Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File:                     JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier:          9HIWVQ8Oc04bva6ioBg0Sld31/WlpTal+V0ApErqZng=
Subject key identifier:   41:DC:4B:F6:D2:5C:67:02:2A:1E:84:9C:FB:A9:5E:C5:C2:8F:B0:31
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer:       /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number:          2E
Signing time:             Wed 15 Apr 2026 08:21:11 +0000
Manifest this update:     Wed 15 Apr 2026 08:21:11 +0000
Manifest next update:     Wed 22 Apr 2026 08:21:11 +0000
Files and hashes:         1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: uCKRkfSJ2KmzjS3PY0iQvpurocetm//o8udLKLy0oas=)
                          2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: d6S2IX4DR/rLbqbsWRy4XlJUKZ6LC3VVHK1EodAZfjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
        Validity
            Not Before: Apr 15 08:21:11 2026 GMT
            Not After : Apr 22 08:21:11 2026 GMT
        Subject: CN=69df4a77-8241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:2c:87:4e:b5:8b:1c:7c:f6:cf:1b:a4:b9:
                    12:7f:9f:1d:ab:34:bf:d3:dc:2f:2b:e3:c6:a8:9f:
                    98:05:06:e3:22:8a:77:2e:41:1b:5b:93:51:a3:0b:
                    43:c7:e5:e6:2d:5b:88:c7:5d:9a:08:b6:0e:ec:14:
                    08:c5:9c:0d:12:f2:c1:2f:04:7d:a9:2d:d1:5f:4f:
                    e3:65:71:de:ec:fb:89:91:f2:44:13:7a:26:ec:8c:
                    5e:85:b3:01:ca:83:9d:42:94:88:2a:71:6d:61:f6:
                    29:99:d9:56:ed:18:19:17:02:18:e9:0b:b3:e3:23:
                    bf:e1:d2:a9:84:2e:3e:6a:7d:11:a0:a5:22:36:90:
                    ff:7c:39:04:4d:80:11:72:b3:40:07:99:0d:54:94:
                    a2:00:ee:02:c8:33:22:04:95:df:83:52:57:d1:a4:
                    7c:78:5d:dd:0c:f8:73:6d:84:ff:27:f7:ee:d3:3c:
                    f9:6a:92:b1:8d:a8:74:6f:ac:0b:65:2d:83:49:af:
                    01:89:64:f4:1f:7a:ae:bb:bf:c5:3b:c5:64:63:53:
                    93:3e:98:ab:3d:39:75:3b:b1:d0:47:c2:73:6d:6f:
                    77:2f:34:5f:d6:94:92:e3:d2:35:a7:a3:5d:eb:84:
                    ec:1a:2e:48:1f:64:fc:9b:0a:4d:fb:97:3c:d9:14:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DC:4B:F6:D2:5C:67:02:2A:1E:84:9C:FB:A9:5E:C5:C2:8F:B0:31
            X509v3 Authority Key Identifier:
                keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:c2:8e:f5:3f:d2:3c:de:13:94:4e:1b:08:3b:56:ff:5a:
         a8:4f:65:7f:f5:a4:b7:83:30:4b:06:0e:51:3b:02:f1:fe:83:
         40:d6:ac:98:00:19:e0:3d:b4:98:3f:a7:29:da:ac:98:72:67:
         80:7c:4c:5b:34:38:32:2d:2d:7a:98:eb:f0:f2:9c:0c:87:11:
         47:93:8d:c3:07:a7:ec:3d:41:89:65:cc:a3:3d:20:37:f1:cb:
         3c:7a:13:84:b3:2d:5f:b1:4e:ef:4d:65:22:9b:6f:87:69:b0:
         fa:2a:92:92:2d:c0:6d:75:72:76:0f:1d:d8:02:71:e1:d9:6a:
         c5:6c:17:50:1e:3e:00:23:ac:01:d6:e9:9b:a4:69:a4:30:c6:
         20:81:de:94:88:09:ba:04:be:9c:80:01:70:6e:6f:a8:9e:4f:
         06:d0:8c:47:4f:a1:a7:fa:6e:ef:c0:b2:e4:e2:62:24:71:82:
         36:84:e1:25:08:14:27:4e:b6:1a:68:a9:34:b2:27:11:22:f2:
         a9:b6:b1:f3:40:b3:9a:6a:22:b6:e4:c8:e0:ac:7b:d5:df:fc:
         12:04:81:aa:e2:54:a3:00:12:e9:10:20:f5:b8:bf:74:f5:c3:
         9b:8b:8d:a1:4b:89:1e:35:9e:42:97:c7:3d:0a:b7:5f:4d:24:
         42:7f:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:56 2026 by rpki-client