Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
File:                     JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json)
Hash identifier:          HFMTEKgiwjPrdJ7Jfx/9m9zNWmx70bMQ0x9A7D6dC30=
Subject key identifier:   A3:9E:55:BA:0B:97:35:1A:A2:42:23:5F:63:21:E1:30:54:76:97:D7
Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E
Certificate issuer:       /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
Manifest number:          3E
Signing time:             Fri 17 Apr 2026 08:12:50 +0000
Manifest this update:     Fri 17 Apr 2026 08:12:50 +0000
Manifest next update:     Fri 24 Apr 2026 08:12:50 +0000
Files and hashes:         1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: 6lJ0BLOrC/8dIT0BCedZO7ze/RgNtbiIwh9fH6BCUOY=)
                          2: B8C57E86E40511F09F69296D616F56BC.roa (hash: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl
                          rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
        Validity
            Not Before: Apr 17 08:12:50 2026 GMT
            Not After : Apr 24 08:12:50 2026 GMT
        Subject: CN=69e1eb82-7a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:a8:e2:ab:2f:c8:40:3b:b0:b9:f3:9c:22:
                    99:de:f1:4c:ae:ac:ff:c1:9e:17:79:bb:46:ba:d3:
                    5c:22:07:5d:75:1e:66:bc:f4:53:17:d9:b9:ea:78:
                    07:5f:f8:39:33:3e:71:b8:43:11:46:a3:c0:67:87:
                    37:7a:e5:6f:f2:b5:29:eb:63:e6:91:23:dd:70:32:
                    6c:a8:8c:81:57:51:1c:ef:06:70:e5:1a:b9:e3:71:
                    ff:bc:a1:84:37:b8:48:06:d3:81:d9:5b:26:4b:e4:
                    51:fb:d4:19:2c:b8:1b:8a:aa:1a:9f:47:10:53:17:
                    11:d0:9f:4e:55:77:1d:cc:0e:3f:e3:dd:74:ea:33:
                    b2:10:d3:92:70:e4:25:c0:58:67:91:73:31:38:a4:
                    cb:92:7b:08:0d:52:4a:82:ed:d1:1d:7c:f5:e4:1a:
                    1e:4c:1e:fe:13:8c:ed:9b:06:0c:b8:10:f1:f6:53:
                    28:c5:01:b8:44:07:32:8c:17:51:4d:b5:d1:f8:69:
                    ba:21:c1:0f:28:6b:0d:79:a6:83:27:62:51:86:82:
                    5b:d3:60:42:c2:18:9f:05:c4:04:33:00:15:d5:0e:
                    7d:3a:f1:24:dc:24:e5:50:f2:23:9f:2e:ff:f5:01:
                    95:0d:44:fc:fb:8d:0b:8f:66:32:61:ed:52:5f:d8:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9E:55:BA:0B:97:35:1A:A2:42:23:5F:63:21:E1:30:54:76:97:D7
            X509v3 Authority Key Identifier:
                keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:a4:18:81:f9:0d:3e:8f:90:53:a1:b5:5c:8b:19:f8:f1:
         2b:e5:66:71:fb:15:b8:a6:65:5c:7f:56:59:b0:6f:02:27:48:
         72:cb:ec:43:de:e1:f6:a6:9e:b9:c8:0e:76:f6:56:1d:7e:1a:
         c9:b8:9b:d5:9e:94:29:95:02:86:a9:7a:00:c1:76:a6:51:0d:
         b5:49:06:4a:6a:d0:a8:87:37:f7:f1:4b:ed:ab:31:07:fb:b5:
         a4:79:c6:85:b9:87:b8:05:cc:ea:c7:95:ec:f7:8a:28:ff:3e:
         65:01:ab:3a:fd:f6:de:aa:07:0f:80:d2:d7:61:80:e0:50:01:
         79:0c:85:ce:fd:c3:69:d0:27:33:0a:22:1b:b1:ef:30:96:48:
         9c:b4:04:99:35:85:94:42:68:14:d0:05:a1:c0:5e:04:56:44:
         d8:63:da:ce:16:5f:d4:b1:f2:bd:c9:6d:36:25:a0:63:32:af:
         7e:a0:e6:a7:c1:ed:8e:50:8d:17:61:1c:01:2a:2b:c0:fe:1c:
         db:e7:45:b5:c0:bb:16:db:1a:28:0d:67:1c:cf:03:91:c5:81:
         61:4c:ff:0c:bc:32:37:ac:8d:c2:99:32:07:10:98:53:6e:38:
         a1:05:56:48:a2:0b:ad:ce:e8:94:ba:bb:11:d5:30:0d:2e:d8:
         9a:9d:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:37 2026 by rpki-client