Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
File:                     ju12mE8jGqLHDymCN43Gndg9WFw.mft (raw, json)
Hash identifier:          dP1FyYwlNvBCpQVk8u4JZHPRcwcf7eOwIXOqXmocEv8=
Subject key identifier:   0A:B7:54:26:24:46:2C:4E:AB:DB:6B:C5:7B:16:77:B5:EA:3B:78:62
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Certificate issuer:       /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
Manifest number:          2C
Signing time:             Fri 17 Apr 2026 08:28:42 +0000
Manifest this update:     Fri 17 Apr 2026 08:28:42 +0000
Manifest next update:     Fri 24 Apr 2026 08:28:42 +0000
Files and hashes:         1: ju12mE8jGqLHDymCN43Gndg9WFw.crl (hash: 6T5hPlgx3HEq7cxTbsxOlvP18iRTxI3sW2jTLhv2/bo=)
                          2: 850C91D6001811F18252CD21426F56BC.roa (hash: H0q+xb6eVx4tPSPvPAYInq6UBtaoioP2tniqAH87wyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
        Validity
            Not Before: Apr 17 08:28:42 2026 GMT
            Not After : Apr 24 08:28:42 2026 GMT
        Subject: CN=69e1ef3a-4109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:67:b8:f5:3a:0f:1e:f2:73:ce:50:7e:05:
                    7f:ad:10:30:5a:3c:ed:a0:a7:c4:f4:03:3a:b8:73:
                    41:89:26:7a:3b:fc:c5:32:5b:d7:f7:f5:0b:fd:8b:
                    a4:a2:6d:86:44:85:e1:fe:c4:01:88:e7:00:be:f4:
                    39:04:30:42:c7:17:d1:90:cb:e7:98:56:60:11:94:
                    a6:34:1f:15:91:c2:ba:8b:80:dd:fa:f9:5d:de:4d:
                    db:4b:d4:11:f3:84:9f:8e:b7:5f:3b:69:49:83:c3:
                    b1:49:6c:27:3d:3c:95:78:f9:39:d0:18:82:c9:92:
                    65:8d:62:39:2f:53:49:ed:88:9c:86:00:5d:33:6a:
                    2b:57:04:d4:d8:70:a6:04:23:2d:11:88:e5:8e:4a:
                    b5:04:33:95:06:be:eb:80:2a:41:e7:35:09:bd:06:
                    78:83:fa:8b:39:12:1a:44:60:24:2c:e8:9e:54:41:
                    d0:9b:96:51:69:53:52:ee:e6:bd:49:e5:40:2a:6b:
                    e6:8a:a1:73:29:98:00:61:d5:93:c1:70:c3:fd:b8:
                    db:f7:e0:81:74:2a:7f:05:b6:db:de:6c:e0:3d:e8:
                    84:df:4d:c7:48:30:cb:dd:f4:83:ed:14:df:a8:70:
                    8b:26:9f:06:43:bb:18:15:3f:de:76:6c:fd:fc:cf:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B7:54:26:24:46:2C:4E:AB:DB:6B:C5:7B:16:77:B5:EA:3B:78:62
            X509v3 Authority Key Identifier:
                keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8e:98:57:8a:58:aa:b2:53:4f:a9:21:5b:33:2e:6e:20:fe:
         da:f6:6f:1e:28:00:56:10:de:9f:2a:28:52:5e:ee:d8:00:26:
         24:e7:98:0f:45:31:68:ec:a0:38:0e:64:b5:49:d1:ee:fa:59:
         f3:3e:71:a3:fb:b2:05:ab:f1:75:4c:9c:63:bd:0f:96:a5:3f:
         8d:b7:b2:09:fe:1b:42:82:02:53:02:27:74:38:30:1b:14:ed:
         8b:f0:92:29:fc:3f:fb:5d:a9:52:38:11:5b:97:cf:63:d4:68:
         36:cb:2d:bf:c8:d8:18:d1:37:e1:06:14:17:ea:49:a9:4f:3d:
         d7:97:1f:e3:6c:3e:b1:9d:bb:b3:46:a0:d8:bf:35:74:72:e1:
         63:a3:d9:40:f2:89:5e:0f:c7:81:ce:e5:da:72:30:20:13:53:
         40:c6:3a:88:99:f7:4c:4c:64:da:e6:34:cf:f8:52:c5:99:f4:
         f1:8e:6f:17:18:03:5c:f5:14:55:fd:32:b3:89:21:1a:41:44:
         fa:82:e3:be:23:20:5a:fe:5f:0e:32:f2:c6:70:b6:32:86:20:
         75:29:29:a3:80:99:e2:7c:f0:f2:fb:41:a4:01:b6:e0:81:0d:
         23:14:b3:4d:02:17:1e:5a:61:9e:4e:0e:9f:74:e8:cd:02:e7:
         75:ab:99:a0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MUJFNTExMC8GA1UEBRMoOEVFRDc2OTg0RjIzMUFBMkM3MEYyOTgyMzc4REM2OURE
ODNENTg1QzAeFw0yNjA0MTcwODI4NDJaFw0yNjA0MjQwODI4NDJaMBgxFjAUBgNV
BAMTDTY5ZTFlZjNhLTQxMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfD2e49ToPHvJzzlB+BX+tEDBaPO2gp8T0Azq4c0GJJno7/MUyW9f39Qv9i6Si
bYZEheH+xAGI5wC+9DkEMELHF9GQy+eYVmARlKY0HxWRwrqLgN36+V3eTdtL1BHz
hJ+Ot187aUmDw7FJbCc9PJV4+TnQGILJkmWNYjkvU0ntiJyGAF0zaitXBNTYcKYE
Iy0RiOWOSrUEM5UGvuuAKkHnNQm9BniD+os5EhpEYCQs6J5UQdCbllFpU1Lu5r1J
5UAqa+aKoXMpmABh1ZPBcMP9uNv34IF0Kn8FttvebOA96ITfTcdIMMvd9IPtFN+o
cIsmnwZDuxgVP952bP38z+DbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCrdUJiRG
LE6r22vFexZ3teo7eGIwHwYDVR0jBBgwFoAUju12mE8jGqLHDymCN43Gndg9WFww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxQkU1LzNFRTc3RTZFMDAx
ODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FMSER5bUNONDNHbmRnOVdG
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvanUxMm1FOGpHcUxIRHltQ040M0duZGc5V0Z3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx
QkU1LzNFRTc3RTZFMDAxODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FM
SER5bUNONDNHbmRnOVdGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB3jphXiliqslNPqSFbMy5uIP7a9m8eKABWEN6fKihSXu7YACYk55gPRTFo7KA4
DmS1SdHu+lnzPnGj+7IFq/F1TJxjvQ+WpT+Nt7IJ/htCggJTAid0ODAbFO2L8JIp
/D/7XalSOBFbl89j1Gg2yy2/yNgY0TfhBhQX6kmpTz3Xlx/jbD6xnbuzRqDYvzV0
cuFjo9lA8oleD8eBzuXacjAgE1NAxjqImfdMTGTa5jTP+FLFmfTxjm8XGANc9RRV
/TKziSEaQUT6guO+IyBa/l8OMvLGcLYyhiB1KSmjgJnifPDy+0GkAbbggQ0jFLNN
AhceWmGeTg6fdOjNAud1q5mg
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:33:30 2026 by rpki-client