Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
File:                     j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json)
Hash identifier:          cC9qizGmHfMyGldN62zpUR9+j0wpyVeQ1xIm6GIFpOQ=
Subject key identifier:   A7:8D:E1:6E:E4:72:84:96:35:46:69:50:AA:BB:E1:E3:1F:A8:32:47
Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
Certificate issuer:       /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Certificate serial:       034C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
Manifest number:          0342
Signing time:             Fri 17 Apr 2026 00:54:46 +0000
Manifest this update:     Fri 17 Apr 2026 00:54:45 +0000
Manifest next update:     Fri 24 Apr 2026 00:54:45 +0000
Files and hashes:         1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: UtV1ySWOEystB/AKeWR782+yWyjVNmyb+L6VO7JLBTM=)
                          2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: IaCEDFgWsu0fOu5wbRu+aiuKfmRdek8u7/fO0bD+YLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
                          rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
        Validity
            Not Before: Apr 17 00:54:45 2026 GMT
            Not After : Apr 24 00:54:45 2026 GMT
        Subject: CN=69e184d6-c6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:a2:49:10:f0:5a:96:c0:28:ce:75:ac:f8:
                    3f:fb:67:9a:71:2e:b3:6b:e4:65:b4:69:c0:67:14:
                    e3:78:24:f1:53:d2:5b:8a:bb:b2:9f:35:95:a4:11:
                    2f:21:bc:29:20:94:eb:73:29:de:57:65:f6:85:9c:
                    bb:de:34:d0:c4:03:4b:04:62:76:cf:a8:e8:16:6d:
                    29:c3:ef:6e:4a:d5:f1:08:58:c2:04:81:a0:ee:b6:
                    59:64:81:2f:c7:d0:e9:03:fa:07:05:96:6a:79:34:
                    50:19:5c:2e:21:13:e0:cd:96:09:09:b3:b1:c5:f7:
                    48:33:0a:d6:57:70:13:b8:1e:d2:12:f1:22:b6:a6:
                    60:51:ff:c5:af:a7:71:fb:34:69:5a:e6:be:d9:f4:
                    7e:0e:8c:67:17:e0:59:2c:75:71:53:fd:df:e7:15:
                    40:38:e6:ff:6c:a5:c5:22:98:51:28:1d:4a:94:07:
                    fb:bd:99:41:95:ee:60:4b:cf:ba:51:30:18:44:a9:
                    37:9a:38:7f:db:b4:20:7a:b8:b8:b2:90:30:df:8f:
                    1d:b9:58:2f:5b:b3:5b:55:23:e5:80:5b:50:b2:d6:
                    48:5b:13:bf:16:87:97:66:f2:fe:51:78:3c:84:24:
                    09:49:3d:50:66:41:07:7c:78:56:41:39:d8:43:ca:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8D:E1:6E:E4:72:84:96:35:46:69:50:AA:BB:E1:E3:1F:A8:32:47
            X509v3 Authority Key Identifier:
                keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:42:bf:bb:62:9e:fc:ef:b7:66:b2:af:c7:85:76:78:5d:b6:
         cc:6c:67:ec:19:f4:e5:1d:92:77:56:56:28:06:32:ce:8d:11:
         06:88:24:fd:c4:83:79:8d:31:3b:7d:2c:e7:01:5e:9e:42:58:
         da:83:4e:09:77:87:b5:18:14:5c:e5:fa:cb:f6:25:bb:12:bc:
         a9:b7:f4:c2:d8:7e:a4:49:74:b6:25:de:f1:af:88:fa:03:2c:
         29:e2:04:5e:de:f7:83:ed:92:bd:9f:43:e5:52:35:6a:4a:fe:
         d9:75:2f:9f:0d:a6:38:81:12:4a:4e:72:44:b5:b1:a5:c3:bf:
         0c:de:47:66:4c:a6:d5:2c:12:22:d5:b7:16:32:d0:29:5f:8a:
         2e:20:26:57:36:8f:16:1c:c6:1d:6d:b2:d8:06:13:c9:eb:85:
         10:ec:43:9e:b3:7e:a0:9d:20:9d:8b:b7:5e:f0:90:03:b4:56:
         63:cb:13:ed:b8:77:9e:9c:ba:c5:52:66:e4:e8:5a:e8:56:63:
         f0:66:97:53:62:98:fc:28:2f:47:bb:3f:06:80:e2:41:91:10:
         c0:34:94:11:84:46:fe:f1:97:c8:28:38:7a:fa:da:00:ac:b4:
         c5:d5:f9:9c:d1:2d:e9:bb:30:71:b6:94:e2:2a:e3:42:37:2d:
         9a:e2:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:39 2026 by rpki-client