Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft
File:                     jiZ6MV35Dplf9M1LLPj8TDMksts.mft (raw, json)
Hash identifier:          HfHWUHYG7QBobT7x2v4T/ib5Ye9ZQb9KBkOTFx7ywY4=
Subject key identifier:   71:F6:0F:BD:EB:7F:A1:C8:A0:7A:2F:52:57:9E:B0:BA:D7:1B:69:D4
Authority key identifier: 8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB
Certificate issuer:       /CN=A91B35DF/serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft
Manifest number:          EB
Signing time:             Sun 19 Apr 2026 06:04:55 +0000
Manifest this update:     Sun 19 Apr 2026 06:04:54 +0000
Manifest next update:     Sun 26 Apr 2026 06:04:54 +0000
Files and hashes:         1: jiZ6MV35Dplf9M1LLPj8TDMksts.crl (hash: WJW323CLxwcorBeCtKTBrlP5AqwozVQXzkbh2tpfsMg=)
                          2: EF714C70D89F11EFA1D2E672C4F9AE02.roa (hash: Vq0K/aKp+dKsE+FZxyZ0XXBhDMom8KbBzBEbtHRU9uE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl
                          rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B35DF, serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB
        Validity
            Not Before: Apr 19 06:04:54 2026 GMT
            Not After : Apr 26 06:04:54 2026 GMT
        Subject: CN=69e47087-a7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:2f:15:2c:c4:35:42:64:2f:fc:f1:75:be:
                    c3:13:0d:58:54:4a:63:5f:af:bc:f5:eb:d1:7d:e6:
                    db:3a:57:12:a7:86:f7:f1:3c:fc:1f:26:a4:34:bf:
                    68:01:71:08:8c:bd:a0:c1:63:ce:9c:9e:99:3d:61:
                    9c:5f:d8:7e:ca:6a:4b:bf:f8:4d:54:1f:a1:65:34:
                    02:63:42:55:5d:6b:71:4f:95:3d:98:54:5c:b6:16:
                    e1:e3:45:a4:ab:6e:ab:21:e4:15:79:5b:d1:d9:99:
                    dd:18:a5:75:18:f4:5e:bb:06:85:fe:d5:7e:35:81:
                    14:4d:8d:ac:79:71:96:2f:c0:06:44:54:50:83:bf:
                    2d:c8:1a:12:91:5f:d5:b1:c7:d5:f4:f7:f5:a1:dc:
                    b4:e1:79:09:ca:5c:71:2c:37:78:33:3b:c3:c3:47:
                    c5:1b:d9:c8:13:88:0e:45:cb:62:6d:6d:ce:a5:df:
                    e5:5b:22:b4:82:59:d0:c9:de:98:3b:35:6e:6f:f5:
                    c4:11:97:df:34:72:69:37:89:f3:bf:ce:82:ad:83:
                    37:1c:f2:d8:06:5f:56:55:37:5b:76:24:23:6b:5c:
                    de:ac:bf:53:a1:50:aa:4a:8f:5b:1d:ec:bd:5a:41:
                    7c:53:07:6b:11:c4:6b:10:58:42:b9:a5:86:7e:68:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F6:0F:BD:EB:7F:A1:C8:A0:7A:2F:52:57:9E:B0:BA:D7:1B:69:D4
            X509v3 Authority Key Identifier:
                keyid:8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:ae:5e:30:96:0b:29:ed:dd:1b:31:79:89:25:38:5d:3c:
         ed:78:79:b7:05:07:0f:80:2b:8e:ae:fb:64:0a:fb:88:9e:78:
         ab:05:d0:f2:71:52:cd:50:49:3d:ea:13:67:47:20:c0:fc:bb:
         36:b1:ea:17:b2:46:ce:10:5f:a2:3f:80:cb:52:eb:c6:9d:a1:
         c5:15:37:ae:a0:ae:c9:ca:5f:a2:c1:0a:78:e6:ac:1f:ed:5a:
         36:91:f0:fd:5a:52:5f:2f:86:42:52:55:20:1b:38:92:44:c6:
         b3:be:e3:82:3b:1b:3c:9c:f8:4f:27:4d:13:78:93:6d:85:62:
         30:2d:99:fe:da:0b:52:d0:60:21:fa:0a:fe:18:04:22:6d:d1:
         81:63:6b:4b:9a:74:25:b6:07:22:b9:e1:ea:6b:e1:59:db:0b:
         85:6a:56:1e:c1:66:f7:92:45:0b:fe:ec:81:63:f2:6f:34:ca:
         67:2e:a1:16:c4:a3:1b:2d:71:28:6e:16:34:0b:8f:dc:55:76:
         08:c1:54:23:25:73:7b:20:0b:28:37:ba:e7:7b:02:0c:6d:36:
         03:de:ed:8b:39:87:47:64:b9:d9:4b:df:a9:dd:ac:a8:7f:17:
         0e:d2:43:fe:4d:16:df:ab:f8:25:4e:e6:0b:54:10:49:46:2a:
         19:7e:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:21:39 2026 by rpki-client