Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File:                     jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier:          HJR7+/xSlxHKgN6f4Q5s8TtkXlItC1Vxf/Taw/66uhA=
Subject key identifier:   32:40:67:2B:BF:53:40:2A:6A:F0:CA:50:43:92:31:15:89:EF:A7:FC
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer:       /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number:          012E
Signing time:             Sun 19 Apr 2026 05:14:39 +0000
Manifest this update:     Sun 19 Apr 2026 05:14:39 +0000
Manifest next update:     Sun 26 Apr 2026 05:14:39 +0000
Files and hashes:         1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: VkoU9kx3bL6XGesjFf8sM3OUOyrawByCYdgIuzaxuoo=)
                          2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
        Validity
            Not Before: Apr 19 05:14:39 2026 GMT
            Not After : Apr 26 05:14:39 2026 GMT
        Subject: CN=69e464bf-621e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:ac:78:b5:30:d3:68:49:ad:80:20:39:65:
                    7d:a2:54:ff:78:fa:a7:69:21:37:fa:4d:0e:b3:6d:
                    a5:78:43:1e:c6:48:f8:79:90:fc:56:2f:e8:c2:dd:
                    e5:d3:e0:12:7e:2c:a3:95:aa:df:ce:e4:c6:ad:f3:
                    1c:09:94:f5:6f:47:fd:62:ff:8c:c5:36:5e:ca:ff:
                    f1:79:02:f2:32:79:fe:7d:66:15:b5:66:34:25:87:
                    04:e4:b4:45:9f:27:5e:c3:f4:b0:c9:61:9a:e2:54:
                    ee:ff:77:11:23:ba:ae:f7:45:6d:dd:1c:73:9d:4d:
                    7e:08:d0:a8:7b:2a:b7:28:3e:69:25:25:36:2c:31:
                    04:96:ef:67:54:ea:28:a9:4f:7a:42:cf:5d:63:e0:
                    67:c3:01:0d:1d:90:ce:20:d8:8c:23:a4:cf:6c:f8:
                    42:c6:9c:62:6b:04:98:c8:46:f1:37:ce:62:d5:59:
                    ad:fe:b4:5e:6c:74:49:9c:b2:6d:4c:7e:e7:54:88:
                    1b:76:9a:a6:64:b0:66:3f:1f:b1:fe:c7:3c:77:1a:
                    17:a8:3a:7f:93:2e:23:27:ef:f3:84:a6:c3:a3:06:
                    cf:64:98:67:c3:65:bd:42:6d:18:05:c0:6b:4e:8c:
                    73:49:8f:70:26:ba:83:a2:23:48:03:4f:6e:d9:e0:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:67:2B:BF:53:40:2A:6A:F0:CA:50:43:92:31:15:89:EF:A7:FC
            X509v3 Authority Key Identifier:
                keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8b:3d:f5:01:0e:c0:98:71:72:6a:02:ef:d4:6b:f4:8a:09:
         b7:6c:cf:b8:c9:e8:52:31:71:be:ea:1f:09:f6:8f:d7:15:14:
         77:b7:b3:e2:4c:bf:a9:1a:75:99:86:39:9c:37:98:3f:04:d6:
         e0:80:a6:fc:6a:f9:7c:8d:c5:27:25:34:3c:61:ff:03:6e:d2:
         1e:bf:f1:3b:aa:f8:be:38:1b:8a:4c:9b:7d:b5:fe:1b:6d:bb:
         f0:61:e3:40:45:85:6d:ec:30:0f:0a:6a:b8:2c:98:4c:0d:d3:
         ea:51:3c:fd:11:e3:87:0d:8b:ff:fd:81:3f:89:d5:f6:9f:c7:
         af:1c:a9:94:8f:77:b6:05:3e:39:ef:ba:c0:87:92:ca:b8:5a:
         fe:74:63:5c:63:2d:f2:a6:a3:11:2e:74:b9:03:1a:ec:df:94:
         8d:f8:c6:05:5d:7a:b8:ee:80:6b:50:e0:0c:60:8b:d8:58:6f:
         e2:8f:e9:5f:e6:ef:4e:03:6b:e0:21:98:fb:99:1d:58:aa:12:
         a5:fe:7c:50:13:57:0a:fc:f3:be:1a:ad:e8:7d:f1:88:6a:bc:
         b1:d6:e2:b4:95:84:aa:5f:25:4a:ff:72:2e:12:2e:a3:e4:86:
         ce:13:b2:c9:5e:3e:10:aa:9f:a3:9e:da:33:c5:e3:ff:10:f3:
         20:d7:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:36 2026 by rpki-client