Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
File:                     J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json)
Hash identifier:          X02+iO2W7BAdXp1TFW3cLkd2OkWa94skTw99QJXx6eA=
Subject key identifier:   70:D4:71:93:F0:90:B2:AA:F0:2D:90:2F:85:11:F4:A9:0A:20:DD:98
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Certificate issuer:       /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
Manifest number:          CA
Signing time:             Fri 17 Apr 2026 06:42:33 +0000
Manifest this update:     Fri 17 Apr 2026 06:42:32 +0000
Manifest next update:     Fri 24 Apr 2026 06:42:32 +0000
Files and hashes:         1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: BiOVkCL4S6q5V9poQCZJA4N7z0zqvI6pksnAhS/ZIqs=)
                          2: B0B186606D4D11F0A6237A81C4F9AE02.roa (hash: RmZJEnExUw2WVaDlvDUuaFpjpoieH5GbsGF3juvTi9A=)
                          3: E55629C4DFEF11F083E035D2586F56BC.roa (hash: sPWi5FiDO7fUcbp/+HtV4DEa+QjOMwHk89p0/p7kf+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
                          rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
        Validity
            Not Before: Apr 17 06:42:32 2026 GMT
            Not After : Apr 24 06:42:32 2026 GMT
        Subject: CN=69e1d658-3ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:a3:5e:5f:da:d4:3e:6b:27:75:75:97:a5:
                    c8:4f:52:91:00:c8:77:99:25:b6:5a:8b:e0:74:66:
                    bf:30:70:70:9f:1d:ad:b9:ca:88:8d:8d:2b:50:bb:
                    6e:dd:b0:09:2d:99:d3:5e:6d:4f:af:b5:04:8e:64:
                    b7:f5:ab:be:04:50:90:32:9e:ab:12:2c:e0:58:4b:
                    4e:80:4e:45:d4:45:58:ff:b5:9d:d6:80:84:5b:a3:
                    d2:b7:fa:11:00:4b:e4:58:75:2a:19:75:42:50:40:
                    13:81:5a:13:e0:b4:02:4d:c1:73:70:d8:7b:ed:46:
                    6a:a2:50:71:cc:29:f0:bd:02:eb:60:84:9e:25:1a:
                    60:6b:4e:49:2b:e5:fc:7f:e2:0f:0b:de:47:68:94:
                    9e:a9:08:14:96:3a:31:5c:45:05:7e:c1:b0:b1:b9:
                    0c:13:7e:d5:7a:04:31:66:75:25:c6:0b:db:f1:bc:
                    1f:c3:1d:d3:74:a6:77:16:bd:23:81:9f:2f:bf:6a:
                    91:55:49:fb:99:ee:d3:32:e4:8e:97:b0:f2:b9:cf:
                    38:76:01:f5:63:16:50:ea:52:04:bf:83:03:89:a5:
                    4d:56:bb:2f:8b:09:16:1b:f9:74:74:23:2a:45:07:
                    61:ae:8a:73:17:c4:70:e8:eb:a8:aa:cb:91:3e:8e:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D4:71:93:F0:90:B2:AA:F0:2D:90:2F:85:11:F4:A9:0A:20:DD:98
            X509v3 Authority Key Identifier:
                keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:f9:4a:2e:0c:86:4e:ad:0e:52:f4:47:0d:7b:0f:15:7b:
         a8:1c:56:f1:8d:03:dc:34:ea:60:de:66:a4:f1:f5:39:3d:2c:
         f4:d0:ae:7d:2b:ce:f0:e9:16:d7:66:d5:5b:49:50:ef:ca:1b:
         7c:27:de:e2:ab:94:27:e2:a0:4f:0b:ca:2c:b5:04:64:cb:5e:
         c2:fa:db:10:ae:e7:6e:9b:a7:ea:65:06:2c:f8:b8:c4:03:6c:
         58:c1:13:fc:9e:4a:40:3a:26:fb:41:20:7b:9b:7e:47:0c:3f:
         ed:e7:6d:b3:ae:03:a5:21:2f:54:21:c4:75:6b:8f:4d:5f:51:
         1d:13:f7:9e:31:07:f2:b6:40:13:aa:3a:55:19:d8:fd:ae:8b:
         2b:4e:aa:5b:a9:23:40:ee:8c:ef:3c:20:22:26:94:89:b2:d4:
         1c:53:9b:e4:a4:f7:45:b5:f2:13:a2:94:03:85:46:73:23:7b:
         d8:ea:c1:71:ec:56:c6:5f:fc:7a:26:95:00:6f:d2:b4:ad:f3:
         47:05:88:89:15:76:13:06:48:07:8c:28:c5:ae:9e:a3:8d:11:
         9b:7d:8a:1e:36:b4:39:ff:4a:73:00:f4:2c:85:bf:35:d5:88:
         56:bf:8e:f5:92:08:ea:95:f4:5b:45:60:00:b8:e5:92:97:5f:
         22:4d:74:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:32 2026 by rpki-client