Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
File:                     jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json)
Hash identifier:          DlKTFzmB8ekeaMpOTIkP+irrpvsbA4XYDguFa1/PrvE=
Subject key identifier:   59:BA:C8:F3:4B:3D:9B:8A:BD:36:C7:46:AA:F8:47:21:95:D9:B8:4B
Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76
Certificate issuer:       /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676
Certificate serial:       12A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
Manifest number:          129C
Signing time:             Sat 18 Apr 2026 16:59:16 +0000
Manifest this update:     Sat 18 Apr 2026 16:59:16 +0000
Manifest next update:     Sat 25 Apr 2026 16:59:16 +0000
Files and hashes:         1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: 3RdE1uYJBNnNRzz820AnCTzHSf719xqOwes6Bd0xpwI=)
                          2: A295F860E71011E8899C3917C4F9AE02.roa (hash: 0mtH92tidj+S9C8pEF1gtwl/Ps40TYHu37CLwgbwKxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl
                          rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 16:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4776 (0x12a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676
        Validity
            Not Before: Apr 18 16:59:16 2026 GMT
            Not After : Apr 25 16:59:16 2026 GMT
        Subject: CN=69e3b864-096e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:2c:ad:ea:d3:ad:a0:c8:46:c5:f4:e8:2a:
                    1d:47:8c:b6:59:f0:17:b9:c3:69:ef:7d:bb:3c:f9:
                    12:e1:06:e1:34:90:ab:b0:00:21:01:f8:66:ce:1f:
                    51:10:5e:ae:91:0f:cc:e2:ed:4e:1f:9e:48:98:10:
                    9a:20:bb:9d:92:c2:0a:94:50:82:fd:85:e3:b1:e6:
                    33:4c:df:ee:84:3f:21:b0:a8:ba:0d:44:35:22:4e:
                    66:c6:3d:98:6a:5f:91:f6:76:18:cc:ea:e5:7e:5e:
                    e7:55:52:8e:14:59:ba:2f:0e:cf:b8:32:09:61:a8:
                    e0:40:ba:2f:06:e5:89:b1:db:8c:4b:cf:f5:2b:6d:
                    3f:5c:0c:a5:69:da:0e:2c:b3:33:90:c3:76:6b:6b:
                    24:d9:ef:a8:82:69:c4:84:aa:50:29:c2:2c:78:8c:
                    a8:45:dd:ac:1a:e1:28:2d:d9:b7:09:ef:34:f4:8f:
                    51:7f:0f:7e:52:d5:2b:9a:a9:9f:b4:80:14:87:52:
                    e5:8a:b6:e0:88:e1:ce:85:d2:40:a5:1b:6a:70:56:
                    b5:d7:b0:cd:05:fd:56:16:21:42:10:ee:7d:fd:3f:
                    f5:8a:c9:74:ba:74:92:54:e0:e9:ea:21:13:16:29:
                    c3:d6:25:d0:e3:76:85:0c:8d:22:53:df:68:68:f8:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:C8:F3:4B:3D:9B:8A:BD:36:C7:46:AA:F8:47:21:95:D9:B8:4B
            X509v3 Authority Key Identifier:
                keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:bd:f6:2a:a2:3b:91:bc:f6:72:c2:17:21:64:fc:cc:34:
         a1:cb:56:a2:65:42:45:16:59:40:2c:ca:2b:2e:49:95:bc:34:
         8a:fb:6b:ba:d5:29:e4:44:b9:e9:ca:a9:45:17:65:b9:8b:a3:
         17:b7:87:0f:fe:f1:be:fa:49:25:b3:ca:e7:57:65:c0:74:1c:
         9b:d2:36:ac:2b:99:ee:12:1e:28:b9:db:39:6e:d7:aa:b3:3d:
         dc:61:3f:c1:b1:dc:90:5c:92:cd:02:fe:34:9c:0c:aa:d5:35:
         43:c1:3a:ee:9d:d8:47:a0:5f:a2:63:61:fc:a5:4d:ba:0b:05:
         65:d9:b1:96:92:cf:43:30:c1:cf:9d:ca:67:78:95:90:99:99:
         b0:de:bc:88:2b:a7:31:0a:4a:3e:d7:ce:f1:fb:d6:79:dc:e6:
         43:85:68:8b:21:9c:db:6d:21:13:b3:01:87:a6:52:4e:1f:a4:
         21:3f:bf:e4:e3:cd:3d:d9:e3:f4:85:da:01:45:81:e9:4d:a5:
         63:b8:6e:9d:22:eb:40:cc:74:1c:44:29:6a:e1:4d:0a:7e:86:
         53:d4:6c:14:c5:88:8b:69:8b:59:97:ec:62:ff:a9:34:92:be:
         25:a1:7f:23:b3:77:a1:d8:0b:04:32:71:c4:c7:ec:f1:e5:04:
         c2:f9:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:37 2026 by rpki-client