Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File:                     kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier:          3CwCBpk9gPuPaF9mbCs954LnMURVya4F1PyOW794YXU=
Subject key identifier:   64:25:D3:5A:F3:95:88:34:28:53:4D:BC:AD:C7:2D:C0:08:6D:3A:B4
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer:       /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial:       0B54
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number:          0B4A
Signing time:             Thu 16 Apr 2026 19:11:21 +0000
Manifest this update:     Thu 16 Apr 2026 19:11:21 +0000
Manifest next update:     Thu 23 Apr 2026 19:11:21 +0000
Files and hashes:         1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: +sBi3Jfg8Kzq4152A6KKxE8JHvHhnCXPJ3FzoSXUui0=)
                          2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2900 (0xb54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
        Validity
            Not Before: Apr 16 19:11:21 2026 GMT
            Not After : Apr 23 19:11:21 2026 GMT
        Subject: CN=69e13459-7057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:fa:b2:8b:95:e2:82:0a:13:31:56:86:d0:
                    da:8c:d1:a8:44:5c:91:f3:e2:58:6f:41:f6:ed:dc:
                    b5:c5:d3:9d:f5:e6:94:f3:68:0e:03:4b:ae:cc:b1:
                    35:f0:19:cd:ac:5d:3a:0a:ee:ac:e5:22:ce:31:8f:
                    b9:e5:7e:e8:4b:8e:85:e5:ce:72:3c:7d:13:06:3b:
                    c8:6b:fb:da:fa:d5:6c:68:31:8e:12:b0:81:a6:d4:
                    84:cf:ea:f3:34:d3:45:a1:ab:04:6f:8d:f7:01:d8:
                    fb:f6:67:c7:56:ff:1a:36:38:03:d5:f2:b8:d5:01:
                    5f:d4:82:0e:59:a3:a2:de:93:a7:a1:c0:50:b5:7a:
                    54:dd:b9:16:a8:c2:35:61:b7:12:f6:ba:6e:99:17:
                    94:9e:4e:d0:1e:32:3c:a6:bf:92:c5:f4:fe:fd:b5:
                    cd:98:2a:d6:81:c1:14:a4:1e:6c:fe:ec:8f:61:1d:
                    df:32:e2:2e:b1:e6:4a:5f:96:a0:47:44:f9:1c:9b:
                    75:f7:7e:08:4b:1f:33:a8:04:1d:12:87:56:c3:bc:
                    2f:ee:48:1a:6d:7d:48:25:57:14:b3:0d:8b:72:37:
                    71:2f:a1:8c:a4:d3:07:fd:59:04:14:93:7a:b8:e5:
                    8a:14:3c:f1:74:a1:f7:6b:4d:0a:25:27:1f:19:64:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:25:D3:5A:F3:95:88:34:28:53:4D:BC:AD:C7:2D:C0:08:6D:3A:B4
            X509v3 Authority Key Identifier:
                keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:a4:f3:19:4e:08:47:38:90:24:1c:5a:4a:b6:64:01:0e:
         00:a4:d4:09:69:4b:7f:11:f0:9e:37:ef:87:ec:78:9a:86:5b:
         f0:50:55:cc:3d:a6:e5:f3:51:c4:89:b8:19:b5:16:0a:86:2a:
         e2:ee:c0:5c:98:bb:5e:de:4e:6a:19:74:7c:74:be:74:6b:29:
         2a:91:73:ef:ae:53:f9:82:b5:37:eb:94:fb:a9:e4:b9:7e:c2:
         f4:71:06:28:5f:83:b3:f2:0a:af:09:49:eb:be:47:df:ea:71:
         92:e0:21:45:4f:a3:ec:3a:f9:32:a7:4d:92:21:8a:43:b3:67:
         d1:cb:d9:50:85:28:84:9a:90:c2:f3:9b:de:b0:8f:9b:b6:04:
         82:3b:82:4f:cd:b0:93:6b:22:3d:6b:25:59:04:68:30:d8:ff:
         e8:72:4a:22:4c:51:dc:c1:55:c2:2b:9e:2f:6c:62:0f:2c:f8:
         c7:8c:60:f7:bb:92:f1:56:da:8d:25:22:5b:9f:80:70:37:4d:
         0b:34:84:a7:80:eb:9f:2e:a9:23:83:19:b3:df:ae:0f:d0:2a:
         c2:f9:ba:1f:6b:10:2d:19:03:c4:f9:62:b8:0f:5d:c4:5c:cb:
         10:a4:11:81:79:fd:90:56:19:b2:2b:be:73:d7:11:65:01:ee:
         ef:ae:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:55 2026 by rpki-client