Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
File:                     JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json)
Hash identifier:          khN8S2xA+21YGy4VoYhQ+6iLV9mAUwt7wem7EwOyDtg=
Subject key identifier:   3A:6A:7B:7E:28:1E:D4:1B:84:79:14:D5:13:B9:97:C1:F0:E0:E6:EC
Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Certificate issuer:       /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
Manifest number:          84
Signing time:             Fri 17 Apr 2026 07:22:00 +0000
Manifest this update:     Fri 17 Apr 2026 07:22:00 +0000
Manifest next update:     Fri 24 Apr 2026 07:22:00 +0000
Files and hashes:         1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: kxNevQZe/1awl+0xgyHAEvfz5L7xh/hD5RKZZo+YkMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
        Validity
            Not Before: Apr 17 07:22:00 2026 GMT
            Not After : Apr 24 07:22:00 2026 GMT
        Subject: CN=69e1df98-383b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:e9:3d:94:e0:07:14:53:a4:57:e5:55:c4:
                    64:d5:16:6c:40:9f:38:09:3b:ba:68:a7:7f:7a:a4:
                    b7:4b:fc:91:9a:1c:f9:3c:18:b6:36:c6:a9:a8:d1:
                    11:23:a4:4d:86:fd:90:e8:dd:ec:4e:74:42:73:12:
                    d8:74:5f:8e:f1:d9:89:53:a0:1d:ac:98:f8:a0:6c:
                    41:fc:e7:78:a8:48:f1:ca:5e:f0:d4:2d:9c:ca:8b:
                    6a:7d:92:18:d6:85:4a:0f:34:0c:90:5b:50:98:f3:
                    fd:18:7d:f3:94:20:55:ee:b1:df:d0:f1:c2:97:51:
                    5f:34:bc:32:7e:71:46:0d:55:99:f8:bc:80:89:d3:
                    9f:f4:db:9d:11:e9:d0:33:eb:96:e9:7b:14:d0:4c:
                    bc:0b:f3:fa:ac:d9:17:b1:fc:ec:ed:23:59:07:8d:
                    8c:83:a1:70:62:7b:4c:fe:29:7b:52:61:76:89:ee:
                    17:36:30:0b:1b:8e:af:87:f7:9b:27:6d:cc:97:8d:
                    68:88:d0:90:17:3e:9e:4c:69:07:b8:59:5d:fc:3e:
                    14:20:93:1d:4d:41:2e:b7:4f:e2:c5:4c:80:f9:c6:
                    83:1d:c1:3d:b7:52:5e:cc:77:e8:f0:ec:02:74:36:
                    42:38:01:85:d7:3a:26:64:f6:13:c9:01:2b:e9:5a:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6A:7B:7E:28:1E:D4:1B:84:79:14:D5:13:B9:97:C1:F0:E0:E6:EC
            X509v3 Authority Key Identifier:
                keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:80:1f:84:e6:26:b7:5a:a7:ad:9e:c9:6d:92:8d:b8:ad:a9:
         98:ee:9b:94:b1:6e:0a:e6:12:87:57:6c:71:81:0a:d9:08:d5:
         7a:8b:a2:41:41:39:dc:7c:cb:cf:63:9d:93:b4:36:57:89:45:
         5b:7d:fb:fc:7a:9c:23:9e:3e:de:3e:ac:2b:2f:8f:24:4d:1a:
         c1:3c:17:d8:82:1a:5e:c6:09:de:0c:ea:48:1e:1a:b8:6b:a5:
         91:d7:b0:6e:8c:62:7e:38:d3:44:81:97:d0:29:43:17:51:52:
         90:79:13:03:ce:e5:fd:cf:46:c4:cd:4a:bb:66:11:09:43:ac:
         af:9a:93:6c:8c:3e:74:64:09:ba:6c:b3:e4:2e:25:3a:5f:84:
         55:5b:53:19:28:71:0a:26:2a:52:d3:c6:17:c6:e4:5e:fb:7c:
         d1:61:2d:0e:eb:c2:c1:bb:3f:c3:c3:d7:6e:0e:e5:39:ff:ce:
         a2:d5:f6:fc:d7:57:05:c4:81:78:6e:65:0a:98:6b:6d:41:bd:
         44:8f:4b:96:56:70:1d:c8:70:8c:26:c1:01:dd:df:48:f3:32:
         ee:37:90:0f:af:68:1e:ec:f7:4a:03:81:74:29:4b:6f:13:73:
         e7:e5:ba:f2:e5:9a:02:92:a7:ad:de:9a:d1:b4:7c:0c:98:c4:
         e0:06:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:15 2026 by rpki-client