Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
File:                     jqW5VjInwuWNQ4vBe6giUHVCRDs.mft (raw, json)
Hash identifier:          ZtYzILNLp1tTPNKz8WVSWz2pcFrzbS3XYH9G6KQsJUE=
Subject key identifier:   1D:80:43:46:BD:78:2F:30:CD:2F:BF:31:8A:B4:E7:62:B4:81:EE:9B
Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
Certificate issuer:       /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
Manifest number:          0131
Signing time:             Fri 17 Apr 2026 05:13:28 +0000
Manifest this update:     Fri 17 Apr 2026 05:13:28 +0000
Manifest next update:     Fri 24 Apr 2026 05:13:28 +0000
Files and hashes:         1: jqW5VjInwuWNQ4vBe6giUHVCRDs.crl (hash: /Afc1V9Ro1JZWiJsF0V+6lfX1FINKt7qhKj/QG5s0EU=)
                          2: E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (hash: qoNSrp1S5UFLz+pkwMGVW1W6xXhNXfIp8HVNYC4sZ1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl
                          rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
        Validity
            Not Before: Apr 17 05:13:28 2026 GMT
            Not After : Apr 24 05:13:28 2026 GMT
        Subject: CN=69e1c178-fa11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:23:0e:d5:84:84:e1:d1:ff:2c:35:eb:99:
                    7d:e8:ff:ad:cd:37:de:de:8c:90:dc:33:d8:5b:eb:
                    ee:4b:f2:a0:b1:c5:4a:2c:5f:68:44:68:c5:ec:d9:
                    53:3b:b5:66:01:19:28:d4:13:70:42:8d:02:10:d3:
                    62:66:8f:ae:3b:ed:0e:df:0f:84:63:05:69:73:4e:
                    42:c5:c4:e9:81:ad:1e:50:4b:2e:04:f9:f7:7e:f4:
                    32:1b:4f:b6:f3:3a:31:fc:d0:5a:65:a5:22:ad:77:
                    96:a0:4c:94:c5:2a:74:df:0a:41:bc:6e:a3:d3:c6:
                    c9:f9:1c:62:ff:26:b0:22:b3:f2:b3:fa:1e:34:19:
                    b0:94:f4:69:f9:c1:f8:39:f8:e2:9d:f1:49:81:5b:
                    2a:95:46:5f:19:62:c9:d3:42:21:90:0b:dc:5f:13:
                    c8:3d:44:92:73:66:8f:fa:ba:23:e7:ea:fd:f9:87:
                    fe:ed:1d:1f:89:21:71:17:2b:74:c7:1d:24:49:1a:
                    73:4b:5a:7f:f5:dc:a7:48:61:76:65:51:d8:13:68:
                    6c:00:70:ef:e8:1b:a8:a2:19:45:88:17:c8:a4:d4:
                    5f:26:3e:40:61:7d:e1:5f:b0:c0:8d:63:b9:59:46:
                    96:29:af:f3:e4:2f:2a:22:f4:21:8a:09:72:83:ac:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:80:43:46:BD:78:2F:30:CD:2F:BF:31:8A:B4:E7:62:B4:81:EE:9B
            X509v3 Authority Key Identifier:
                keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c1:05:18:d9:ee:63:f4:28:b3:4a:10:1c:ba:dc:b9:a0:62:
         f0:86:00:d5:34:5b:64:a8:5e:8c:d5:c0:5b:34:c1:33:3b:08:
         66:ad:7d:db:b4:21:20:e9:8f:fc:dc:4d:76:44:38:8d:7b:6b:
         68:4e:ef:b7:54:2f:10:f5:25:1f:8d:d9:e1:b3:9c:93:bd:d1:
         fc:ab:e0:2d:2e:20:be:14:29:36:66:18:e9:3e:fc:0d:ef:6a:
         9f:d0:e7:5b:b3:39:16:57:9a:b7:fc:15:a8:da:2f:40:92:28:
         c5:6d:f8:c9:56:fb:3e:10:b1:f5:a9:40:de:2d:d8:6f:e8:0d:
         10:51:5f:cf:f6:ef:50:9b:7f:17:03:25:ee:f4:6a:1d:99:c9:
         04:45:32:26:e8:fe:72:cf:89:28:2a:9f:4f:86:f4:61:88:e4:
         86:4b:c8:6f:80:cc:c3:4b:30:cd:4f:f1:82:fd:b7:4c:c0:6e:
         9f:b2:66:e5:f7:d0:15:ea:96:cd:ca:3a:d5:a8:0c:39:c0:38:
         3d:dd:60:59:72:9c:22:a6:6e:90:3c:06:5f:9a:ff:02:9e:70:
         11:34:28:71:35:3c:ea:b7:91:9b:a8:7e:66:a7:c3:db:86:95:
         b9:ac:e9:a9:78:21:05:72:cf:14:54:9c:36:e1:60:b0:b0:ac:
         f1:29:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:34 2026 by rpki-client