Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
File:                     JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json)
Hash identifier:          4QbRQ2YJFA55+s8q2LVtySTQsbbvmXhAHpS3Uqml2pE=
Subject key identifier:   08:B3:BD:2F:0D:25:8F:39:8D:5A:1D:EE:56:C9:4A:1C:41:FC:52:23
Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
Certificate issuer:       /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
Manifest number:          8B
Signing time:             Fri 17 Apr 2026 07:19:17 +0000
Manifest this update:     Fri 17 Apr 2026 07:19:17 +0000
Manifest next update:     Fri 24 Apr 2026 07:19:17 +0000
Files and hashes:         1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: AgabA+/7tQ1p46r4pIx0XCff+G1dbnz6KyeCf2RyRzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
        Validity
            Not Before: Apr 17 07:19:17 2026 GMT
            Not After : Apr 24 07:19:17 2026 GMT
        Subject: CN=69e1def5-d23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:75:61:ae:57:7f:a5:c2:46:8f:56:e5:1e:
                    3f:aa:17:62:04:46:7b:78:0c:9f:6b:0e:ea:e9:05:
                    b5:c3:5b:70:35:dd:b3:41:d2:03:e5:b5:9e:bd:62:
                    e3:9e:fa:cf:5c:11:93:8a:24:da:33:0b:29:63:f8:
                    a1:b7:38:20:1e:f8:b1:b8:a6:e7:a3:6e:34:db:06:
                    93:9c:c5:76:cd:0c:e6:2b:ae:63:2c:38:93:5c:e1:
                    46:de:53:83:42:67:79:96:a6:92:1d:37:2a:04:38:
                    2e:d9:e6:3f:77:98:51:b4:a7:f9:6b:ad:0e:0b:4f:
                    99:09:13:67:57:3e:02:2f:c8:97:6b:82:f4:2c:7a:
                    4f:80:4f:91:70:e8:4a:c4:37:17:01:01:cc:fe:97:
                    05:d4:6b:e6:1f:ec:82:44:fb:1a:08:28:c2:ae:4a:
                    8b:34:c4:95:29:21:cb:f8:05:b9:39:2e:93:95:45:
                    a1:d5:b3:df:27:98:e7:36:e3:d4:43:dd:e5:18:7c:
                    51:eb:44:1b:4f:16:78:4d:97:e4:db:26:76:34:d7:
                    62:fb:0f:a7:59:41:87:0f:3d:19:d1:e8:71:7b:91:
                    7d:77:b4:a7:8b:d9:6f:85:a6:52:31:55:db:e0:87:
                    ae:09:e0:d8:c5:0f:d6:69:ea:7e:47:3a:13:43:0a:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B3:BD:2F:0D:25:8F:39:8D:5A:1D:EE:56:C9:4A:1C:41:FC:52:23
            X509v3 Authority Key Identifier:
                keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:79:c6:c6:b1:83:0e:67:f1:87:53:5c:54:76:77:c1:e5:54:
         78:5e:97:49:3c:15:bb:6b:9b:d3:55:96:bd:fd:34:b8:90:80:
         db:ca:82:21:11:d9:5d:b8:47:bc:90:17:99:ba:d5:aa:41:5b:
         04:e9:b5:00:86:13:66:eb:7f:fa:c3:ee:c1:b3:9f:54:0b:44:
         9e:d2:17:82:8b:95:3d:c1:12:f1:63:c2:b7:1a:f6:32:e9:4c:
         6c:88:67:3a:66:4f:e4:ef:3b:1b:bf:01:60:0b:d4:81:d7:38:
         0e:90:0c:b2:6f:85:9c:87:d0:f2:e2:b6:2c:8e:9f:a6:0b:ed:
         a8:98:53:89:a0:99:1a:75:04:21:33:ad:d6:ed:50:58:52:55:
         dc:43:ab:e6:02:17:f1:15:66:cf:37:16:a5:fa:31:c6:22:99:
         90:ed:77:72:bc:1c:0c:d6:22:17:a8:6f:17:a1:4d:26:bb:3a:
         20:a2:5a:9a:19:73:48:8c:c4:7c:47:32:75:54:67:37:5b:0f:
         83:a0:0e:18:87:b2:91:6d:94:c2:c0:cb:f4:82:a5:a7:bc:fb:
         29:e8:e9:c9:07:6e:b3:06:2e:f7:9d:cd:f2:3c:33:a8:36:83:
         56:08:e6:15:2c:14:74:71:ba:b9:db:0e:47:79:c4:2f:3a:98:
         6a:f6:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:58 2026 by rpki-client