Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
File:                     jMU6mSl_HMCgv73r8k4TKw2EHHY.mft (raw, json)
Hash identifier:          QyI0gv5kYlR3kXbFRciC4Dha5OQYEcyTsbaYrkCxlo4=
Subject key identifier:   1E:7B:59:96:FB:19:D0:1D:76:61:7D:55:B9:B5:CA:E7:CE:EF:2C:C4
Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
Certificate issuer:       /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
Manifest number:          0190
Signing time:             Fri 17 Apr 2026 04:06:45 +0000
Manifest this update:     Fri 17 Apr 2026 04:06:44 +0000
Manifest next update:     Fri 24 Apr 2026 04:06:44 +0000
Files and hashes:         1: jMU6mSl_HMCgv73r8k4TKw2EHHY.crl (hash: ASXDM4nboMhGOY92x5xR48YXYsc3dXHPZihHWFwm9yY=)
                          2: E614FEEED6AF11EEAB03B528C4F9AE02.roa (hash: x6L3LpggPOK31aWAe0J+uMK7KgUnq0y5XWoD738Vc5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
                          rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D93, serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
        Validity
            Not Before: Apr 17 04:06:44 2026 GMT
            Not After : Apr 24 04:06:44 2026 GMT
        Subject: CN=69e1b1d4-c1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:03:83:a8:37:1a:8d:ec:72:e3:af:54:ef:
                    89:35:e9:ce:57:c3:cc:35:c6:fb:f5:f5:29:82:1a:
                    3e:8c:87:0a:37:c9:b1:07:cc:ea:14:fb:29:43:6c:
                    74:49:ec:d7:fa:39:d4:e4:b0:d9:cb:d8:e8:35:3e:
                    45:2c:8e:82:49:2e:8f:46:fe:c7:34:d5:85:d8:de:
                    ef:ed:57:f9:7c:6d:13:12:96:df:1a:4b:93:b8:99:
                    38:a4:49:04:56:07:e2:37:11:ff:5a:f5:a7:c9:b4:
                    ff:4a:c6:3e:01:85:65:b7:7d:50:61:3c:c4:b7:ea:
                    9a:73:8b:53:82:42:a2:49:2d:62:44:ba:f9:47:0d:
                    9e:79:36:70:0e:8c:89:73:a8:71:0a:10:3e:6a:f7:
                    b8:d2:27:06:6a:ee:0b:a2:72:5b:e6:fc:1f:85:64:
                    ab:e1:a3:da:a4:50:8d:a8:49:c6:39:4a:f2:f3:48:
                    9d:04:16:fb:12:2f:44:0f:21:2f:0a:73:cc:7c:d0:
                    f4:8f:81:c3:de:66:45:12:3e:ef:c7:77:79:6d:d4:
                    5e:76:16:5d:e1:68:91:2d:4b:df:3b:7b:82:0d:0d:
                    96:5a:c7:c2:dd:1c:d0:60:7b:7a:44:32:3d:c4:f9:
                    4c:ff:27:5d:fb:c8:29:2b:1f:d8:bf:1f:8b:4c:ef:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7B:59:96:FB:19:D0:1D:76:61:7D:55:B9:B5:CA:E7:CE:EF:2C:C4
            X509v3 Authority Key Identifier:
                keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c9:27:94:a1:3c:aa:89:de:96:8f:e9:fb:9e:73:a4:b9:d2:
         cf:74:4f:4e:35:b1:1f:68:05:fc:0c:77:82:26:f6:10:d3:37:
         98:9e:3a:2d:41:f8:da:4d:d1:2e:91:e3:93:5e:9d:89:a9:dc:
         66:ba:d6:5f:d3:15:04:bb:9b:75:a9:9f:e6:49:0a:00:59:90:
         f7:c3:23:7b:3e:a3:52:a6:ab:59:18:97:84:13:25:05:a8:76:
         82:b2:3d:1c:20:6d:11:63:10:21:9c:23:d7:e5:e9:70:ca:6a:
         60:01:3e:0b:2c:9b:3f:2a:59:34:a2:e2:5b:c8:6e:60:06:24:
         19:9b:a8:ed:d0:ea:7c:08:2a:63:ad:d2:43:8c:20:50:0b:d5:
         c8:0f:29:d5:a1:0a:a4:d4:c2:13:6f:2a:aa:92:e5:12:89:97:
         9f:c8:c9:9f:cd:c1:11:13:5d:36:e7:0b:00:0f:d3:6e:f4:7c:
         7a:78:af:7c:a5:b9:68:42:b5:0d:f0:5c:51:51:68:28:e4:24:
         90:17:f9:fd:d2:af:fc:00:86:56:45:e8:b5:3e:57:1c:13:d1:
         bd:1b:d3:07:5e:de:d0:fd:87:a5:43:9f:01:c4:cc:c3:88:f5:
         bd:28:e6:8d:23:d2:2d:55:6a:a1:97:f8:0c:7c:23:24:12:4f:
         1a:c4:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:31 2026 by rpki-client