Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File:                     jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier:          yKyhs95a9MTXn6QuUw/Hz3Pph0WSaj3v410/35U6Vvk=
Subject key identifier:   21:B1:BB:E1:44:DD:81:11:7A:18:A6:07:CA:F8:18:60:5D:81:5A:7F
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer:       /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial:       0CE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number:          0CC8
Signing time:             Thu 16 Apr 2026 18:25:55 +0000
Manifest this update:     Thu 16 Apr 2026 18:25:55 +0000
Manifest next update:     Thu 23 Apr 2026 18:25:55 +0000
Files and hashes:         1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: M+45CLe5C1o6XO9VucqxgM5MsZDTWYg2/viIxDCiVvg=)
                          2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 7H74kxzAu6eBhMbuiVdEINpAuR5nv5OCNmqiu6IXaNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
                          rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3296 (0xce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
        Validity
            Not Before: Apr 16 18:25:55 2026 GMT
            Not After : Apr 23 18:25:55 2026 GMT
        Subject: CN=69e129b3-9f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:b5:0d:43:52:40:23:2a:4c:03:32:f8:a1:
                    0d:50:2e:8c:86:1f:d0:0c:5e:b5:2b:05:91:34:69:
                    4d:0b:8f:a5:fa:72:24:bd:e4:c3:2b:6d:60:fa:fd:
                    88:d1:59:29:f8:b8:d3:24:21:0a:c4:d2:5e:d5:b5:
                    22:ec:a1:21:69:5f:56:cb:26:02:fb:33:55:58:d0:
                    cb:22:5b:d8:86:b3:53:af:dc:0e:22:a1:3f:ed:4a:
                    30:b4:70:62:3b:23:26:29:24:fd:b7:ed:b3:7c:ad:
                    66:28:8c:65:8a:0e:7c:3b:11:62:f9:66:26:6c:45:
                    02:55:d5:df:e6:f8:44:d0:c1:27:1b:67:d1:01:3d:
                    a1:de:81:22:a0:c6:3c:de:62:bf:ce:1d:8a:d4:8f:
                    29:42:e8:a8:c2:40:80:98:dc:75:d4:ef:f8:8e:f6:
                    46:dd:76:c9:b5:20:4e:1a:cd:e6:d7:31:ed:61:d5:
                    c2:3b:42:20:5a:5c:24:d4:43:c8:01:af:10:c6:d1:
                    2f:cc:48:50:cf:4f:67:e8:96:a9:a1:63:56:11:b2:
                    5a:9f:55:7a:5c:22:7b:81:c6:57:b5:06:6e:93:38:
                    12:14:04:1d:89:f4:61:3c:76:d3:11:17:f0:d8:03:
                    18:f3:e8:40:aa:7c:d7:6c:f1:1f:ea:70:67:91:ee:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B1:BB:E1:44:DD:81:11:7A:18:A6:07:CA:F8:18:60:5D:81:5A:7F
            X509v3 Authority Key Identifier:
                keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:32:46:c8:06:c5:7f:2a:dd:b8:9e:b4:8f:eb:62:80:fb:41:
         90:ec:de:f3:23:ce:28:df:a2:91:a3:a0:1e:5d:f8:b5:ba:87:
         0c:9f:9f:cc:ea:46:ad:14:3f:af:39:19:b0:a8:fb:f3:35:23:
         00:8c:04:5f:cf:fd:03:13:d3:ce:3b:17:22:56:30:58:36:13:
         9b:f0:79:a3:9b:ff:73:54:c3:69:9d:5f:92:16:d6:ca:f1:e3:
         a6:ef:63:0e:0a:03:9d:29:00:54:1e:bf:22:99:d4:c9:14:a9:
         50:0a:cf:78:b2:87:ba:f3:fb:db:6d:6b:15:d6:70:97:1f:74:
         6b:a0:fe:16:e6:40:f6:71:ee:11:8d:4d:cb:7f:67:60:d1:34:
         74:01:21:99:5b:90:cd:f7:cf:35:09:c1:42:ea:f7:4a:7a:45:
         97:36:57:b4:73:00:10:a0:a2:ee:46:56:c7:76:aa:9e:0d:6f:
         52:ea:0a:d7:bd:ea:9d:d4:80:7b:13:e0:1e:25:89:a0:01:16:
         71:7c:f6:e3:dd:a3:af:e3:24:f8:fd:fd:f8:9c:07:6d:60:6f:
         51:cc:7f:78:b6:09:8a:46:55:cf:b2:5d:43:4e:53:90:ea:39:
         3d:c4:c7:6b:64:6a:b7:4b:c8:9b:72:40:32:0a:5d:6a:44:7c:
         0b:19:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:45 2026 by rpki-client