Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
File:                     jM-30IneJP53MO8rXFeIrgdEhCk.mft (raw, json)
Hash identifier:          s0sSgUhmAqRtRj09NW3Ge101ezgTlDqzgnZuRnsmpFk=
Subject key identifier:   55:4C:56:46:0D:28:10:91:65:EE:90:4C:0D:A8:3D:04:A1:40:B5:90
Authority key identifier: 8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
Certificate issuer:       /CN=A91EEBD4/serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
Manifest number:          37
Signing time:             Fri 17 Apr 2026 08:15:35 +0000
Manifest this update:     Fri 17 Apr 2026 08:15:35 +0000
Manifest next update:     Fri 24 Apr 2026 08:15:35 +0000
Files and hashes:         1: jM-30IneJP53MO8rXFeIrgdEhCk.crl (hash: W5C5ycFXP2G69tD0YTQXRDYXH6g8zbC/Fl7YMVz+nck=)
                          2: AEB081C8EB7D11F08F2DA3C6506F56BC.roa (hash: TKMj0SGDDWUO45H6UFrKS0aoJO0l9h24Ptk33swY28A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
                          rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEBD4, serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
        Validity
            Not Before: Apr 17 08:15:35 2026 GMT
            Not After : Apr 24 08:15:35 2026 GMT
        Subject: CN=69e1ec27-f442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:a1:49:98:a6:01:5b:1f:b9:bf:f6:18:c7:
                    7f:8a:e8:07:99:ee:30:59:a9:a8:28:f5:a3:60:6d:
                    a7:66:89:6c:65:cf:94:ca:c2:12:88:fe:4f:43:69:
                    a6:13:f1:ef:60:d7:b2:a2:b7:f1:65:fb:19:04:4b:
                    e2:e7:4a:21:f6:f5:2d:47:21:d3:59:06:7e:5b:29:
                    3f:7e:23:49:bd:9f:09:e0:c9:3f:1f:e5:da:b7:09:
                    d8:d7:9b:ef:03:ce:66:76:9a:b9:37:f7:3a:46:98:
                    50:fb:fe:3f:3a:d3:65:7c:4e:f4:57:38:50:3d:9b:
                    f5:11:32:61:d4:77:33:1d:87:8d:d9:2e:32:95:1b:
                    5b:ae:99:25:b1:c1:51:2c:f8:e5:4f:c0:ac:bd:03:
                    dd:c5:7f:3b:9f:1f:2e:e3:72:e2:af:25:fc:25:7e:
                    c3:7d:df:2a:07:ba:b9:ed:28:d1:c2:c1:82:5b:eb:
                    35:92:6b:5e:da:6a:6e:4f:94:01:9e:be:df:39:c1:
                    3f:75:bc:ba:a6:f1:e8:1c:86:9d:bb:25:01:10:9f:
                    66:85:da:5a:c8:9f:6d:c1:e7:de:be:7b:e6:8e:aa:
                    44:c0:e7:14:19:73:ba:e6:76:8d:eb:c5:7e:f3:a4:
                    56:da:60:c8:5e:11:81:19:61:48:58:ef:cb:eb:7a:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4C:56:46:0D:28:10:91:65:EE:90:4C:0D:A8:3D:04:A1:40:B5:90
            X509v3 Authority Key Identifier:
                keyid:8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:43:d7:70:13:a7:82:44:be:7a:13:6a:e2:95:0a:c1:fe:eb:
         41:55:35:83:d6:b4:80:a1:53:e9:ca:97:57:bd:8e:d1:f5:52:
         4f:51:e4:fe:bc:aa:f4:50:7a:e3:a4:fa:5d:d5:01:d8:5c:4b:
         fa:e1:b5:24:b7:06:52:a0:73:2b:ca:a3:cf:e0:a8:08:80:bd:
         c1:a2:f5:d5:59:14:e8:4d:a9:5f:da:71:d4:8a:94:9c:e6:e7:
         db:f6:5f:5f:36:11:13:c3:cc:5f:55:4d:3a:b0:d6:a1:2c:d3:
         34:ad:a6:dd:ef:e6:7f:27:55:db:04:c4:ec:23:51:1c:14:a9:
         99:17:6c:29:b3:71:fe:cd:b6:db:be:7e:f7:d1:33:73:47:54:
         11:56:2a:e0:8a:3f:f6:ff:79:ba:01:3e:e5:b8:79:4f:19:ea:
         b7:53:d7:44:63:10:6d:36:64:1e:83:1a:42:dd:93:26:c2:bb:
         f1:f6:8b:68:c9:e1:d4:e7:05:ca:ae:ae:82:ad:89:26:31:0d:
         dc:e5:96:25:da:cf:5a:84:62:b2:5f:ab:0e:bc:37:cb:49:88:
         6f:5e:26:df:67:7b:a9:ae:15:4b:47:39:3f:62:5d:87:3f:2d:
         5c:c9:53:3a:d3:a4:bf:71:b2:58:31:aa:0d:79:0c:a4:80:18:
         43:65:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:47 2026 by rpki-client