Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
File:                     JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft (raw, json)
Hash identifier:          jWSvSmOBl/boyqGTpPM34xaKUpoqEO6QVvk5eQooGUQ=
Subject key identifier:   2E:69:09:06:59:37:AF:95:33:77:F9:47:96:4E:B3:6A:50:29:66:E5
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Certificate issuer:       /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
Manifest number:          0141
Signing time:             Wed 15 Apr 2026 04:58:36 +0000
Manifest this update:     Wed 15 Apr 2026 04:58:36 +0000
Manifest next update:     Wed 22 Apr 2026 04:58:36 +0000
Files and hashes:         1: JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl (hash: LWLLWTmKdoYHmhq7Xaux+b/tZAUr9RrZeMoXgxor7LE=)
                          2: DBAEB8B0ABF011F08F2FF00BC4F9AE02.roa (hash: u23FB+guonR/g8Bs9AVntNN8XZjIlu0ZJiya6lu6OcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1FF1, serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
        Validity
            Not Before: Apr 15 04:58:36 2026 GMT
            Not After : Apr 22 04:58:36 2026 GMT
        Subject: CN=69df1afc-681e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:16:d8:2f:4f:e9:5b:65:61:c9:8b:c3:60:
                    b7:3a:5e:b0:de:47:b2:ce:f1:7e:21:b6:e0:7b:1f:
                    73:6e:7c:f6:79:4a:d8:16:d6:2f:dc:7f:45:58:ec:
                    0d:d8:88:6f:fc:7a:c2:fc:8f:13:d4:88:fc:38:85:
                    c3:8c:17:14:1f:7d:f2:ba:8b:a4:c5:df:5e:5f:49:
                    6c:03:6d:83:95:1a:f4:dd:e6:44:a6:fa:eb:1b:e4:
                    f7:46:a5:0c:a0:e7:09:c2:b3:38:4c:8f:db:06:1e:
                    88:63:79:b0:4f:5b:7a:0f:79:b1:28:cd:e7:f7:85:
                    0f:7d:0e:79:37:1d:9b:4b:a2:82:63:7d:ce:29:6d:
                    f4:b4:b6:ed:a3:2c:ff:58:d0:5d:eb:61:be:8a:27:
                    8a:1e:bb:0c:95:e0:c2:1a:0f:65:a6:f3:1c:2e:87:
                    e5:a5:1a:32:d8:b9:62:d3:06:dd:67:80:35:f9:c5:
                    cf:ca:3c:cf:30:8f:05:1c:8a:3d:bf:5f:6c:a0:01:
                    72:bb:7b:41:db:9e:e9:4b:04:eb:76:d9:f0:94:a3:
                    e3:ca:c2:45:ce:3f:04:e5:2a:43:e3:a3:fe:21:3a:
                    70:a9:f1:3d:6b:cb:9c:7e:4c:d4:bd:59:70:43:32:
                    d4:15:dc:fe:c9:a8:44:02:bf:04:55:6a:0b:2e:f0:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:69:09:06:59:37:AF:95:33:77:F9:47:96:4E:B3:6A:50:29:66:E5
            X509v3 Authority Key Identifier:
                keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:e2:d9:d7:d0:b6:a3:73:7a:0e:57:54:9e:f2:96:57:61:
         0b:d3:96:ca:92:db:09:0e:6e:24:97:03:e7:f9:77:35:d3:ec:
         e2:fb:80:f5:6c:13:fb:35:04:99:5d:9c:5c:00:df:df:d6:c6:
         9a:aa:f9:bf:81:42:f6:f2:c2:57:f3:8b:80:71:6c:bc:e2:9a:
         95:73:14:b5:d1:c6:7b:ec:c7:db:d8:4b:93:a6:02:91:e7:b2:
         56:ba:69:a7:fe:78:67:18:fa:1a:85:ea:59:b3:d4:2c:1e:56:
         69:19:3b:74:05:99:11:4b:51:f6:e9:a2:b2:e0:99:c0:0d:f7:
         a3:12:ec:19:1c:7a:77:fe:5a:31:30:79:46:9b:3c:95:03:38:
         3a:6d:14:a5:f3:a2:66:10:82:8b:79:51:a9:57:df:68:62:d9:
         c2:03:de:0d:14:21:23:7e:cc:91:75:54:de:e1:5b:a6:f1:b1:
         f7:00:f4:fa:27:06:10:85:42:e3:27:b8:fc:63:0e:33:ef:a3:
         9a:60:ff:80:1e:69:1d:17:af:cd:59:c7:40:51:c3:ec:71:42:
         0a:27:44:9c:07:e0:ee:bc:8e:f5:3c:f4:fe:30:49:30:ae:84:
         b4:78:33:ea:5f:fe:e1:1c:82:ee:b9:62:81:d0:15:89:1f:7e:
         d0:8d:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:39 2026 by rpki-client