWgVF+83sYe560gEkLCV8gp7NMFAI=)
                          2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: qvkCUWNVDf0eYzay+dMyQK+QMdrK0NOed+DI+LY6hA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl
                          rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626 (0xa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
        Validity
            Not Before: Apr 16 19:39:39 2026 GMT
            Not After : Apr 23 19:39:39 2026 GMT
        Subject: CN=69e13afb-9316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:3d:3b:bf:0b:38:47:8b:cc:75:74:6a:54:
                    30:60:a4:b8:e7:37:33:76:d8:09:a9:69:5c:2c:80:
                    4e:85:77:5a:93:f5:78:df:61:8c:ac:8e:55:b1:63:
                    01:93:e0:e5:6f:c5:43:a0:0b:b7:4c:6a:f2:f1:50:
                    79:7b:6f:e6:b7:02:47:b4:ca:36:2d:6f:c2:24:6e:
                    2a:58:96:87:5a:45:79:23:e9:20:3e:10:38:af:ba:
                    96:3b:c6:50:5d:6c:55:73:e5:b3:2d:da:39:a9:51:
                    0f:db:05:69:56:45:9a:a4:be:de:31:ce:9b:e1:b3:
                    47:e3:e6:67:03:71:40:c2:28:3f:1c:2f:76:9a:d7:
                    ba:a9:53:9e:d2:6b:3a:91:7c:32:4c:cb:23:62:65:
                    cd:38:99:5e:6d:9e:d6:0e:4f:da:1b:44:90:81:8b:
                    38:bb:8b:30:29:35:93:18:3b:b3:89:bb:b7:e8:60:
                    ad:bf:79:2b:5f:2e:ba:36:07:8c:f7:ae:76:53:09:
                    9f:0a:10:7a:43:ec:12:fb:b0:f9:40:d9:0b:ac:ef:
                    ed:2e:87:c8:42:a3:60:e9:0b:b6:a5:89:bc:76:ed:
                    6e:ea:a2:ca:12:c0:9c:e4:c0:f8:35:c6:43:c7:c9:
                    45:db:a6:23:ff:a4:01:79:70:b1:db:38:b7:11:ab:
                    78:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B4:CE:A5:86:1D:87:35:0D:C3:C1:2B:FA:ED:C0:7D:23:C0:9C:DA
            X509v3 Authority Key Identifier:
                keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:41:19:cd:7c:48:39:8e:99:07:da:e1:5f:bd:e4:b7:27:
         be:0d:f1:13:09:59:11:8d:65:ff:38:86:bf:be:6a:9f:a8:bc:
         07:f1:dc:00:a8:7e:a9:5d:7a:2c:93:d6:5f:61:89:8d:ed:72:
         4b:1a:b3:5c:cf:ad:57:62:02:9e:bc:5c:c0:93:df:e1:a8:3b:
         46:2a:e3:3e:0f:30:c7:8a:31:df:5f:e9:69:ba:3e:44:59:23:
         d8:72:80:7b:4d:4b:94:f3:92:d1:d3:bc:73:4e:33:65:4f:f8:
         cf:af:6f:b0:e9:25:8a:66:18:bb:08:62:c0:22:1d:41:10:72:
         55:a1:2e:29:5a:72:af:cd:77:d0:7a:ad:9f:d5:54:4f:38:06:
         e1:84:7e:83:fd:57:3d:f0:33:28:18:e8:e9:78:33:08:6f:df:
         21:eb:f9:8f:19:ae:39:23:6d:8c:87:62:44:d8:d2:73:2c:44:
         d8:9b:2e:50:33:48:1b:41:dd:65:f6:e9:40:ae:68:db:93:c4:
         21:5a:08:e3:9e:46:6a:94:eb:80:1f:0a:be:17:bb:60:7e:51:
         0b:f3:38:91:c8:11:5d:21:55:c3:fe:26:2a:c6:5a:73:f8:2a:
         0e:c0:84:f0:40:cb:3a:59:ae:bf:d5:ab:f0:45:bb:47:8d:64:
         d7:e7:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:39 2026 by rpki-client