Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File:                     JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier:          4+k7FeUv/wF/DDcp9p3dSGyDFPDsJODkdUiFN1OOZBU=
Subject key identifier:   CB:74:A3:B3:03:FE:14:81:5F:AD:37:5A:3F:AE:3E:01:56:1C:92:AC
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer:       /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial:       259E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number:          2586
Signing time:             Thu 16 Apr 2026 15:42:32 +0000
Manifest this update:     Thu 16 Apr 2026 15:42:32 +0000
Manifest next update:     Thu 23 Apr 2026 15:42:32 +0000
Files and hashes:         1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: 6aD+D6SGzDtfG2U+CjEhYkxhYMafOYpQGA289bdzUYU=)
                          2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: hS+s1nIXItEij56ye/fB0UYF3lqIxxiOI5UAFSDn8N8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9630 (0x259e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
        Validity
            Not Before: Apr 16 15:42:32 2026 GMT
            Not After : Apr 23 15:42:32 2026 GMT
        Subject: CN=69e10368-f796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1b:29:7d:28:55:08:77:35:2c:23:77:14:40:
                    84:2d:ce:d2:f7:b1:3f:1c:c0:99:6d:ae:b7:59:9d:
                    f3:6b:12:1e:26:ac:e9:74:ee:25:24:ad:45:c3:0a:
                    32:0b:3f:7c:55:68:47:50:b2:83:bf:4d:ad:2e:de:
                    e0:20:7c:12:d9:50:c0:49:ab:6d:36:e4:d4:fd:2e:
                    10:a0:ec:fc:0c:75:82:f9:76:36:67:dc:f4:ce:3e:
                    70:c3:ab:1b:c3:2f:95:11:b9:67:fd:76:7e:0a:ce:
                    ed:7a:04:48:9d:7d:87:e8:41:c6:41:a8:fa:12:b9:
                    64:fd:aa:47:de:cc:33:9b:92:b4:4a:de:81:8b:0c:
                    c2:1c:74:7b:8f:8b:e2:c8:e0:9f:10:0d:71:08:b4:
                    73:6e:35:ab:b5:9c:5d:10:69:7b:92:5f:e0:ce:25:
                    d5:66:4a:c8:25:63:74:f7:4d:5a:87:ae:1e:7c:a5:
                    40:7f:20:a8:80:fc:d9:fb:ff:17:70:eb:56:c2:58:
                    e5:c5:e7:6e:56:5f:d2:a6:fc:ae:b0:75:69:38:e2:
                    81:0a:1e:d0:95:d0:04:31:c4:71:73:a3:d4:c0:0c:
                    e6:77:12:79:99:f2:1a:6e:74:0a:65:22:de:8d:a9:
                    8e:3b:d6:53:42:39:d3:3b:5b:1a:5a:c6:37:12:de:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:A3:B3:03:FE:14:81:5F:AD:37:5A:3F:AE:3E:01:56:1C:92:AC
            X509v3 Authority Key Identifier:
                keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:21:fc:57:e1:c8:04:74:03:96:ad:be:ec:49:e8:55:7c:
         7c:35:2f:a0:ed:38:89:01:42:fe:66:29:7d:c9:68:de:ff:9b:
         32:5f:48:e9:90:e0:58:3a:43:29:fd:0f:b1:27:64:40:2f:ff:
         dd:eb:91:c9:cf:75:ef:8a:57:8c:4b:5f:b6:a7:3e:59:96:70:
         f3:da:da:e2:dd:b2:25:f7:fa:58:16:b5:ff:23:ab:c6:92:e2:
         c1:43:fe:87:f2:a0:ae:a4:78:e9:9b:a2:1a:2b:24:77:c8:de:
         4a:3d:bf:3b:fa:fd:d2:05:3f:f4:af:ea:16:a5:1d:f2:11:3c:
         60:6a:8e:28:e7:61:13:8f:7a:65:24:90:02:ac:fe:0d:92:66:
         5a:1f:37:96:08:60:8a:93:1a:48:6b:b9:54:8e:dc:4c:cc:7d:
         82:16:2e:82:b4:a5:a8:54:60:80:9a:9c:be:00:21:cc:a3:2f:
         34:a7:3d:22:7a:8b:d7:29:e5:ec:82:ca:29:10:1a:cc:f9:20:
         7b:0c:eb:5f:5c:03:c4:f7:93:e7:7b:04:b6:5e:20:3c:bb:df:
         32:33:bc:5a:55:03:1f:3c:69:e5:e3:26:63:e9:8c:ef:0e:bf:
         ae:fa:c0:a4:12:e1:51:23:68:05:31:a7:dc:94:38:b5:41:6b:
         60:14:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:44 2026 by rpki-client