Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
File:                     JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json)
Hash identifier:          GzmEKvFJAdJkL3GdvB/oWG+XKBB0GAsroDLzYPx1Oyk=
Subject key identifier:   84:80:12:50:1C:DF:D5:92:12:FF:B2:28:38:DB:E7:CC:A6:FA:02:46
Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Certificate issuer:       /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Certificate serial:       0EBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
Manifest number:          0EB1
Signing time:             Thu 16 Apr 2026 17:37:10 +0000
Manifest this update:     Thu 16 Apr 2026 17:37:09 +0000
Manifest next update:     Thu 23 Apr 2026 17:37:09 +0000
Files and hashes:         1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: Wfc7kbkZ/NM+6JZGSpAXem6MEJJPlaklmL09QD649dw=)
                          2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: IEnqgZAlKovuD6MzCecMuoV1aCeVk9H0qwnKaqYXSEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
                          rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3775 (0xebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
        Validity
            Not Before: Apr 16 17:37:09 2026 GMT
            Not After : Apr 23 17:37:09 2026 GMT
        Subject: CN=69e11e46-e207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:b3:85:f2:de:b4:30:26:6e:7c:66:45:c8:
                    ea:9c:1d:71:6a:6d:5d:e9:d1:2c:17:2f:bb:b6:e8:
                    ee:f3:18:44:f9:9e:68:76:fb:20:3f:5e:48:a9:fe:
                    b7:0a:b8:a8:ff:12:40:c9:37:94:89:ba:3d:95:11:
                    ac:5d:de:99:17:0d:31:f6:0e:e3:6f:36:88:83:fc:
                    df:34:c9:fe:3f:fa:c7:57:65:52:c3:1e:4c:b2:3e:
                    c7:11:e5:0f:9b:9a:8b:e9:48:1a:45:fe:4d:bc:e8:
                    a0:9f:7f:9a:78:7f:0f:68:6a:d9:7c:90:a5:fd:17:
                    3a:90:8b:43:a8:5d:b8:ca:53:1e:c4:16:9d:e9:05:
                    a1:3a:70:b4:d0:ea:95:c2:f4:7c:c6:e8:ad:2d:c7:
                    75:3a:f0:d9:09:68:00:86:8f:f7:af:9a:3f:06:49:
                    ba:14:10:d8:b4:1f:c1:7e:84:46:2c:20:71:73:00:
                    9c:06:c0:57:6d:5c:9f:6f:82:8c:3d:99:0f:84:84:
                    4c:97:64:0e:cd:cd:ed:5f:e5:57:a6:39:2c:b8:3e:
                    e1:c0:a8:13:68:93:8e:31:e8:c6:fd:13:f7:6d:7e:
                    06:ad:18:29:30:c9:b4:77:17:20:38:3a:e1:c5:03:
                    92:8b:0a:3d:33:20:18:04:9a:9f:ee:9c:df:78:44:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:80:12:50:1C:DF:D5:92:12:FF:B2:28:38:DB:E7:CC:A6:FA:02:46
            X509v3 Authority Key Identifier:
                keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:08:5a:9b:4c:c3:11:f3:19:94:f6:c5:23:81:60:5b:21:7a:
         9c:2a:73:47:d3:be:9f:e6:26:4a:cf:61:ed:59:1a:d2:bb:ba:
         43:68:66:59:61:0f:23:b7:c7:5f:96:b7:ec:42:71:2a:81:a8:
         22:df:57:c8:3b:d2:a1:91:00:24:b9:7a:c9:ad:0e:d0:5d:ec:
         74:df:19:cf:6d:e5:fa:36:db:35:12:ad:88:8a:5c:53:38:59:
         c2:48:bc:b6:c9:bf:52:7e:11:3a:12:3a:16:b9:5f:19:a9:18:
         59:08:15:57:8a:5a:94:1b:e7:60:89:84:55:87:ca:13:d3:b1:
         8e:f1:b9:58:b3:6b:07:39:b4:8b:82:e3:bb:f9:8e:51:c2:61:
         0e:a4:e9:fb:e5:9f:e8:c7:71:2d:1c:0a:cf:fb:b7:17:74:4f:
         81:15:2a:52:77:22:1b:a4:d7:4e:7b:ef:d3:54:50:4b:d6:3f:
         51:a2:2b:90:55:86:b7:1e:24:5d:11:78:a1:59:34:92:e6:9e:
         27:6c:f2:fa:f4:c5:3d:b4:d1:51:f3:4b:b4:2f:b1:49:91:ca:
         e6:33:a8:a2:8f:83:e5:89:94:b4:8a:70:c2:fb:5a:59:a0:9c:
         bb:02:d2:de:98:92:2a:34:56:fa:ff:88:48:08:b2:56:d0:18:
         36:0c:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:45 2026 by rpki-client