Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File:                     jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier:          y5wSpSasIGEnulvxqK2ezhk11hAuRPTyRJNYgPlOWS8=
Subject key identifier:   E2:9E:B9:E4:5F:1F:FA:A3:35:EC:FD:70:2A:85:6C:95:CE:58:F2:9D
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer:       /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number:          016F
Signing time:             Fri 17 Apr 2026 04:35:48 +0000
Manifest this update:     Fri 17 Apr 2026 04:35:47 +0000
Manifest next update:     Fri 24 Apr 2026 04:35:47 +0000
Files and hashes:         1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: dvNtM+Hv+LrVyAePkvgZ5Bo4eM4gHGGq4dg3V9zWp2c=)
                          2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: gywHrBDOisk4NwQExOTjeY31/f6L9eZJuRiuNkwPekg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
                          rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
        Validity
            Not Before: Apr 17 04:35:47 2026 GMT
            Not After : Apr 24 04:35:47 2026 GMT
        Subject: CN=69e1b8a4-7965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:8b:2d:3b:2d:40:5f:e4:99:0a:a4:ed:fa:
                    81:c7:99:0f:77:5a:77:c3:3b:c8:dd:53:9e:7b:ef:
                    52:3b:30:bd:8d:2a:f1:76:58:8c:c1:a6:88:9a:3c:
                    48:97:c3:64:24:7c:21:cd:ca:30:dc:43:a2:9d:3f:
                    0d:fe:70:b5:58:a1:12:2e:61:75:f2:73:25:0d:a5:
                    09:f1:f2:1d:03:ae:7e:5c:1d:f7:9e:bc:cc:84:45:
                    f1:fc:f3:b7:87:63:0c:11:e0:24:ea:ed:8b:91:cc:
                    23:24:f9:4f:8b:ba:c5:6d:b8:1b:32:20:ca:e4:f0:
                    cf:68:9a:8a:7c:6a:c8:38:5e:06:95:44:8c:83:b9:
                    04:cc:b9:af:92:1e:62:09:4c:9b:2b:a0:5f:f0:cc:
                    7d:d9:03:6b:2e:4f:bb:6d:28:dd:f2:a9:7c:76:fd:
                    81:fa:46:87:48:84:70:32:77:87:11:eb:2b:ba:bc:
                    50:4e:55:0c:f6:96:7b:e1:e3:cb:93:41:6d:d0:09:
                    07:c8:b6:4d:98:5f:96:26:a8:f6:0a:31:81:2a:ec:
                    b6:62:ec:9d:15:2f:29:eb:93:bf:52:27:7b:d4:81:
                    c3:bf:ca:47:6a:37:4c:97:a4:87:f5:db:84:70:81:
                    27:78:44:ef:52:d1:18:e2:9c:e1:35:eb:23:32:38:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9E:B9:E4:5F:1F:FA:A3:35:EC:FD:70:2A:85:6C:95:CE:58:F2:9D
            X509v3 Authority Key Identifier:
                keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:44:7b:e2:24:a8:3d:e2:89:c8:ac:55:2a:3f:63:1f:5c:81:
         bd:5f:de:79:22:1e:3f:75:44:d0:03:53:86:bd:98:6a:c9:67:
         d5:ed:a8:c4:78:ac:f3:a4:a1:5f:37:1b:ea:d4:72:bf:42:da:
         1b:f8:c1:a8:23:5b:d6:c7:40:4a:15:09:48:f0:84:f7:0d:6d:
         dc:3d:e5:d4:d1:e6:50:35:7d:9f:a6:5a:7e:38:2b:8f:06:0b:
         e0:d1:b6:af:a6:b8:a8:e0:12:d8:cb:e9:ac:c8:63:ab:c9:31:
         56:24:b7:13:ec:31:b8:44:38:b1:df:b9:a5:8b:84:bb:e7:d3:
         89:62:cc:87:66:b0:e5:c8:08:0e:76:60:1b:f6:f5:0f:24:3e:
         93:00:15:33:98:d9:22:be:d5:43:5c:41:03:ed:06:dd:4e:e3:
         9f:ac:9f:94:89:17:c7:51:93:91:e4:47:10:d3:c9:ac:1b:dc:
         2f:df:75:0e:63:4e:7c:fd:7d:d8:86:63:a0:b1:0e:c9:a0:19:
         94:11:92:18:bd:81:73:47:d4:99:6e:e0:0f:70:35:4f:cd:00:
         e5:25:b3:fe:c8:36:75:5d:aa:3e:2c:27:cd:0c:60:fa:78:59:
         68:1c:c2:ff:c3:93:59:53:99:71:16:80:6e:73:c8:22:6c:9e:
         ca:6c:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:37 2026 by rpki-client