Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File:                     JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier:          6F6JeX67Eeh//e0tnxMMGjUeL5273qntc5S+lzncjNI=
Subject key identifier:   47:48:94:2C:C5:B4:12:E9:26:3A:95:7A:68:3B:E1:83:13:D6:14:06
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer:       /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number:          018A
Signing time:             Fri 17 Apr 2026 04:15:12 +0000
Manifest this update:     Fri 17 Apr 2026 04:15:12 +0000
Manifest next update:     Fri 24 Apr 2026 04:15:12 +0000
Files and hashes:         1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: mBEnq7NQawHhIDFhkejO4uKHi262JRkcsWWS3MSmcxc=)
                          2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
                          3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
                          rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
        Validity
            Not Before: Apr 17 04:15:12 2026 GMT
            Not After : Apr 24 04:15:12 2026 GMT
        Subject: CN=69e1b3d0-80ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:b9:52:f8:c4:34:16:6c:8f:99:3b:a8:05:
                    43:d1:9c:ef:c2:09:82:f5:b3:bb:22:af:8c:4d:dd:
                    ba:89:ec:50:14:9d:ad:36:05:33:d9:e1:aa:4c:ea:
                    14:97:0b:8b:6d:41:40:0a:9f:c3:a4:a4:af:81:4f:
                    46:2d:e8:a5:b1:40:73:3a:f3:41:fa:af:24:3e:4f:
                    84:fb:c3:6e:31:d5:4c:28:81:f6:32:38:e3:e4:39:
                    4d:80:0e:51:d9:a9:4d:0a:7f:3c:89:ca:c3:87:ae:
                    27:0b:58:a9:64:ad:dc:c5:f1:fa:bf:a1:21:64:b3:
                    05:df:23:02:7c:70:8d:99:27:b8:8e:ef:02:f3:2e:
                    a6:4d:01:3a:c8:47:d6:b6:54:1e:bc:20:fd:b4:0c:
                    2b:94:32:be:cb:f2:3d:08:b9:f8:c7:e3:e8:d6:4d:
                    f3:38:8e:3c:ec:c8:42:d6:72:c0:7a:1c:15:49:ce:
                    45:8c:d1:d6:16:17:b3:6b:39:f7:46:6a:20:80:72:
                    74:40:af:2a:12:bc:70:94:3d:30:18:ff:fe:c8:cd:
                    99:e8:7a:0e:23:db:4e:fb:69:97:a0:2c:78:38:49:
                    18:30:8e:0f:03:09:96:25:8b:c5:bd:a4:16:de:8d:
                    12:b6:c9:e3:82:83:df:06:8a:d9:83:23:78:70:59:
                    fd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:48:94:2C:C5:B4:12:E9:26:3A:95:7A:68:3B:E1:83:13:D6:14:06
            X509v3 Authority Key Identifier:
                keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:c5:75:c6:28:f8:3b:b5:fb:25:ed:79:80:42:90:fd:04:
         35:a8:c7:6a:d8:84:56:93:ee:fe:e8:84:14:0b:84:d0:03:5b:
         be:d6:2b:b5:88:42:9b:a7:48:65:d0:bf:0f:ba:ec:51:5f:0a:
         b8:c3:ec:ac:df:9a:34:1f:6e:80:fe:17:66:50:84:c3:bf:c4:
         5c:30:9a:9b:47:1b:6f:c0:6e:74:d3:46:c5:a9:e5:85:28:d0:
         03:ae:7c:20:68:e6:d7:bd:67:b7:19:14:85:5f:bf:49:46:74:
         56:b0:06:e6:8e:e4:66:32:56:85:8f:27:15:02:c6:45:51:97:
         c6:7f:51:3d:b2:dc:c5:13:93:93:be:56:96:c5:42:d5:e3:62:
         f9:16:11:cf:52:f2:de:99:08:16:58:d6:4c:e9:5d:41:86:5b:
         9d:65:f9:9e:c3:d7:e2:8c:94:29:da:65:31:6c:88:17:09:48:
         ca:8b:5b:b9:79:90:bd:8b:12:4b:41:a5:e1:de:01:df:82:50:
         00:93:05:cb:3b:12:ac:67:22:2c:11:3d:aa:2b:80:3b:83:14:
         8d:b5:f8:5c:a0:69:01:5e:4f:76:b5:d1:75:4e:10:c1:4d:71:
         07:97:2e:4f:38:bf:fa:ae:68:d8:61:f9:06:7c:00:e3:15:76:
         46:db:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:26 2026 by rpki-client