Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File:                     0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier:          qMOARE/E1/lSjBoAPD8Gjn2LnWXk4ssiKHj16z3oUrI=
Subject key identifier:   8D:2F:AC:76:8F:54:49:D6:E2:21:60:B2:3D:25:08:B2:C6:D1:C1:CE
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer:       /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number:          014B
Signing time:             Fri 17 Apr 2026 04:52:36 +0000
Manifest this update:     Fri 17 Apr 2026 04:52:35 +0000
Manifest next update:     Fri 24 Apr 2026 04:52:35 +0000
Files and hashes:         1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: r9I4NdbLmIqNCkYr4y71GyUJnDk7UEP2A5MdI242dQo=)
                          2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: /BN7j32CMdvrqvlXZabxDixoXk3rcdIFkodBJE1okdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
                          rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
        Validity
            Not Before: Apr 17 04:52:35 2026 GMT
            Not After : Apr 24 04:52:35 2026 GMT
        Subject: CN=69e1bc93-20ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:5f:94:64:af:76:b5:0c:51:24:86:b9:30:
                    bf:46:d6:14:38:f0:f4:88:90:ca:be:2f:11:47:28:
                    59:4f:35:db:5e:9e:8f:aa:48:e8:34:3e:db:14:4b:
                    aa:e3:04:56:9e:0e:dc:a4:47:0c:d9:16:59:4d:96:
                    28:57:62:16:c2:d4:26:44:0f:d0:96:2f:7c:7b:3a:
                    8d:50:b4:d0:7c:2d:e4:06:e8:3a:20:fb:a5:80:83:
                    e4:df:d6:2c:63:b7:9d:a3:99:49:2a:4e:ff:33:ce:
                    8c:4f:fc:f4:51:80:ac:79:0f:3b:50:85:31:07:3b:
                    0d:04:62:23:d7:53:e1:95:c6:12:7a:64:ef:9f:84:
                    98:51:96:2f:68:61:10:a9:c7:45:a7:55:2d:e7:3f:
                    22:3f:e7:5a:55:65:61:f7:05:df:6f:a6:92:b5:7e:
                    4b:29:6e:76:2a:7d:96:c7:84:1e:f6:c0:64:6e:cd:
                    e9:26:62:30:69:a8:5d:69:0f:35:df:e1:20:08:e7:
                    b6:01:ed:0d:cf:d7:20:56:24:e6:bd:e2:54:ca:ae:
                    39:ba:18:d4:b7:e2:88:a2:6f:70:8e:50:df:e1:21:
                    c0:74:ec:11:3e:28:f2:99:18:f1:ad:c9:32:b2:dd:
                    00:a4:42:13:78:32:86:26:ed:68:01:0b:dc:0c:05:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2F:AC:76:8F:54:49:D6:E2:21:60:B2:3D:25:08:B2:C6:D1:C1:CE
            X509v3 Authority Key Identifier:
                keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:37:bc:1f:8c:8c:66:5f:a0:0d:48:79:6b:8e:53:e4:6b:7c:
         7b:2a:c3:24:ba:35:5c:20:ad:e4:8e:c3:eb:19:76:32:62:c1:
         56:38:d8:bb:52:6d:2a:13:77:f6:74:d4:2c:31:78:17:02:ef:
         37:ae:08:ee:12:7c:24:2a:01:da:11:d9:c0:ff:d1:de:ac:2d:
         2e:17:58:cf:d5:57:b1:af:a2:5c:fe:ff:fc:1a:25:51:20:82:
         4b:d6:49:d5:bf:bf:0f:25:92:c9:da:51:a1:88:9e:12:18:d1:
         2d:66:ec:6f:96:21:d5:03:12:d9:6c:90:57:d1:8a:b2:df:2d:
         aa:d7:df:af:21:6c:37:b6:c7:13:2c:33:7b:e0:2a:01:1f:75:
         78:00:95:4b:d9:a0:79:c6:cf:0c:7e:fd:c9:01:55:9e:66:52:
         29:72:b7:98:26:1e:d3:19:90:1d:60:c7:f5:92:ff:86:c1:97:
         5b:18:0a:49:d5:4f:a2:24:57:89:c2:82:45:80:fd:40:9b:e4:
         8e:5e:ee:84:db:f3:c4:ff:a1:4d:fc:f5:c4:a4:3c:24:09:65:
         5c:71:c5:b6:29:99:f6:51:73:61:4c:3f:ec:e1:54:e3:d1:c9:
         9b:75:58:ab:c3:83:ac:96:e3:fb:bc:9b:26:2c:84:ba:bb:bb:
         54:20:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:38 2026 by rpki-client