Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File:                     JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier:          o6N9ZmN1E1mjzaKNYYt+CeGpKAvmrj1xfXq/xvSRxMI=
Subject key identifier:   E9:96:35:84:48:6E:AB:BD:99:81:BA:18:B8:DB:FF:EE:8C:F6:3F:12
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer:       /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number:          0158
Signing time:             Fri 17 Apr 2026 04:46:33 +0000
Manifest this update:     Fri 17 Apr 2026 04:46:33 +0000
Manifest next update:     Fri 24 Apr 2026 04:46:33 +0000
Files and hashes:         1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: UVGHhSbPQF6WPPnK0AcwciHZLwGWBc5W8a9quGnuQ1g=)
                          2: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: M6ls0jXTH4pUjtm2iE2jOj7mJz7/jJFkAHSHdBjdY6o=)
                          3: 79A1CFF0F2F311F08CC9D9AA476F56BC.roa (hash: ImLzfO9eYPkP8TeOeHFGuBUxwADU7Ur8U4TyxjSkGl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
        Validity
            Not Before: Apr 17 04:46:33 2026 GMT
            Not After : Apr 24 04:46:33 2026 GMT
        Subject: CN=69e1bb29-5604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:56:e8:bc:06:ae:cf:8d:64:5a:ae:b5:d7:
                    7d:db:43:cc:33:19:f3:af:39:59:24:6f:4c:d6:12:
                    38:3e:fc:0b:16:d1:89:00:34:59:40:e5:ce:79:6f:
                    66:3a:59:d2:36:f8:33:5b:5a:ce:d4:dd:b3:d5:f8:
                    95:98:bc:51:77:1a:a7:dd:f5:ed:59:b2:51:83:42:
                    40:65:5b:6e:c4:e6:4a:55:98:9a:0d:6c:e8:96:b0:
                    86:84:41:88:51:12:e2:28:d8:aa:ed:e5:9f:a3:2c:
                    2e:dd:68:ba:b0:a2:54:16:b8:0c:35:70:58:0b:fc:
                    ce:f3:69:f5:72:85:96:bd:dc:1f:a8:ac:a7:9b:23:
                    76:86:64:dd:32:59:bc:ce:9d:b4:72:cd:25:88:34:
                    8f:96:ac:cc:86:bc:8a:b1:f6:14:63:39:17:b9:ac:
                    a6:17:8e:cf:44:49:b9:b3:97:e0:a4:95:30:71:71:
                    eb:dc:47:7a:e6:a8:c0:26:d8:5a:9e:d9:e9:a7:7a:
                    9d:9b:8e:ce:cb:a3:d9:c5:fb:0e:2f:1f:d4:a8:53:
                    d9:d1:75:60:68:fb:11:46:5a:34:54:13:bf:2a:c0:
                    67:4a:02:e0:26:ee:1d:35:89:b6:cf:67:fb:ce:2d:
                    a6:a4:df:f5:b9:05:96:4a:1f:dd:db:20:0f:b5:09:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:96:35:84:48:6E:AB:BD:99:81:BA:18:B8:DB:FF:EE:8C:F6:3F:12
            X509v3 Authority Key Identifier:
                keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:93:02:52:d6:96:d7:88:72:e8:4e:e5:4a:d7:55:1b:c1:
         00:bd:03:b3:b2:0e:e6:80:06:7e:16:52:ae:7c:6e:12:7c:d2:
         1f:41:a7:35:a9:f9:33:09:6b:e7:47:04:7b:39:41:29:e8:d4:
         a6:a2:de:2d:1a:58:db:5d:aa:16:d0:30:11:f3:b7:a5:2e:0d:
         51:47:04:a3:04:40:2c:60:72:02:2d:6a:e5:07:92:c1:df:38:
         25:00:28:e5:7f:2e:d6:8f:40:1e:d4:f7:06:67:40:fa:29:12:
         d9:ce:d0:fc:ed:a5:1c:c8:fe:d8:a3:15:7f:31:a9:f5:bb:cf:
         18:d6:b3:97:a2:4b:21:72:6c:c2:d1:b4:b0:6c:b4:38:f4:eb:
         b3:4d:5a:2a:90:ab:7f:49:2a:c8:8c:34:ba:3c:1a:a8:00:bb:
         44:e7:b3:f6:99:b2:e3:a3:45:e9:72:cf:b2:99:c8:e5:7c:11:
         d9:f1:61:74:f2:ab:e6:60:9e:44:bd:aa:c5:ec:b2:ca:b8:d3:
         bb:56:72:ae:34:33:bd:72:84:38:47:53:41:52:51:3d:da:22:
         03:b0:9d:83:29:e2:d9:b3:b5:ec:c1:66:88:7a:dc:38:35:a5:
         d2:f0:7c:a3:c4:b3:8b:01:7a:65:62:e3:67:4f:b9:f2:a8:2f:
         82:19:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:23 2026 by rpki-client