Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
File:                     jqgV0DpRxRztXr5f2ZNStjdrVX0.mft (raw, json)
Hash identifier:          r13UJp9HpE8UaVvYZSqJhww6e4rKYMIOyp4MaS2N+hY=
Subject key identifier:   C3:52:77:06:0F:12:C8:E1:5F:A1:9E:18:7A:59:BD:34:E6:67:7F:B6
Authority key identifier: 8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D
Certificate issuer:       /CN=A9136067/serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
Manifest number:          43
Signing time:             Fri 17 Apr 2026 08:06:49 +0000
Manifest this update:     Fri 17 Apr 2026 08:06:48 +0000
Manifest next update:     Fri 24 Apr 2026 08:06:48 +0000
Files and hashes:         1: jqgV0DpRxRztXr5f2ZNStjdrVX0.crl (hash: xYsM3zbm3R98rLrGFOPjkLE7psKlVHvqEtia+e2qdFI=)
                          2: 902A638ED68011F0B036527A68D3641D.roa (hash: Vz8eeIUSMui4xVAuI1Jf8LJNi6cDsIJmlb8VFlttmdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl
                          rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136067, serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
        Validity
            Not Before: Apr 17 08:06:48 2026 GMT
            Not After : Apr 24 08:06:48 2026 GMT
        Subject: CN=69e1ea19-793d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:2b:9e:5d:ea:d4:51:0f:e5:4a:0d:dd:04:
                    9b:30:b3:17:a1:f9:a5:57:72:a4:a0:8a:50:30:76:
                    c8:e1:ef:52:29:dc:a0:e6:21:4e:48:32:23:46:b9:
                    87:f9:b9:ce:a8:be:5f:94:0c:e2:bb:89:8e:1c:cf:
                    f9:22:3c:b9:16:85:a6:ce:de:b3:c2:b2:85:53:d2:
                    05:7b:f1:9c:5a:a4:c2:ca:eb:5e:4f:ae:ec:e1:c9:
                    45:f8:ba:e7:a0:66:eb:36:95:3f:f5:ed:36:d5:cd:
                    3d:3e:83:85:8f:cf:5f:03:d2:72:11:f8:86:a4:c0:
                    77:a9:e1:0d:84:74:a8:ba:e9:f2:24:87:36:fd:c5:
                    7a:ff:3e:b2:27:cf:69:a7:01:82:2d:41:5a:52:05:
                    b8:36:91:a9:61:70:e6:b1:e5:03:d8:0a:44:69:7a:
                    e3:c4:fc:0b:92:e2:bc:a8:54:5b:29:73:7a:c0:a3:
                    c8:91:e9:15:64:62:e7:5c:e2:a0:b4:43:f3:d5:61:
                    ec:04:a9:b8:cd:91:e0:bd:01:c7:6b:3c:09:cc:17:
                    b7:38:2c:2c:7a:85:47:2b:3f:6e:ee:b4:8e:d9:66:
                    bb:6f:e9:15:f3:a5:ba:ee:33:48:dc:37:91:21:92:
                    bd:fc:4f:9e:fe:23:2f:cb:0f:82:2f:93:44:ae:c8:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:77:06:0F:12:C8:E1:5F:A1:9E:18:7A:59:BD:34:E6:67:7F:B6
            X509v3 Authority Key Identifier:
                keyid:8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e0:d8:f8:c0:c6:b5:68:f5:75:98:48:03:65:50:6d:19:33:
         8f:05:98:cb:29:cc:19:9d:28:e0:60:10:1e:60:f8:8b:60:74:
         57:a4:1f:b0:9c:60:48:7d:7f:79:47:ff:0e:29:ce:0d:78:21:
         6d:e5:d8:c6:51:8b:f9:2c:ae:c4:07:a6:c3:6f:2b:53:a1:9e:
         5f:b5:2a:9d:67:56:72:b1:31:77:1b:cb:d6:56:e5:2e:a6:cf:
         6e:87:d5:ab:69:d1:e1:b3:2d:8f:c6:b2:6a:8d:5e:09:c8:40:
         90:9f:ea:7b:27:d7:58:00:25:18:94:dc:5c:64:63:7b:ab:2d:
         71:10:78:70:f8:3e:32:ba:f9:de:af:c9:e7:90:94:5c:72:84:
         e6:f2:5f:e7:aa:4f:a9:a7:13:18:67:27:f1:4f:c8:81:86:ea:
         af:7f:f8:5e:11:bd:46:eb:51:c6:ea:9a:42:f8:29:f6:94:65:
         c3:ef:52:04:33:a3:2b:0b:ed:a4:be:d0:b3:fe:ce:9c:00:60:
         1c:ec:11:d0:f7:7e:92:3b:ea:a6:c5:c3:22:f1:0c:66:d1:00:
         5e:c2:49:63:b5:c9:cc:b4:a4:94:bd:50:98:12:1c:12:d5:3f:
         4c:32:70:b0:40:20:1d:6a:12:b7:b1:6f:09:2c:23:c6:0b:6b:
         bb:09:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:54 2026 by rpki-client