Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
File:                     jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json)
Hash identifier:          cIhKaxJSAgsloDWmY75Cju5L+fH33i/VfMe5nhJM/yo=
Subject key identifier:   39:5C:9C:09:9C:19:14:61:0F:F2:91:B3:FE:2F:68:EF:13:E5:C4:71
Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
Certificate issuer:       /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Certificate serial:       0329
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
Manifest number:          0321
Signing time:             Fri 17 Apr 2026 01:03:23 +0000
Manifest this update:     Fri 17 Apr 2026 01:03:23 +0000
Manifest next update:     Fri 24 Apr 2026 01:03:23 +0000
Files and hashes:         1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: b74evecSqAvaCpoKvgDgHjo3opqOhVtQ7C5lmEYU/78=)
                          2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: jgyMETmKdVDMTgwFjZnh2hRnEoTHCW0kR85ceZFCPxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
                          rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
        Validity
            Not Before: Apr 17 01:03:23 2026 GMT
            Not After : Apr 24 01:03:23 2026 GMT
        Subject: CN=69e186db-353a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:ee:3f:28:ac:50:0a:d0:fb:f3:24:f2:ba:
                    4e:76:0f:06:cc:8d:19:ce:da:37:65:2a:1e:66:6f:
                    a7:97:28:cf:3a:76:27:e5:52:6f:34:11:b8:53:2c:
                    8c:5a:93:f2:4f:ea:94:52:c0:20:37:e8:63:b5:ac:
                    4d:ea:ea:35:07:ca:ce:b2:11:24:d0:ea:02:c9:88:
                    ed:f5:37:95:af:50:d5:ea:b4:56:f4:49:b2:fe:88:
                    70:32:6f:3e:6e:76:c7:b9:66:62:a9:76:d9:9c:31:
                    20:af:9a:2e:8d:f6:ce:3e:7c:a8:f3:d7:08:fb:f9:
                    a4:7f:61:8a:f4:49:18:42:03:1b:b6:2d:fb:b5:06:
                    d6:f6:86:09:5d:65:29:0f:ac:10:e3:bc:65:34:67:
                    eb:b4:0e:46:2f:d6:d1:89:d2:a3:75:ae:7f:51:9e:
                    df:2c:48:28:28:2f:6c:37:03:84:3b:59:f8:2c:6d:
                    70:1e:c7:3a:6c:fc:5e:25:69:d0:21:f5:be:ef:8c:
                    ad:02:c2:ce:c9:fd:a2:ec:26:95:f6:80:90:e4:e4:
                    eb:e0:ac:2e:db:52:21:d4:3a:ce:28:4a:74:b8:36:
                    75:e3:ed:6f:3c:ac:89:eb:fb:35:55:81:a9:da:95:
                    13:48:88:93:10:ec:34:87:f0:06:f1:ae:27:c2:37:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:9C:09:9C:19:14:61:0F:F2:91:B3:FE:2F:68:EF:13:E5:C4:71
            X509v3 Authority Key Identifier:
                keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4e:75:6a:b1:cc:31:34:47:9a:cd:29:1e:03:ff:67:bf:e0:
         97:32:32:f8:09:d4:76:31:e9:6f:7f:64:42:54:b7:23:0b:51:
         d5:df:9a:7f:33:e9:2d:65:1d:77:53:92:29:e0:94:bb:33:64:
         c1:62:87:33:6f:6e:64:6f:86:58:8b:38:8e:08:99:88:51:31:
         be:da:19:55:af:e6:87:13:17:85:cd:cc:e0:97:cd:40:5f:d8:
         84:16:b2:33:2c:46:0c:4b:9d:87:51:49:ac:16:cc:f3:e6:31:
         3d:64:e2:f8:02:9e:83:35:cc:f1:70:01:b9:2d:e0:4d:b5:77:
         6f:b6:a8:42:05:d2:3a:cc:81:03:de:00:ed:9e:c8:4a:25:d6:
         1e:03:74:11:30:66:a1:6e:5a:ef:84:9a:77:c8:0d:80:1a:68:
         9f:79:54:0d:1c:fe:ae:90:9c:07:43:60:01:75:88:d5:e6:72:
         0a:50:0b:5e:e7:ea:a0:b3:fd:25:e0:b5:4d:95:22:f0:d1:c5:
         53:93:77:eb:78:2a:85:77:13:94:20:e5:6a:fa:0b:53:a4:ac:
         08:e8:0a:9a:60:3e:00:fa:6a:3a:ee:41:be:f5:77:42:39:5b:
         b5:1f:6d:d2:62:4e:6a:91:cb:71:d2:5b:d2:c8:39:af:15:9b:
         b1:43:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:58 2026 by rpki-client