Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
File:                     jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json)
Hash identifier:          +5x9SePDLy+Ti2+AblD9QfhxQA8MayR86hq8MK3Vn/k=
Subject key identifier:   80:91:96:DF:25:88:BA:4D:30:0B:49:69:98:70:DD:53:8A:4E:1A:12
Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66
Certificate issuer:       /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
Certificate serial:       0BBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
Manifest number:          0BB3
Signing time:             Sat 18 Apr 2026 18:53:27 +0000
Manifest this update:     Sat 18 Apr 2026 18:53:26 +0000
Manifest next update:     Sat 25 Apr 2026 18:53:26 +0000
Files and hashes:         1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: 6BJKo/TbyyMIIKWrI0jDtubNVEyJwd3cG+rljdNmFZo=)
                          2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: ybu4TRi1kWC8ch99fNXPnIw41VP/i805qg2nqD/B1Eo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl
                          rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3004 (0xbbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
        Validity
            Not Before: Apr 18 18:53:26 2026 GMT
            Not After : Apr 25 18:53:26 2026 GMT
        Subject: CN=69e3d327-598d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:50:43:8b:90:19:44:ac:ac:ec:0c:51:19:
                    ab:41:9e:20:fe:47:59:bd:6c:3d:2d:f5:0c:ab:69:
                    25:48:ad:93:4f:2b:8a:a2:55:8f:fc:63:f5:c9:30:
                    44:ef:f6:cc:64:ba:60:e6:e5:96:39:7e:9f:6c:8c:
                    33:7d:92:1c:3f:9e:0a:ba:0c:cb:25:fe:13:17:dd:
                    21:7e:31:ce:88:75:43:34:87:a3:fe:e3:24:9b:61:
                    18:88:bd:a2:aa:7a:2e:d5:84:70:76:0e:5d:ab:fd:
                    79:82:b4:59:0b:a6:08:6c:fd:d9:98:56:ae:6d:9b:
                    47:ee:bc:91:4e:3b:48:f1:93:76:95:3b:da:0f:2d:
                    39:e7:6f:c8:c2:1f:ff:31:3c:a8:32:58:2d:09:6a:
                    63:47:6f:e2:86:71:54:e9:12:59:cc:15:7b:c7:8c:
                    6b:c7:34:0b:34:90:29:7e:c4:3f:99:0b:6e:67:82:
                    a6:a3:8b:7d:24:30:c2:fb:db:2c:ad:32:d3:b6:04:
                    77:b7:15:b9:65:84:eb:41:45:4c:08:9d:d9:81:b2:
                    6c:cc:66:8b:17:35:90:55:d7:19:9f:5c:b7:fa:9c:
                    aa:71:34:6e:5c:96:7e:e0:a3:94:7f:4c:ca:16:9b:
                    85:1e:27:45:e8:c4:f7:15:ba:e7:28:86:c0:e8:8f:
                    98:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:91:96:DF:25:88:BA:4D:30:0B:49:69:98:70:DD:53:8A:4E:1A:12
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:06:a5:3c:28:0f:b3:b0:dd:4d:22:d9:55:a1:71:6b:7c:02:
         64:a1:df:03:68:7b:31:64:e6:9e:a2:c3:78:cc:04:08:b2:b6:
         8c:e7:73:6e:e2:75:e6:f9:47:c7:94:fb:b4:f7:28:b8:3a:71:
         e1:18:00:31:56:11:77:71:ad:6a:d7:dc:7a:a0:f5:79:4f:88:
         ef:42:43:12:fb:b1:74:c9:56:59:61:8c:3b:b8:cf:bf:39:dd:
         3e:d5:d6:21:44:8a:2b:2f:47:7e:d7:bb:94:99:4b:82:4a:f1:
         1a:81:bb:d7:66:ae:2d:ef:23:d6:4d:9f:2a:7c:ea:7a:44:06:
         0b:26:ed:99:e9:b3:05:55:20:1f:e6:d3:9b:6a:4f:eb:77:6f:
         86:e1:00:2c:fb:f8:6e:32:ea:4d:d4:15:28:cd:0b:9e:49:96:
         d7:e2:d7:c0:f3:0f:3b:7c:a2:66:f6:fb:17:4c:59:a2:40:e5:
         b1:7b:7b:6c:6e:41:8c:1c:96:77:fa:7b:24:46:7a:48:62:20:
         8a:d2:0d:a6:ff:89:ec:8f:35:24:c9:ab:a4:20:3c:3e:97:48:
         2d:31:15:d6:ef:09:92:dc:aa:00:6f:f4:0e:c7:3f:74:fc:2e:
         17:28:43:a5:b6:a1:1a:11:6b:ba:0e:05:23:fd:63:a0:b6:37:
         d0:e6:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:38 2026 by rpki-client