Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File:                     jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier:          u+9IREFmGuF7d/E6nctgZL9NNPirXe5oHXU5vths0qE=
Subject key identifier:   22:18:6A:74:0C:88:AC:48:82:C4:D0:29:4B:62:18:00:88:05:21:93
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number:          019A
Signing time:             Fri 27 Mar 2026 03:45:36 +0000
Manifest this update:     Fri 27 Mar 2026 03:45:36 +0000
Manifest next update:     Fri 03 Apr 2026 03:45:36 +0000
Files and hashes:         1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: +xi+eEtPw+C4YK4aSDoXe+397ICIYy5UGTBh8kxITIE=)
                          2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: fakttJYQzarYugL3HPUrscxEzZ0ExJMcVxvX8m8OadA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: Mar 27 03:45:36 2026 GMT
            Not After : Apr  3 03:45:36 2026 GMT
        Subject: CN=69c5fd60-c7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:69:4a:3b:4b:73:70:b7:ef:c6:05:c8:14:
                    5c:1f:31:19:c2:38:af:fd:d8:aa:8d:88:07:50:e2:
                    8a:47:34:c8:f1:05:78:2c:18:cc:9b:8b:0a:c7:3b:
                    1a:a4:35:f6:f4:24:66:8d:5e:85:a6:79:ef:f7:85:
                    5d:31:38:92:2b:76:3f:62:73:a1:a4:99:d6:cb:6a:
                    8d:c4:74:3e:bf:67:0b:33:09:d6:6c:41:81:c8:24:
                    f4:59:35:e6:4d:cd:92:0e:9b:06:08:5c:98:2a:2e:
                    64:41:74:40:19:aa:ec:9f:95:11:8b:fe:e7:b9:74:
                    0e:37:e2:f3:b8:a6:1a:87:c8:b7:22:02:97:b3:18:
                    4b:e2:78:2b:e2:a9:d3:ef:c8:da:3b:84:4f:b7:30:
                    48:2b:f6:df:87:e2:57:b6:58:85:1d:ba:3c:37:50:
                    03:7b:92:ed:ef:90:85:e9:02:99:e9:7f:e9:dd:48:
                    43:7e:00:28:06:ab:dc:10:ae:0c:80:a8:79:9e:25:
                    55:8f:f1:46:59:82:8a:64:d6:20:20:c8:b2:08:35:
                    c0:4e:61:68:6b:71:e7:35:49:ee:82:11:0b:7d:89:
                    e1:87:fe:d8:12:91:88:99:bc:6a:14:de:9f:37:eb:
                    6a:5d:61:fa:8f:76:b0:e2:c0:63:cd:fc:af:f5:1e:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:6A:74:0C:88:AC:48:82:C4:D0:29:4B:62:18:00:88:05:21:93
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:62:7d:d5:7f:a6:17:bb:d6:57:bb:ec:17:5e:1c:34:ef:60:
         a8:f8:0b:0a:e2:4f:df:8e:d1:41:b2:df:3e:0c:26:ec:e3:b4:
         a2:5b:53:2d:1d:c2:8c:00:ac:12:50:e2:ea:e9:e3:53:07:e1:
         bb:b5:89:85:ad:0c:9c:09:5c:ed:34:eb:a6:65:64:da:65:87:
         b0:e5:ba:03:be:f3:22:aa:c5:03:f9:b9:64:3f:31:86:6b:fe:
         01:83:86:59:68:5a:41:74:b9:2b:7a:ac:c4:e6:de:06:5d:62:
         82:72:ea:4c:cd:b2:07:01:33:be:a8:18:7c:cc:c8:20:3e:0d:
         71:07:fa:71:18:9f:6e:6b:77:82:25:4a:dc:e9:83:3b:ac:b4:
         1b:52:50:2a:af:d5:e2:bf:fb:7d:b1:1e:57:29:65:57:25:95:
         3e:7e:6c:84:d3:a5:ad:a6:cb:72:bb:6d:27:97:3a:f2:0d:bc:
         8c:89:00:8d:41:61:23:d8:08:89:f8:a2:40:99:6f:d5:e8:8c:
         72:0b:c1:00:be:ec:80:73:75:37:1f:68:c7:a3:bf:fd:db:3d:
         9e:5c:53:00:ed:f6:63:92:ce:d9:03:fd:8e:da:ba:04:57:0d:
         c4:f8:81:32:29:40:40:98:4e:08:11:fb:0d:1e:2a:38:fd:de:
         37:1b:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:28:54 2026 by rpki-client