Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          /xqnz0bgQ0NvM5+qR9sOMrH7Fj7kjtlFq+/vVB/uI0I=
Subject key identifier:   16:FD:5D:FB:BE:15:5C:2F:BD:D0:14:5B:05:74:1B:47:C0:2E:15:FE
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          0103
Signing time:             Wed 15 Apr 2026 05:50:33 +0000
Manifest this update:     Wed 15 Apr 2026 05:50:32 +0000
Manifest next update:     Wed 22 Apr 2026 05:50:32 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: rpZUWY+WT84iJMoM/WftdLabZ37+cZ8LVss12U/bY5g=)
                          2: 5090FDECFF2E11F099E36B6D89EE528E.roa (hash: PrWTL5usD2G+p37NAOHzpvbn2FCtmNcY07TLdtnld18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Apr 15 05:50:32 2026 GMT
            Not After : Apr 22 05:50:32 2026 GMT
        Subject: CN=69df2729-77e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:2e:77:c2:03:b8:64:a4:cc:fa:c3:24:d3:
                    cf:79:77:f8:dc:19:1f:db:91:42:99:0c:5a:cf:16:
                    5e:a3:60:c7:cd:fb:bc:a8:2f:d6:49:36:a6:17:6c:
                    4d:31:0b:df:4f:ae:bb:da:6a:1f:0b:a9:8c:20:4a:
                    7c:88:0d:cc:22:c5:5f:27:ad:c3:58:b3:d8:fc:aa:
                    71:e7:da:8b:09:0c:08:13:9f:f9:09:e5:6d:ad:a2:
                    31:c9:ec:26:79:0c:91:ce:f1:dc:e4:85:01:d6:e0:
                    26:a2:dc:49:1e:03:8c:c9:01:03:98:5c:90:14:c4:
                    81:e5:99:aa:f5:fe:ef:3a:ef:43:57:a4:96:b4:8d:
                    f0:fe:4b:88:64:3e:29:c9:a0:ee:5e:46:cb:c4:5d:
                    ba:0e:51:fe:e7:14:c8:4f:26:24:19:4a:70:e9:a8:
                    e8:d6:03:b0:91:2f:9f:ec:ea:55:c4:69:aa:d6:36:
                    37:1b:a5:6b:71:d6:f1:93:59:f0:65:2a:2f:39:7d:
                    c3:24:89:fd:51:d9:ad:38:1a:60:7a:4f:a0:9b:c8:
                    81:7b:61:e1:af:d2:53:1c:42:96:25:66:11:39:51:
                    3f:25:41:47:8d:3d:eb:18:b7:06:a1:c9:64:bc:1a:
                    18:c4:1f:4d:73:09:ca:f9:4f:1a:09:d3:f5:52:3d:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FD:5D:FB:BE:15:5C:2F:BD:D0:14:5B:05:74:1B:47:C0:2E:15:FE
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5e:bf:3d:3e:fd:e8:7d:e5:53:52:d4:bb:ad:fd:1b:e1:18:
         54:cd:95:5a:47:6b:4d:a1:85:c5:25:01:f6:d2:ee:1f:cd:c8:
         83:9c:4f:ba:c9:64:eb:96:92:4f:7f:89:67:12:98:1e:3b:5e:
         fb:73:5c:c7:78:30:90:ab:09:38:dd:02:10:52:d6:28:c3:a4:
         48:02:a5:5a:c4:2d:ed:ef:95:65:9c:9e:8f:8b:01:31:de:06:
         21:c8:4c:37:ca:04:80:1d:c2:d2:50:37:dd:c2:04:e5:f0:d1:
         35:eb:5a:07:12:e2:ed:af:7c:43:e2:74:67:6b:1f:71:e1:59:
         1a:a8:44:4a:5d:4a:6e:3e:6f:1d:1e:2a:37:4f:3e:9a:00:3f:
         bc:dd:5e:64:9e:51:00:8e:71:d5:28:78:dc:fd:1e:7f:3d:c0:
         9b:dd:cf:67:f9:1e:af:d3:e7:79:15:42:a2:a2:f4:81:82:df:
         cd:0b:d4:19:6c:f6:f2:22:66:14:45:10:73:ba:3d:25:df:46:
         6d:f3:6a:fe:a7:a0:ec:48:08:72:b7:4d:d8:05:a6:1a:8a:bc:
         dc:bf:3a:70:b2:a2:76:9e:7b:f5:cf:84:9c:c4:f2:a3:41:d7:
         06:0d:cb:4d:8c:13:70:49:fe:fb:6f:64:64:ec:64:45:6c:19:
         cc:73:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:39 2026 by rpki-client