Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
File:                     Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json)
Hash identifier:          e7Yi8JDGsiUYEv+9fW62HgH9WvFFJEwUVoH3mI+q9TY=
Subject key identifier:   6E:AC:29:C2:74:B2:4A:F8:E2:46:7E:86:68:88:51:87:F0:95:4D:11
Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
Certificate issuer:       /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
Manifest number:          01D2
Signing time:             Fri 17 Apr 2026 03:22:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:22:40 +0000
Manifest next update:     Fri 24 Apr 2026 03:22:40 +0000
Files and hashes:         1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: lkztyfoWHYC67vgmdDNZtVLnB2yMnPkTJCVlzkJ+iBA=)
                          2: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: 94bY4dqJ+hKXNY5wzgPDkEiWpyyIl5u/grdGvd98z+Y=)
                          3: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: ZqHcBcHbL9aMrX73GKd2/onOvCWVli3zOX/+W2Uy6f8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
                          rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
        Validity
            Not Before: Apr 17 03:22:40 2026 GMT
            Not After : Apr 24 03:22:40 2026 GMT
        Subject: CN=69e1a780-1efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:08:e8:b6:9e:81:76:63:8d:e6:4b:94:c4:
                    3f:da:08:f7:e0:44:23:df:44:b5:1b:58:1d:bb:63:
                    40:34:73:06:57:5c:59:12:44:3b:82:96:c5:6e:11:
                    5c:bc:d7:c8:4b:dc:19:44:6f:28:42:09:5b:18:c2:
                    77:d2:1f:bc:b0:85:3b:9f:cc:13:ad:de:8d:d4:7e:
                    46:ad:e4:e6:ff:66:8e:9d:cd:fc:62:48:1c:82:e3:
                    f7:25:8c:86:d6:1f:9f:72:47:2e:d0:f3:4b:e4:42:
                    85:9f:02:ee:f6:67:ea:6e:0a:bd:ee:26:ee:da:0c:
                    22:01:82:b9:ae:b9:f8:09:74:42:fd:d7:32:38:57:
                    6c:e7:f7:c7:e5:d3:bc:ea:f9:eb:e8:c1:a9:a5:bf:
                    0e:bf:33:95:b8:1f:26:c5:b8:45:37:94:b0:52:f9:
                    c7:c0:e4:db:16:48:24:50:7d:e9:78:6e:ed:60:df:
                    6e:cf:29:9e:88:0b:a9:1c:24:03:bb:5d:42:ec:ea:
                    98:3f:2a:06:e1:9b:d3:bb:d4:30:39:39:b3:e0:cc:
                    60:c9:b9:9c:f8:5f:2e:6a:18:8e:39:f0:04:45:f0:
                    ab:35:f9:43:d7:c5:21:75:5e:82:ce:3c:fe:21:62:
                    5c:eb:7b:46:6a:78:1c:34:f7:48:4c:7e:cc:38:7b:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:29:C2:74:B2:4A:F8:E2:46:7E:86:68:88:51:87:F0:95:4D:11
            X509v3 Authority Key Identifier:
                keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:aa:98:2c:40:64:e6:54:13:05:2c:b6:2f:93:58:81:e1:
         62:79:b4:17:97:0c:b4:ae:35:77:2c:ec:3e:7b:8b:75:45:e7:
         3b:c5:b3:80:c6:24:b9:aa:4b:1b:84:ee:d5:6b:7c:67:3b:3a:
         37:ff:86:1e:6f:19:a5:6c:97:e1:ee:45:48:4a:b8:29:df:e5:
         92:f1:8c:aa:50:c1:d9:d2:ab:e1:18:3e:4f:db:23:cf:c5:27:
         26:6d:78:69:41:03:5f:51:76:dc:b1:34:9b:66:94:31:af:a9:
         d0:5d:5a:64:e7:8d:c5:06:a5:59:ed:62:e7:2b:ad:46:00:ed:
         44:a3:94:27:74:cb:19:07:ff:64:5d:21:90:33:ed:f3:66:74:
         24:b8:02:dc:f2:4c:38:b9:ae:50:22:a8:51:7b:a8:75:b8:95:
         d3:27:70:ff:66:94:85:f5:62:ab:e8:76:44:73:b6:30:b7:53:
         2c:f4:b7:72:03:d3:bf:da:f6:38:78:4b:fe:ec:a0:8a:3b:1b:
         6a:22:e6:8f:70:72:2f:5d:7c:96:2a:ee:cc:72:23:5b:4e:4c:
         0b:6f:54:d8:23:5e:73:5b:2c:27:52:94:98:96:7a:07:50:ef:
         8e:ad:a3:fa:65:cf:44:e3:1d:a9:bf:6f:28:4e:a8:94:0d:d5:
         80:a1:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:16 2026 by rpki-client