Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File:                     jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier:          fsyy5AjI5HWxo/S5nds9PmniEP9ZDdWFf4CW8zJthgk=
Subject key identifier:   33:92:52:97:1C:8E:3E:7E:EE:6C:E6:B2:B6:9C:87:C7:DC:4D:D3:B5
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer:       /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial:       0B48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number:          0B3F
Signing time:             Thu 16 Apr 2026 19:10:30 +0000
Manifest this update:     Thu 16 Apr 2026 19:10:30 +0000
Manifest next update:     Thu 23 Apr 2026 19:10:30 +0000
Files and hashes:         1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: plScQQMB2YF7uLLi33b+dQdK5tm5aFTDnrjsD9w5Fec=)
                          2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: aXpgZXW8Cnbr8t1kmvAwuXjiQ6a1hBE+IDI1VsUVDFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2888 (0xb48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
        Validity
            Not Before: Apr 16 19:10:30 2026 GMT
            Not After : Apr 23 19:10:30 2026 GMT
        Subject: CN=69e13426-57e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:84:0c:43:bf:ae:ba:30:e4:b3:36:61:86:e4:
                    70:91:03:7d:dd:de:e7:ce:f2:40:e9:1d:ad:9c:31:
                    8f:87:23:ba:ed:ca:6e:a3:ba:76:a0:58:d8:d0:4e:
                    93:1c:50:8d:d0:32:7c:c2:13:df:61:a9:22:42:35:
                    c0:3e:d9:3c:1b:51:b2:35:ed:2b:75:53:81:05:db:
                    bb:45:a2:f5:55:98:73:cf:9d:e3:1c:d5:00:99:dc:
                    35:50:8c:35:01:c0:db:ff:7e:aa:ec:34:1d:3c:e5:
                    46:92:ff:f9:87:d8:64:0e:d7:e8:4b:57:87:af:a3:
                    26:f4:fd:3d:71:d2:3b:63:6c:f5:eb:81:d6:19:5e:
                    41:c9:0a:84:55:ed:2c:40:be:79:0a:a4:d4:ef:b0:
                    72:42:0c:a1:13:8c:9e:de:77:c2:96:b2:8a:60:06:
                    cb:33:49:cd:bc:c3:ec:5b:46:f9:a5:1d:c9:ce:1f:
                    5a:8c:23:fe:40:59:f9:51:15:1c:48:f0:f5:9b:f1:
                    6c:e4:5e:da:4b:e0:80:0f:cb:33:ff:d2:56:a3:33:
                    72:2b:ae:09:d5:75:63:b7:8b:11:03:9c:45:91:99:
                    9a:56:55:fb:1b:8b:82:d1:b0:9f:d4:34:24:0e:a1:
                    e9:aa:ed:6a:0c:a5:2e:6e:f5:93:1c:00:44:9f:07:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:92:52:97:1C:8E:3E:7E:EE:6C:E6:B2:B6:9C:87:C7:DC:4D:D3:B5
            X509v3 Authority Key Identifier:
                keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2b:3b:f9:48:6c:32:1c:90:39:4d:b6:28:08:b2:34:06:9d:
         51:aa:20:ef:05:8b:b0:93:78:78:e7:5b:0a:57:9f:cc:e8:42:
         81:f4:47:4d:d0:88:a6:fa:d4:9f:09:3f:39:c2:e7:10:ac:49:
         45:59:2b:49:cb:16:a3:fa:a9:a0:66:6c:4d:fa:3a:46:00:88:
         0b:c9:9b:e3:aa:ad:e8:b8:0d:37:7f:ac:50:af:1a:07:66:50:
         a0:c9:c0:66:ef:50:f6:ee:cc:5f:e7:96:b7:c9:66:dc:76:b7:
         22:d0:a1:12:f5:83:56:e5:5a:ff:3e:f3:22:0e:cb:bf:68:66:
         77:39:7b:c7:77:bf:95:8b:96:ff:32:49:5a:b0:d8:28:27:ac:
         ef:e0:57:2d:2f:d7:4a:19:79:96:2a:70:9b:1f:a6:b1:4a:95:
         11:d7:af:b7:8d:3b:bb:27:93:70:9c:af:84:e6:d5:f2:76:ce:
         9f:0f:17:b6:12:ef:e3:c6:df:a7:5d:9c:e5:e7:72:cf:a3:1e:
         10:0f:40:29:de:93:d4:58:5d:d1:d9:8e:c7:1d:47:14:29:b9:
         17:2c:5d:10:00:52:58:fe:53:4e:8c:78:a0:92:66:8b:9d:ed:
         f3:33:9b:f2:14:26:a6:cc:f7:70:4a:6a:21:8d:75:18:c2:c5:
         e7:3d:fa:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB
NkZBODA0RTEwHhcNMjYwNDE2MTkxMDMwWhcNMjYwNDIzMTkxMDMwWjAYMRYwFAYD
VQQDEw02OWUxMzQyNi01N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA44QMQ7+uujDkszZhhuRwkQN93d7nzvJA6R2tnDGPhyO67cpuo7p2oFjY0E6T
HFCN0DJ8whPfYakiQjXAPtk8G1GyNe0rdVOBBdu7RaL1VZhzz53jHNUAmdw1UIw1
AcDb/36q7DQdPOVGkv/5h9hkDtfoS1eHr6Mm9P09cdI7Y2z164HWGV5ByQqEVe0s
QL55CqTU77ByQgyhE4ye3nfClrKKYAbLM0nNvMPsW0b5pR3Jzh9ajCP+QFn5URUc
SPD1m/Fs5F7aS+CAD8sz/9JWozNyK64J1XVjt4sRA5xFkZmaVlX7G4uC0bCf1DQk
DqHpqu1qDKUubvWTHABEnweAjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOSUpcc
jj5+7mzmsrach8fcTdO1MB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4
NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI
Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUis7+UhsMhyQOU22KAiyNAadUaog7wWLsJN4eOdbClefzOhCgfRHTdCIpvrU
nwk/OcLnEKxJRVkrScsWo/qpoGZsTfo6RgCIC8mb46qt6LgNN3+sUK8aB2ZQoMnA
Zu9Q9u7MX+eWt8lm3Ha3ItChEvWDVuVa/z7zIg7Lv2hmdzl7x3e/lYuW/zJJWrDY
KCes7+BXLS/XShl5lipwmx+msUqVEdevt407uyeTcJyvhObV8nbOnw8XthLv48bf
p12c5edyz6MeEA9AKd6T1Fhd0dmOxx1HFCm5FyxdEABSWP5TTox4oJJmi53t8zOb
8hQmpsz3cEpqIY11GMLF5z36iQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:06 2026 by rpki-client