Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File:                     jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier:          jBm9ETRAXkFGHIQAZaCMBUg+go618egqAgoFH0SKeTI=
Subject key identifier:   A5:AF:72:49:E7:13:64:6C:78:07:34:4F:D6:91:5D:E3:55:C0:AC:CA
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer:       /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial:       357E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number:          3554
Signing time:             Thu 16 Apr 2026 15:14:17 +0000
Manifest this update:     Thu 16 Apr 2026 15:14:17 +0000
Manifest next update:     Thu 23 Apr 2026 15:14:17 +0000
Files and hashes:         1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: ONF4M+EHAhu4xXNfhIXLCC7HkItlRgkcEz2k7t5IaoE=)
                          2: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
                          3: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
                          rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13694 (0x357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
        Validity
            Not Before: Apr 16 15:14:17 2026 GMT
            Not After : Apr 23 15:14:17 2026 GMT
        Subject: CN=69e0fcc9-57c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:44:cd:ed:9c:c4:40:e4:28:2b:75:5d:de:
                    0e:e8:40:7a:70:d7:8b:4b:59:de:14:4a:6c:3b:d8:
                    a4:6c:9f:a8:02:4c:ca:de:3a:37:4d:cd:9d:ae:dd:
                    fd:8e:8b:5f:e7:ae:a0:7d:27:2b:5c:32:57:c1:50:
                    08:96:8a:77:12:be:84:ce:c1:f1:ed:bd:02:3a:ec:
                    17:8c:62:54:55:9e:52:57:ca:18:c0:15:61:bf:f2:
                    ac:24:61:55:8b:97:50:c3:26:96:55:fd:02:27:fc:
                    1d:be:07:29:da:ea:58:0a:fc:25:d1:d2:e3:d1:3c:
                    c8:05:38:9c:c6:79:7f:5d:03:86:42:32:8e:15:8a:
                    47:70:25:e9:07:47:90:38:50:8d:da:bc:f7:c3:30:
                    b8:06:15:1f:b2:8a:c2:d6:e2:81:40:c1:e8:fc:92:
                    2e:bd:82:26:9b:b2:1c:ec:44:90:60:19:7a:c8:9b:
                    cc:67:9e:80:80:43:f2:fc:8f:ff:43:5b:06:34:f9:
                    ec:e4:03:f2:a5:53:29:33:8e:3a:0d:a3:60:8c:6e:
                    b1:f6:12:aa:63:0f:db:e9:29:41:bc:44:10:6b:d6:
                    c7:19:02:8c:39:5f:7b:0c:25:6d:d3:94:04:44:c9:
                    35:df:02:b3:d0:e9:47:19:13:ef:91:2c:d0:d6:47:
                    aa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AF:72:49:E7:13:64:6C:78:07:34:4F:D6:91:5D:E3:55:C0:AC:CA
            X509v3 Authority Key Identifier:
                keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:60:0c:57:2f:41:a5:81:ed:48:10:24:85:09:93:b2:f8:
         12:c7:9b:60:53:01:9f:7e:db:7c:98:e9:17:a6:65:af:07:ce:
         c9:e0:7d:a3:2d:af:a2:c0:02:ee:46:6a:95:c6:d8:29:fb:f2:
         f2:8c:1f:d9:34:02:83:21:37:b1:97:6b:21:d6:5c:e4:96:dd:
         e4:58:51:a0:d9:71:d5:96:0b:6e:2c:24:c7:07:f7:78:c5:00:
         e2:13:60:54:8c:8b:35:fb:5f:c1:04:eb:3b:2c:95:f6:c1:56:
         a8:0b:48:bf:eb:21:7e:9a:3b:4d:05:9a:8b:5a:89:25:07:2a:
         97:7a:ac:51:59:c6:4b:e6:50:2f:fc:fc:00:39:94:a2:8a:32:
         af:52:9e:5b:b4:63:2d:7b:a3:53:7b:2c:c6:32:e7:55:5a:b6:
         ba:37:c5:d3:9d:3c:67:78:bc:f8:a6:a9:96:32:22:44:24:12:
         dc:36:79:46:87:e0:36:44:3f:a9:70:28:91:31:1b:7b:83:85:
         f7:be:08:19:e3:29:bd:0b:f3:2d:ae:0f:01:e0:fe:81:0d:43:
         6d:a5:42:d9:6f:59:b0:62:0f:9a:69:a4:f4:52:6f:43:58:4d:
         d3:b4:e3:42:d2:7f:ad:d1:9e:ce:12:c4:3c:d1:6f:a7:03:da:
         3d:7d:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:17 2026 by rpki-client