Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
File:                     jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json)
Hash identifier:          ncQbtkWw7CQ1scoi51rZ1G4GwNQeT/p5OkuoH6ntpv4=
Subject key identifier:   51:E9:FB:2D:3D:21:18:53:40:BF:41:A6:10:47:CC:94:8F:43:F7:3C
Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
Certificate issuer:       /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Certificate serial:       0486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
Manifest number:          0480
Signing time:             Thu 16 Apr 2026 23:57:06 +0000
Manifest this update:     Thu 16 Apr 2026 23:57:05 +0000
Manifest next update:     Thu 23 Apr 2026 23:57:05 +0000
Files and hashes:         1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: x6xkXX0hDIVXVs1EFIRYGrbNsYu77jMYLVS7q7qaZak=)
                          2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: ISYvVSKYiERQAYBzI/jF083BOrfksWj3XaooDHkbCsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
                          rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
        Validity
            Not Before: Apr 16 23:57:05 2026 GMT
            Not After : Apr 23 23:57:05 2026 GMT
        Subject: CN=69e17751-a737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:fc:f1:d7:79:d8:0b:bf:40:51:19:f1:8b:
                    f3:77:70:76:49:79:1a:2c:02:54:93:f2:a6:70:4d:
                    fb:25:12:60:00:db:8f:ca:f7:fb:52:a9:42:d4:98:
                    2f:a1:c6:52:d4:06:bd:8a:91:f8:4a:97:49:99:6f:
                    dd:52:5b:09:70:61:8d:a9:3a:72:a5:6b:1d:08:cd:
                    2a:0e:c2:70:e9:96:57:c2:18:37:1c:cc:e6:12:45:
                    90:6a:ef:c1:89:d5:76:81:41:e8:99:58:07:d4:19:
                    c9:1a:96:02:ba:2f:61:8b:4e:f9:2b:a2:c8:80:5d:
                    cc:a3:ab:b3:06:a5:0a:7f:72:e2:b8:06:e6:ab:77:
                    17:14:04:45:9c:88:f6:e9:b5:6e:6e:a2:10:8c:fb:
                    63:fd:32:db:3b:5d:51:bf:60:6f:8e:76:7b:5a:d1:
                    41:72:e0:db:79:8d:8c:90:d4:ab:1b:36:39:41:c8:
                    51:d2:53:7f:01:11:13:ca:f9:df:b9:f2:73:e3:ac:
                    9b:58:ed:cd:3f:14:de:c1:9f:a3:14:ce:4b:60:04:
                    98:89:67:e1:53:9b:ce:e1:70:32:aa:a9:10:6b:d9:
                    d9:e4:3d:90:4d:15:7a:ba:e4:26:eb:a9:1c:4f:07:
                    c4:c3:c0:c1:60:fa:90:42:eb:4a:54:34:1b:37:c2:
                    51:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E9:FB:2D:3D:21:18:53:40:BF:41:A6:10:47:CC:94:8F:43:F7:3C
            X509v3 Authority Key Identifier:
                keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e4:bd:9d:57:4e:13:ac:78:7b:fb:73:67:3e:fe:d1:d0:62:
         d7:9d:01:33:ae:cc:9b:f5:69:c4:a8:f5:53:6e:b9:d2:ad:93:
         2a:d3:41:d7:6b:88:68:cd:6c:33:ab:11:4d:8b:41:8c:85:55:
         d4:f5:96:f9:d0:50:42:df:9c:a5:72:05:f0:a2:89:e4:49:fc:
         96:56:a6:d0:6c:c5:ab:37:1c:cb:c5:8a:e9:29:ee:82:ea:37:
         f6:a3:c8:0b:77:0b:0b:48:d4:ae:9a:b9:db:3e:9f:cd:2e:60:
         3c:5f:77:d1:bd:22:7e:b2:96:b4:f9:da:fd:7d:fc:1b:44:ac:
         72:ee:6d:4a:06:5e:e6:88:ec:0d:de:ec:d7:e2:bc:e2:b9:d1:
         0e:52:cf:03:21:1d:40:89:63:f7:7c:55:26:87:da:92:95:77:
         ae:80:4d:ff:dd:ab:70:d3:bc:17:a6:42:f6:a8:c9:52:4e:33:
         de:6b:7d:27:7b:d3:cc:a0:bd:63:ab:85:1d:d4:73:04:e4:7a:
         26:28:08:ac:7e:b3:73:cb:a3:13:b6:41:92:be:3e:b3:be:0b:
         65:3f:5b:9c:d9:0e:14:67:ce:67:73:b1:87:aa:12:ba:1e:38:
         d4:3b:8e:ba:b9:72:9e:1e:02:04:6e:a4:03:81:76:49:67:7e:
         15:0b:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:24 2026 by rpki-client