Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
File:                     JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json)
Hash identifier:          1Qy9hiE7ieoKGZ4ZSWEEENFQRlGRh9x/VnpettRoy3w=
Subject key identifier:   2D:BE:C1:61:4A:4E:6F:76:71:11:7F:9E:FA:88:81:BB:91:ED:26:5C
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Certificate issuer:       /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial:       0A0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
Manifest number:          09F7
Signing time:             Thu 16 Apr 2026 19:45:53 +0000
Manifest this update:     Thu 16 Apr 2026 19:45:52 +0000
Manifest next update:     Thu 23 Apr 2026 19:45:52 +0000
Files and hashes:         1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: VyNF7Eroz0t8G/zMWBjilsLmtJSoG8TNkSvAnKShngY=)
                          2: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 4+wSosNz8NVRn6V4mMR47c6x1Lj87Hhq2R9wSUX/xWw=)
                          3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: QqaVtXOsQ3g2/ddOuRomNusHtKcEc9UpR1465Wcagcc=)
                          4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: DAvvM9WZjvxbegKaF7G0bCegMv1ld81gFHwRyYHJ0vY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
                          rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
        Validity
            Not Before: Apr 16 19:45:52 2026 GMT
            Not After : Apr 23 19:45:52 2026 GMT
        Subject: CN=69e13c71-790e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9c:76:cc:2e:91:4d:ee:b0:aa:2f:b2:da:8b:
                    d4:0f:8c:59:38:45:88:80:6c:09:7f:a5:c5:dd:26:
                    3f:19:16:5f:3d:f3:a9:e4:1b:ca:df:be:3c:3c:68:
                    fb:3a:eb:6c:5d:66:5e:ac:4d:b5:aa:47:b4:95:b7:
                    55:7b:c4:93:6b:10:15:db:e3:9d:f1:07:8d:1d:5a:
                    f6:e7:46:6d:14:f1:88:c8:28:3f:64:e6:b2:cc:6d:
                    a9:bc:fd:db:87:df:bf:a6:96:4d:3d:19:fc:56:fc:
                    42:d7:6b:13:99:2e:43:a2:0c:91:85:78:70:09:b6:
                    83:76:b5:76:12:9b:39:7c:7a:8d:af:12:ec:dd:bf:
                    a9:5b:9f:56:1d:72:91:6e:d2:cd:fa:54:42:53:57:
                    ec:a5:9c:aa:fa:8a:c7:90:74:c5:75:a2:43:6c:36:
                    d3:c3:5f:71:69:14:b0:7d:44:52:66:68:79:10:92:
                    34:ad:59:5f:69:25:db:a5:4f:52:49:ca:b8:56:f0:
                    43:05:d0:c9:fe:19:e1:ab:2c:8b:1a:8e:e1:f0:e7:
                    b9:c5:d5:b4:83:64:9a:95:14:f9:6c:65:9c:7a:8f:
                    df:fb:cb:4e:42:75:32:51:90:ec:73:5c:72:66:e4:
                    65:a4:ab:e7:19:37:ec:16:46:ff:26:06:fb:30:7a:
                    19:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BE:C1:61:4A:4E:6F:76:71:11:7F:9E:FA:88:81:BB:91:ED:26:5C
            X509v3 Authority Key Identifier:
                keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:47:f7:85:04:12:19:34:5a:64:4f:ed:a4:a4:7c:b6:13:0c:
         b2:52:28:c8:d0:20:1b:cc:50:45:53:f4:18:b0:f0:e4:de:b5:
         8c:cd:7f:ce:fb:be:bc:66:df:bd:43:bf:4b:ea:55:0b:3d:07:
         3f:f0:58:0a:5a:0d:40:7c:6e:7e:49:6c:8a:00:b6:e5:7b:3b:
         33:b8:a3:3d:88:22:51:94:2b:23:da:06:63:16:2b:b1:d0:96:
         1e:ef:92:d7:7b:07:f3:32:c6:1f:ac:3f:d4:b1:94:95:4c:c5:
         ca:4e:9e:62:6f:42:ce:1e:db:03:c5:18:86:9f:aa:e7:00:de:
         c9:cb:5b:b0:3b:32:41:75:86:16:8e:61:e1:9e:cb:a2:47:25:
         fb:b7:05:39:8b:27:71:a1:4e:eb:74:23:f5:cb:74:b0:2e:95:
         58:ca:d2:e4:45:1b:3c:81:a1:7f:2e:56:79:56:1b:07:1a:7c:
         d1:15:74:ab:6d:a6:bb:e9:6d:08:92:c4:03:de:38:ca:87:ac:
         30:4b:08:18:e3:ec:97:3c:ed:82:a3:62:95:74:0a:4e:9b:9d:
         2f:de:83:d1:d2:56:27:8f:bb:11:0a:7f:85:2a:58:c4:1f:f8:
         a0:a0:98:44:3c:1d:d5:92:0b:9b:93:dc:67:99:1a:6d:76:5a:
         b4:8e:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:16:53 2026 by rpki-client