Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File:                     J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier:          uDGyMdFLjSgf+jcTQQbQkkZxekFCpz1k8YWbpWUdv7c=
Subject key identifier:   60:32:DD:3D:9B:F5:9F:FF:1F:A9:19:6A:97:84:90:B6:FE:DE:EA:AC
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer:       /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial:       05EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number:          05E8
Signing time:             Sat 18 Apr 2026 22:50:37 +0000
Manifest this update:     Sat 18 Apr 2026 22:50:36 +0000
Manifest next update:     Sat 25 Apr 2026 22:50:36 +0000
Files and hashes:         1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: rZfditmgzqPniMYuIWHRtcsKSG61EsWgMnAn/yAALzY=)
                          2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: xyL9vaBiGiRh4WvFs0MIb3j4FJIXwUneeWSkmubICJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
                          rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 22:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
        Validity
            Not Before: Apr 18 22:50:36 2026 GMT
            Not After : Apr 25 22:50:36 2026 GMT
        Subject: CN=69e40abd-967d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2a:63:fa:2b:c8:94:10:b6:f3:0a:29:79:84:
                    45:42:52:54:28:cb:d4:9e:76:ea:5e:71:7a:6d:75:
                    78:ee:69:de:77:a1:fb:1d:a3:06:8e:37:8e:07:5b:
                    28:4e:67:8d:6e:97:8a:b8:c7:33:28:1b:2f:34:74:
                    63:d7:20:da:7a:5d:2b:5f:09:2b:2d:37:31:d8:ab:
                    19:4c:5f:5c:e5:7b:14:85:ce:cb:94:4c:83:12:33:
                    f1:a4:c4:05:c5:fb:5a:8d:0d:98:1f:0f:75:51:f7:
                    fc:65:26:8f:43:b4:bb:78:19:09:24:ab:df:3f:d0:
                    ba:43:2c:b4:67:51:bf:ac:fe:87:c2:39:8e:67:89:
                    7e:63:bc:07:a4:62:02:4c:98:51:8f:b5:08:9c:05:
                    77:1a:67:29:ca:89:7c:b4:18:0f:9a:a8:3c:28:07:
                    55:0a:7e:fa:23:74:30:6f:9c:aa:21:a4:84:b8:7e:
                    80:ac:ef:06:31:d3:13:e0:ce:b4:e9:00:45:cc:a2:
                    09:68:46:55:8b:c5:04:b0:9c:0f:68:21:92:04:81:
                    c6:eb:92:52:33:d3:e8:c4:7d:f2:df:7a:04:24:dd:
                    46:50:a9:2c:89:ef:7f:b4:09:f6:de:d8:17:30:31:
                    4e:67:9b:5a:a1:98:43:b3:ba:7e:3d:d0:84:c8:03:
                    71:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:32:DD:3D:9B:F5:9F:FF:1F:A9:19:6A:97:84:90:B6:FE:DE:EA:AC
            X509v3 Authority Key Identifier:
                keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:93:81:fc:b4:86:44:99:37:51:e5:da:67:47:7f:af:66:9c:
         cd:df:0f:83:cb:23:82:61:b6:61:77:9d:be:b3:6b:21:1e:97:
         1b:0d:77:03:dd:93:f5:ad:5f:9d:60:af:dd:cc:ba:75:97:f9:
         1a:87:d2:c6:e1:d6:cf:b3:4d:79:20:25:6b:3f:00:e4:48:09:
         ba:b6:67:7b:37:74:ae:da:fb:ac:a8:db:52:38:ac:1a:e2:a2:
         ee:f3:2d:0c:3c:27:8e:c9:d3:5f:02:33:fe:74:e3:8a:11:68:
         5e:2e:c1:ba:4a:4f:e3:af:f7:c8:1a:cf:82:e8:b9:41:d7:58:
         10:7e:0a:4c:d3:4a:57:ae:cf:81:3c:36:99:9f:7f:fa:b8:68:
         f6:26:7f:5c:48:c8:c4:e7:5f:b3:ac:ed:a0:91:28:d5:b2:cc:
         32:aa:e4:52:f9:7a:b5:9d:09:6a:ad:38:c4:f2:b8:c2:92:db:
         2f:39:db:ab:25:56:3d:5e:cb:7a:89:67:50:db:30:16:8e:ae:
         26:8d:b3:92:4b:65:13:58:19:83:34:59:2f:c6:46:29:e1:86:
         b3:87:c7:aa:f9:f3:a7:a3:4a:ac:dd:7a:a7:22:41:eb:b0:8f:
         81:c7:ed:06:3a:63:9f:7c:d7:da:ef:22:8a:85:87:f4:5e:8d:
         c3:71:b4:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC
MDY4MzQ0NjAwHhcNMjYwNDE4MjI1MDM2WhcNMjYwNDI1MjI1MDM2WjAYMRYwFAYD
VQQDEw02OWU0MGFiZC05NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlSpj+ivIlBC28wopeYRFQlJUKMvUnnbqXnF6bXV47mned6H7HaMGjjeOB1so
TmeNbpeKuMczKBsvNHRj1yDael0rXwkrLTcx2KsZTF9c5XsUhc7LlEyDEjPxpMQF
xftajQ2YHw91Uff8ZSaPQ7S7eBkJJKvfP9C6Qyy0Z1G/rP6HwjmOZ4l+Y7wHpGIC
TJhRj7UInAV3Gmcpyol8tBgPmqg8KAdVCn76I3Qwb5yqIaSEuH6ArO8GMdMT4M60
6QBFzKIJaEZVi8UEsJwPaCGSBIHG65JSM9PoxH3y33oEJN1GUKksie9/tAn23tgX
MDFOZ5taoZhDs7p+PdCEyANxvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAy3T2b
9Z//H6kZapeEkLb+3uqsMB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz
RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5
Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAppOB/LSGRJk3UeXaZ0d/r2aczd8Pg8sjgmG2YXedvrNrIR6XGw13A92T9a1f
nWCv3cy6dZf5GofSxuHWz7NNeSAlaz8A5EgJurZnezd0rtr7rKjbUjisGuKi7vMt
DDwnjsnTXwIz/nTjihFoXi7BukpP46/3yBrPgui5QddYEH4KTNNKV67PgTw2mZ9/
+rho9iZ/XEjIxOdfs6ztoJEo1bLMMqrkUvl6tZ0Jaq04xPK4wpLbLznbqyVWPV7L
eolnUNswFo6uJo2zkktlE1gZgzRZL8ZGKeGGs4fHqvnzp6NKrN16pyJB67CPgcft
Bjpjn3zX2u8iioWH9F6Nw3G0Ug==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:03:10 2026 by rpki-client