Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File:                     JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier:          9VSTlRfH0vzPgD20LMNO1/V0tO/6ksX5zR5U/NPKtSg=
Subject key identifier:   D1:E7:65:43:1D:75:CE:8F:E0:F6:20:62:B7:A1:D7:98:3E:6A:C7:17
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       2FCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number:          2FB6
Signing time:             Sat 18 Apr 2026 15:25:34 +0000
Manifest this update:     Sat 18 Apr 2026 15:25:34 +0000
Manifest next update:     Sat 25 Apr 2026 15:25:34 +0000
Files and hashes:         1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: jNjG8inmdpM+saccgA21yUSQqsJlLU3lHjJHPmIdy+c=)
                          2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: qMI0+qSJUDBOM2XBKVGT0iY5F9iduz0xMqXjCiho+4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 15:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12236 (0x2fcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Apr 18 15:25:34 2026 GMT
            Not After : Apr 25 15:25:34 2026 GMT
        Subject: CN=69e3a26e-f280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:a6:36:0a:22:35:cf:00:dd:60:a9:be:68:
                    e4:52:51:90:12:85:61:7e:57:63:cb:02:84:da:4a:
                    98:4b:9e:b5:73:f5:04:0c:eb:e9:72:da:bd:b8:66:
                    aa:44:e7:cb:28:2f:71:dd:c3:3b:12:0d:2b:90:36:
                    84:0d:f9:5d:a7:ca:e0:4e:df:79:d4:5a:43:37:f4:
                    30:d1:bc:ee:6d:44:aa:ae:01:d7:21:5b:bb:13:a9:
                    17:46:56:c4:92:63:df:35:8d:77:22:49:95:ca:b3:
                    d1:dc:94:28:82:c8:42:ec:83:e8:74:68:67:22:7c:
                    14:b5:6b:30:7d:1f:ed:dd:e6:1c:e8:79:27:34:8f:
                    5d:6e:b8:70:df:39:b8:02:a3:cc:7b:2a:45:ee:1d:
                    ca:4b:df:77:3a:d1:64:77:f5:79:9f:bd:8e:a8:89:
                    a9:d8:21:b2:9d:fd:be:10:ff:60:3f:7a:11:6d:99:
                    df:b0:1d:34:2c:77:03:7d:b6:4c:df:3f:3c:c4:77:
                    41:5e:b0:eb:75:3b:e4:a9:39:95:c1:89:78:7e:cc:
                    9b:cc:3b:5e:75:56:f6:e8:ca:75:33:65:f0:9d:b3:
                    a4:be:44:f0:22:aa:03:0f:3d:4e:ac:90:fe:5e:7f:
                    e9:d0:91:00:33:9b:73:6d:27:8a:72:8b:27:86:fb:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E7:65:43:1D:75:CE:8F:E0:F6:20:62:B7:A1:D7:98:3E:6A:C7:17
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7d:e2:55:63:b6:98:bd:31:43:20:49:25:0a:52:00:8f:fa:
         bd:f0:cf:8b:83:75:44:6d:09:09:2b:80:b7:71:4a:9c:d9:b2:
         57:f6:85:c6:ee:29:c2:f7:eb:4e:cc:a2:a9:68:71:18:35:a4:
         d7:6b:30:3c:41:03:f6:db:d1:fb:de:2c:4e:13:8c:c5:a4:da:
         1b:9c:c1:75:bf:c9:63:70:00:92:26:19:a9:44:2c:4c:a6:5c:
         46:cc:64:d1:a2:a5:4b:e1:28:ef:67:82:c8:9d:85:f0:c7:15:
         f3:41:23:43:e9:60:91:c3:eb:80:da:21:dd:6a:9f:06:93:35:
         48:62:c1:1f:a9:3d:47:c9:73:80:65:7f:9d:99:59:ac:16:58:
         cd:fa:7d:1b:bc:32:bb:92:b5:f6:5e:8f:3c:e5:41:cb:a0:1b:
         f1:b7:7e:e6:74:86:d3:a5:9a:18:b7:15:27:a7:ea:dd:17:69:
         bc:f5:f8:ad:6f:83:95:2c:ac:49:44:73:17:95:08:d4:e7:3c:
         01:97:9f:da:44:25:bd:08:c7:c6:92:2a:e7:5e:35:81:8d:71:
         3c:bd:46:72:4e:74:90:28:41:35:92:79:67:3a:09:5a:f1:cd:
         24:1d:78:d4:e0:ac:2e:60:69:75:ea:21:b5:6a:f2:39:3d:b1:
         25:f6:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:59:57 2026 by rpki-client