Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
File:                     J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft (raw, json)
Hash identifier:          beEuz3DEtf77ebXVjL3K/OphShj1/ODNP7OHqOaJBOU=
Subject key identifier:   21:D8:08:0C:E5:BC:0C:97:9B:DD:34:53:87:52:67:2C:82:87:0A:6F
Authority key identifier: 27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
Certificate issuer:       /CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
Manifest number:          0110
Signing time:             Fri 17 Apr 2026 05:41:30 +0000
Manifest this update:     Fri 17 Apr 2026 05:41:29 +0000
Manifest next update:     Fri 24 Apr 2026 05:41:29 +0000
Files and hashes:         1: J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl (hash: MVto9g0GhVAZ22mPWkYXY6UwiUjAUBCf4/XA6GIhE/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
                          rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2610, serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
        Validity
            Not Before: Apr 17 05:41:29 2026 GMT
            Not After : Apr 24 05:41:29 2026 GMT
        Subject: CN=69e1c80a-d7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:ee:3b:88:f3:e4:27:a0:33:2b:a1:c5:a9:
                    af:4b:45:1a:38:43:ac:b6:23:93:83:74:95:b4:af:
                    be:a8:2d:77:2d:b9:83:f1:93:00:92:59:5b:98:48:
                    40:48:21:72:4e:68:e1:3d:8c:fe:07:7b:cc:ee:93:
                    af:32:a4:b7:30:8e:93:05:23:07:56:3c:27:1d:1b:
                    91:d0:3e:7d:1f:a8:1f:21:36:3f:06:45:bb:7a:20:
                    d1:dd:0a:cd:e5:70:46:52:8c:bf:5b:e9:7a:fb:25:
                    f5:a8:23:29:fc:19:e3:2b:98:4a:12:5f:45:a4:4f:
                    1b:5e:b6:da:68:aa:b4:a9:7e:47:73:93:ed:9f:98:
                    e8:bf:b0:1e:aa:72:f5:cc:00:4e:3b:3e:b5:37:b0:
                    d7:86:91:ad:29:98:41:1f:03:73:03:0a:e8:24:15:
                    a2:bb:79:be:ed:79:d9:26:ea:85:d1:3e:f3:a5:4c:
                    09:63:eb:12:2f:47:a1:3d:a3:cc:1b:53:b1:4b:2c:
                    43:e7:06:a8:75:ca:15:7f:8c:12:ec:5f:34:35:4f:
                    76:64:ee:79:c8:f3:21:c5:13:28:14:e6:ac:2b:2f:
                    8d:8e:d2:99:53:09:42:86:d8:8e:f3:d8:30:d8:b0:
                    a7:ae:71:46:41:bf:20:64:24:af:f0:70:7d:a9:88:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:08:0C:E5:BC:0C:97:9B:DD:34:53:87:52:67:2C:82:87:0A:6F
            X509v3 Authority Key Identifier:
                keyid:27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:8c:5f:c8:ef:43:94:fa:62:ab:9f:57:c6:b0:b3:68:7e:
         55:31:92:66:aa:98:02:1c:93:e2:2f:21:36:f4:df:f6:69:89:
         cc:09:02:18:53:27:ea:fb:e4:6b:3a:7a:66:d7:17:41:13:25:
         5d:9d:fe:02:e5:4b:91:02:38:b6:bb:34:70:b5:02:f6:e0:5a:
         f1:c2:f9:d6:0b:e4:32:bd:21:9c:ef:24:e6:26:e9:9d:b5:b8:
         70:2a:45:47:de:38:8e:c3:ba:69:46:0d:31:67:4b:cc:7f:63:
         3d:5c:a9:14:ba:a6:a6:64:be:56:3c:50:41:2e:ff:e8:f3:ae:
         49:53:49:e8:b5:35:cb:38:1b:cb:ab:83:2c:5d:39:16:84:f8:
         41:10:dc:22:23:5a:5e:68:67:1d:2c:d5:7a:d5:77:7e:a9:00:
         df:98:bd:62:9a:f4:6a:e1:40:87:2e:82:0c:77:84:f8:49:40:
         e1:dd:61:9b:51:3e:98:0a:bd:c4:57:37:fc:e0:b3:41:1a:4d:
         1a:6e:f6:de:ab:b6:ff:c9:23:5d:b4:7d:6c:83:e6:b5:e9:0e:
         c9:c2:fe:5d:36:84:c1:5d:76:13:e5:f8:b1:fa:d7:67:a6:bb:
         af:de:76:bb:66:95:5b:d7:44:a9:14:a2:3b:2d:c3:0c:dd:53:
         90:f1:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:24 2026 by rpki-client