Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
File:                     JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json)
Hash identifier:          MqBmUBbWKSil/bvYJHfPQ/MjnZcFRNzQg08u05/FFoU=
Subject key identifier:   4E:69:56:F1:F2:EF:99:4D:1C:EF:66:96:5D:1C:41:7C:55:AA:73:8E
Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
Certificate issuer:       /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
Manifest number:          0143
Signing time:             Fri 17 Apr 2026 04:59:50 +0000
Manifest this update:     Fri 17 Apr 2026 04:59:49 +0000
Manifest next update:     Fri 24 Apr 2026 04:59:49 +0000
Files and hashes:         1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: jEXlVUiSg7u6hggdj7EMKUQjBq3GjuFLWcp9D5hJW+A=)
                          2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: 8p2qD1xjyj7uD1UWRtjfeGylIBf/MxlrureN3ZZIJjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl
                          rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
        Validity
            Not Before: Apr 17 04:59:49 2026 GMT
            Not After : Apr 24 04:59:49 2026 GMT
        Subject: CN=69e1be46-20f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:d2:4e:03:a9:ca:fc:59:d8:9e:9c:9b:34:
                    ee:27:76:1d:c2:6f:35:31:f9:81:e7:51:34:eb:78:
                    50:dd:3f:5f:e8:9b:06:00:9f:c5:33:cb:13:f6:19:
                    d6:e3:18:f6:c6:3e:d0:cb:0d:97:73:4e:99:3f:7e:
                    07:e4:ec:0a:7e:12:c8:e0:41:05:e2:de:8d:84:e5:
                    88:e4:d8:b9:52:ce:a8:08:62:d7:80:8b:0a:24:44:
                    8b:7e:44:9b:57:ff:3a:df:07:81:fe:26:4d:b2:21:
                    1b:62:5a:52:09:fc:15:5b:48:62:4b:26:d6:f2:84:
                    f7:17:2c:1b:d6:11:fe:9a:f7:dd:e2:72:99:43:af:
                    09:09:ba:02:42:95:64:ea:fb:c9:9b:e7:9e:18:c9:
                    50:9a:30:c1:43:e9:6e:88:b6:95:68:bc:56:f2:14:
                    94:f9:c5:53:e5:0c:f9:a7:63:38:52:9c:47:93:19:
                    01:81:a4:7a:d0:ce:43:08:fe:c7:f1:7e:9c:7d:13:
                    79:db:a0:b7:64:38:98:46:0d:b3:5e:ca:41:1d:4f:
                    b5:16:5e:dc:74:08:77:b3:3e:21:89:7c:ee:c0:5f:
                    f4:17:95:cc:65:fe:b1:ca:93:7f:0e:e1:ad:b9:e3:
                    a1:df:99:33:e6:5a:a1:eb:ff:03:e7:a8:d5:7f:76:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:69:56:F1:F2:EF:99:4D:1C:EF:66:96:5D:1C:41:7C:55:AA:73:8E
            X509v3 Authority Key Identifier:
                keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:57:33:96:33:ab:f8:b0:b3:7a:08:35:9a:66:c0:8f:68:
         06:01:2a:bd:23:6f:1d:53:16:53:eb:55:8a:56:c0:aa:07:64:
         23:58:39:fd:d4:a9:3c:43:4e:a0:66:12:e7:d0:0c:b2:05:77:
         1f:2a:10:19:29:4b:da:85:c9:47:cb:25:da:8f:68:ed:60:4e:
         a0:b4:a7:62:de:28:0c:37:2c:a8:9c:a4:3a:67:15:ae:7a:ee:
         27:f8:cc:e1:9c:f9:c7:8d:97:7f:22:70:96:63:5f:71:08:ee:
         8e:bd:5a:34:c9:f7:cc:a1:7f:6b:c5:1b:05:0d:13:83:5e:9f:
         a6:91:6e:40:9e:14:02:25:45:77:3a:db:d3:87:65:5a:6c:76:
         50:7c:88:35:3e:b6:6a:77:48:61:a2:32:5f:9a:9e:d5:7d:be:
         08:7b:30:65:e8:6a:4f:8e:e0:4b:c2:ce:78:be:8f:94:48:7f:
         ab:22:bb:73:a1:4a:0a:0f:3a:67:c5:90:4b:33:34:25:2e:1d:
         05:76:3b:df:d0:be:bc:76:2b:94:d0:c4:cd:79:c6:f0:92:01:
         44:df:7f:14:d1:e4:bc:f0:71:0b:98:d8:94:83:db:2b:f7:32:
         e6:10:b2:8b:96:8e:43:16:7c:ac:c4:d1:07:2b:01:93:e3:98:
         53:fd:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:54:10 2026 by rpki-client