Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
File:                     jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json)
Hash identifier:          24phLlXWJxBVtItaOQ1TX+TmJmJ3bO2NvyneRjUOsvw=
Subject key identifier:   AD:DA:97:66:85:76:58:14:5F:C1:48:82:EF:B0:40:A3:3B:FB:11:22
Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
Certificate issuer:       /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Certificate serial:       0829
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
Manifest number:          0817
Signing time:             Thu 16 Apr 2026 21:04:39 +0000
Manifest this update:     Thu 16 Apr 2026 21:04:39 +0000
Manifest next update:     Thu 23 Apr 2026 21:04:39 +0000
Files and hashes:         1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: YtD5jGuUn2uAUn1p/g/n9W1KFosDi9JRkLbzgrOc9ns=)
                          2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: kYaOsRbog8ab77eC2WEVdZwGiVyxt26e5YUyLj2yZpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl
                          rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089 (0x829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
        Validity
            Not Before: Apr 16 21:04:39 2026 GMT
            Not After : Apr 23 21:04:39 2026 GMT
        Subject: CN=69e14ee7-81db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:af:ef:45:4d:36:4b:cb:35:08:f5:c3:c2:
                    bf:b6:ea:4a:b4:e4:37:8a:35:e9:cb:c2:d9:35:5e:
                    a5:21:fc:8d:a1:da:0e:1e:0b:9d:96:f4:ae:b5:e1:
                    39:fa:85:fc:7a:4a:7d:7b:83:d8:c0:6e:48:5f:6d:
                    48:24:c6:22:d8:11:e7:ee:11:e9:3a:8f:c5:04:af:
                    72:7f:79:23:e8:93:c1:01:78:22:67:be:ce:34:99:
                    d3:4c:57:24:ab:be:d0:99:68:20:ee:55:a5:19:27:
                    0c:73:00:e2:fd:81:38:61:db:9c:83:e8:82:3a:5f:
                    8b:f0:aa:b3:35:8f:6b:67:98:0f:94:27:b9:78:3d:
                    65:c8:7c:30:5e:f4:cd:cb:e2:dd:07:85:9f:67:0a:
                    1c:14:5d:cf:c7:9d:6f:74:f8:ae:f4:a9:30:dc:05:
                    e1:fc:f8:82:d7:b1:f1:03:f9:00:0c:bb:35:99:cb:
                    28:e6:8e:3d:fc:ee:ec:68:ca:e9:f1:2e:25:56:9d:
                    2e:c5:ee:bb:d3:e3:04:a9:35:31:2d:7a:7d:3f:d7:
                    ce:f5:24:c5:af:b3:5e:d7:6a:0a:cf:b7:b3:76:11:
                    71:32:4d:09:4d:63:ec:d0:e3:43:f7:17:e2:46:23:
                    99:82:56:77:70:d5:3f:9a:95:dd:ff:01:14:7e:ee:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:97:66:85:76:58:14:5F:C1:48:82:EF:B0:40:A3:3B:FB:11:22
            X509v3 Authority Key Identifier:
                keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:47:a4:de:e1:dd:c8:25:b7:4c:fc:dc:de:9d:2e:09:ec:
         2a:4a:26:59:85:ae:73:43:9f:c2:02:ff:1f:39:00:8b:b2:83:
         00:eb:2f:4d:9b:a8:3b:b9:91:b4:31:65:43:9b:bc:15:1b:b3:
         0b:7e:95:c3:ab:37:12:b9:f2:d5:ec:4a:5a:78:2d:fe:8a:f0:
         6b:98:7c:68:57:d1:ac:36:54:c3:79:45:da:df:4e:d7:62:54:
         26:ba:ba:54:a5:3d:06:e5:29:f2:59:f7:e8:b2:fa:bd:f8:2c:
         3a:5d:65:36:8c:1f:f0:3c:13:55:13:af:d1:24:03:44:66:87:
         19:dc:44:6b:96:ee:25:9d:89:b8:f9:a7:b2:2a:e8:2d:2e:7d:
         7e:e8:4a:8b:16:a5:b9:01:eb:ec:44:51:15:04:ef:30:1d:b4:
         0b:d9:bc:12:60:09:71:81:e2:f0:34:77:98:79:30:ab:43:75:
         c2:e1:a8:07:92:c4:16:cc:d2:a3:98:99:c3:aa:92:c9:10:1e:
         17:ea:e5:a6:4e:2d:55:41:0c:58:6f:52:33:8c:85:d4:43:52:
         13:ed:95:06:bc:1e:7b:c3:73:d0:00:82:40:db:3f:91:44:ce:
         cf:a0:57:f4:1c:4e:92:ce:71:73:e9:8d:62:42:6a:7a:e6:85:
         f5:1c:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:28 2026 by rpki-client