Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File:                     CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier:          rAxvp9y1hGfIr2A4esucyWPiEjyNCImYtWzu6gMTlWU=
Subject key identifier:   4C:FA:B3:9E:80:7D:4D:54:B1:A0:6A:EF:20:46:78:C2:81:05:94:16
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer:       /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial:       0447
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number:          0432
Signing time:             Fri 17 Apr 2026 00:15:23 +0000
Manifest this update:     Fri 17 Apr 2026 00:15:23 +0000
Manifest next update:     Fri 24 Apr 2026 00:15:23 +0000
Files and hashes:         1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: 79NPmzTxu81hz9P5RQB4OjTcQ03h91wDaa3kCMLS7eE=)
                          2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: RTRGzx3DTtJG0iPu4hiw7fBG/3vhdOfJ/25U/hTfNGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
        Validity
            Not Before: Apr 17 00:15:23 2026 GMT
            Not After : Apr 24 00:15:23 2026 GMT
        Subject: CN=69e17b9b-8241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:21:d4:b3:0c:3a:fb:e0:ad:81:be:b7:5d:
                    84:60:e1:03:d0:c9:4b:90:99:6f:c9:79:43:00:4c:
                    24:b2:7d:d1:fb:6b:db:2f:45:20:48:32:c2:ae:dd:
                    4b:55:33:7e:d0:75:40:a1:6f:b2:18:e4:d8:18:5f:
                    0a:40:d6:b8:01:8f:5f:4d:42:d6:1d:b1:5f:c9:42:
                    cd:b8:36:30:ae:f6:45:a7:6a:f6:90:33:b0:f4:aa:
                    8f:34:23:80:ba:fd:91:71:af:5f:34:6e:19:d2:12:
                    98:96:80:f3:d0:bc:22:a7:6d:64:5e:c5:84:cc:c3:
                    96:8d:c7:99:0b:d9:98:64:15:1b:e5:a0:91:18:c3:
                    10:43:89:09:e0:52:2e:bb:28:ad:ad:aa:c2:f8:7a:
                    06:d8:83:ec:e0:cd:3a:1d:46:84:e4:aa:56:be:84:
                    89:1b:90:cd:b4:46:b2:c9:64:71:39:24:8c:97:b9:
                    52:a9:4e:7c:2e:e0:b6:e1:1c:36:5a:79:07:ff:1b:
                    f4:a9:c0:7a:14:70:d1:f5:2b:3d:b2:2b:56:6f:aa:
                    2c:85:30:f5:db:0d:84:8c:bc:ae:89:c6:25:bb:35:
                    1c:19:32:83:93:21:aa:5f:01:2e:0e:fc:d7:44:6f:
                    38:01:c9:c0:a7:98:d1:e5:51:32:86:28:2e:e9:69:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FA:B3:9E:80:7D:4D:54:B1:A0:6A:EF:20:46:78:C2:81:05:94:16
            X509v3 Authority Key Identifier:
                keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:5b:aa:28:bf:42:73:c5:e6:cd:55:6e:06:31:2d:b0:91:
         4b:2c:c0:5f:bb:4b:e0:0d:57:f3:d6:8b:31:47:fd:f3:18:c2:
         93:71:3e:63:f9:b3:fc:32:fa:0b:ef:ed:2d:96:54:4d:5f:89:
         c8:a6:ec:c4:61:d0:35:fd:c8:b8:3f:79:cc:0f:09:0a:93:23:
         46:00:3a:92:4f:96:d0:6b:80:fd:53:78:e6:aa:de:fe:8a:95:
         26:0f:25:a7:09:85:03:3e:7c:25:87:09:f7:6b:1e:da:e4:15:
         46:92:aa:1b:fb:6f:53:6b:ce:44:30:2a:dd:12:3f:69:83:b9:
         a4:c4:3a:4c:00:67:06:fc:c3:5f:75:7e:f2:99:05:f0:ec:9e:
         05:ff:ea:fa:8c:be:ed:61:0e:ac:af:76:73:a1:5a:7e:f4:42:
         75:e6:2d:66:11:a4:95:2b:52:bb:fa:52:60:d4:ba:1c:03:e6:
         96:77:3c:fe:61:5e:3c:46:79:13:d9:81:22:a3:29:c3:0d:5d:
         83:1b:9a:6e:43:e1:ae:20:e6:1f:88:52:7e:7c:05:df:bf:49:
         c4:c9:f5:99:41:c8:a8:3d:1a:8c:f0:94:92:6a:cd:61:79:5f:
         8c:54:7d:9b:32:4b:3c:dc:f9:c2:02:cd:7b:38:f2:99:d8:ea:
         27:91:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:50 2026 by rpki-client