Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File:                     rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier:          jCoh1r2RYJMqLGenaTezY9ejcTtLCj8S+lpTz9TT5b4=
Subject key identifier:   20:21:A5:25:1D:FE:0C:A7:F9:EB:C3:ED:4A:F5:19:83:E2:40:29:47
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number:          30
Signing time:             Fri 17 Apr 2026 08:26:21 +0000
Manifest this update:     Fri 17 Apr 2026 08:26:21 +0000
Manifest next update:     Fri 24 Apr 2026 08:26:21 +0000
Files and hashes:         1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: RYI9VkOYD4re/3z/3Z0L/f3AJux9UZoFo4x1rnGP3ZU=)
                          2: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
                          3: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
                          4: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Apr 17 08:26:21 2026 GMT
            Not After : Apr 24 08:26:21 2026 GMT
        Subject: CN=69e1eead-a1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:5e:c4:09:20:80:d4:24:4f:45:c7:a3:3d:
                    11:d2:c7:c5:71:da:9c:26:06:58:70:a4:5c:70:af:
                    8a:ac:3d:94:c2:dd:d0:6c:e0:1e:14:71:f2:ea:02:
                    82:55:35:dd:17:82:cd:20:78:a1:81:28:a4:f6:a5:
                    34:40:ce:ec:e8:ef:1e:87:cf:46:16:f3:f9:44:39:
                    d4:6a:f9:cc:20:d2:a7:a8:f6:e1:ac:24:f5:04:cc:
                    6b:9a:29:eb:ab:62:29:6a:12:1f:81:74:4a:30:85:
                    b5:47:07:75:9d:19:95:d5:0c:38:3b:0b:24:3d:8b:
                    0c:76:c7:0d:14:5a:63:1a:29:e5:d2:c2:92:17:c0:
                    5c:bf:b5:a6:52:44:dd:a4:05:4b:7c:9a:74:29:c3:
                    1e:62:21:81:5d:73:00:aa:05:2d:43:16:5c:7d:be:
                    c9:43:ed:05:88:27:60:1d:2f:55:0b:6f:d0:e5:0c:
                    1a:da:24:e7:39:38:d4:b4:d9:42:97:2a:b2:7f:d6:
                    39:f4:f4:c1:d9:9a:f7:97:79:e9:d5:90:b1:8a:4f:
                    55:7d:ed:fd:e2:ec:50:a5:f7:ee:5d:20:67:95:6f:
                    9a:a9:a5:13:ad:26:08:05:24:45:51:f7:a1:54:66:
                    07:0b:46:93:92:08:76:c9:10:f6:1a:7c:f8:8d:d8:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:21:A5:25:1D:FE:0C:A7:F9:EB:C3:ED:4A:F5:19:83:E2:40:29:47
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:de:28:b9:c2:06:e6:df:3f:91:ed:d5:b0:0d:8f:fc:6d:f3:
         af:b2:c5:e1:7c:25:b7:6d:d8:e1:2f:e8:ca:e3:11:19:a3:ca:
         90:15:ee:32:aa:56:23:c4:31:92:a4:73:47:0d:53:00:33:98:
         db:b9:53:eb:72:74:23:76:5a:98:02:cf:9c:71:98:3b:03:c8:
         c7:9f:57:fe:4d:da:26:ae:5f:70:a8:be:b7:47:de:3d:49:76:
         18:24:6d:85:b2:da:89:50:83:3c:07:ee:86:f7:5c:3b:0b:05:
         90:b5:29:4b:e6:ce:97:4e:a8:8c:4a:63:ad:5e:e1:ac:97:2b:
         6b:b4:76:45:f5:57:29:62:b5:82:cf:be:02:e7:13:5f:00:b5:
         bc:5c:3d:72:b5:5b:df:b4:14:e1:a3:eb:8a:70:37:50:d3:0c:
         fa:f8:ec:0c:b8:6a:ad:f5:a9:77:fa:99:d4:5a:99:a0:3c:d8:
         93:43:ef:c2:8c:89:60:cc:cf:04:fa:a8:05:1e:cb:18:38:fb:
         b8:17:6d:d9:1a:64:99:c5:64:f1:f7:69:95:94:77:86:e9:bb:
         a0:95:bd:d1:e2:0c:45:e9:f7:2e:e8:bb:42:3e:d9:a4:78:5f:
         6f:b4:1d:b2:76:b7:d4:a9:33:e1:3d:ce:c9:a9:02:25:68:4f:
         f8:2d:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:58 2026 by rpki-client