Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
File:                     J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json)
Hash identifier:          2YMcFMyJ9RxkuIa4n6Yqf6Y+5xHdoD4bQrcgtZE7+aQ=
Subject key identifier:   E2:AD:B1:80:08:B0:C8:BA:26:4B:52:5C:2B:48:47:35:40:FB:80:C2
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Certificate issuer:       /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial:       3553
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
Manifest number:          3549
Signing time:             Tue 12 May 2026 14:22:43 +0000
Manifest this update:     Tue 12 May 2026 14:22:43 +0000
Manifest next update:     Tue 19 May 2026 14:22:43 +0000
Files and hashes:         1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: ijFZWRydVrST4DLtXJgQJtkNQsGs+1auaT7D7qvLbhE=)
                          2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 2zWATfmM8von1Mw8uXlPyMdmDI3bUKTZAgUpWfoAgyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13651 (0x3553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
        Validity
            Not Before: May 12 14:22:43 2026 GMT
            Not After : May 19 14:22:43 2026 GMT
        Subject: CN=6a0337b3-cfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:7a:6f:6f:b3:52:3e:30:6a:40:be:55:08:
                    78:e8:9c:4b:0d:25:d0:fd:de:e6:0c:dd:8e:ed:69:
                    26:9b:18:54:2b:77:dd:c8:6e:12:f5:74:5e:3b:c4:
                    a1:cb:49:21:e5:1a:db:70:6c:da:57:0a:fc:12:96:
                    c5:df:8d:3a:62:2d:05:7d:fc:41:1b:1d:46:c4:ad:
                    2e:6d:0f:d5:03:4b:45:19:66:58:19:a1:d8:60:bb:
                    f5:88:19:47:27:1f:03:61:65:18:fe:79:ea:20:ce:
                    5a:ba:96:56:3d:ea:e2:d8:ad:73:f2:ab:37:db:35:
                    e7:db:43:ec:4e:95:e9:52:f4:23:37:c0:56:70:bc:
                    d4:01:d0:cd:1a:bc:bd:94:5d:59:bb:db:44:0a:49:
                    f0:ca:64:96:44:60:90:51:f2:de:7e:eb:be:86:b4:
                    61:30:4b:cb:2c:b4:f5:9f:9b:a6:8f:52:73:f7:bb:
                    2e:82:5d:5a:fe:a4:09:b8:ad:17:fa:83:0f:69:c9:
                    a9:cb:94:74:1b:98:23:6d:83:c7:5f:28:7d:88:60:
                    a3:fe:96:f0:05:7d:97:9e:be:07:32:24:91:4c:03:
                    e0:83:9d:5d:9b:49:4a:d2:ac:33:e0:b4:1c:6d:eb:
                    1a:89:e7:36:29:3b:19:cf:8f:fd:82:a9:fd:bb:cf:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AD:B1:80:08:B0:C8:BA:26:4B:52:5C:2B:48:47:35:40:FB:80:C2
            X509v3 Authority Key Identifier:
                keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6d:6f:87:f4:40:85:4a:f2:69:54:44:38:cc:e8:2f:04:1b:
         74:73:e0:ec:b1:27:41:44:71:25:0a:17:19:76:be:7e:f4:b5:
         e1:56:b7:15:60:2f:e3:fc:33:1c:d2:b7:8b:12:ee:06:75:1c:
         f3:45:16:99:f4:09:39:2c:08:82:33:f1:65:f3:ad:b4:92:77:
         f2:61:eb:b1:3c:86:c2:66:d4:bf:8a:89:81:f4:7b:b1:ee:d6:
         0e:ef:73:2a:91:26:62:ba:3d:87:c4:d1:04:dc:3d:1b:d8:01:
         38:17:65:07:3d:82:0a:4a:78:0f:b0:ac:fa:90:68:66:26:af:
         f5:91:a2:86:1e:49:51:7a:c8:d6:32:5c:d2:2c:bd:12:c0:a1:
         e9:b0:16:70:18:55:c5:3c:8d:d1:ca:a3:bc:d1:e8:df:1c:b0:
         06:50:9f:3a:cd:8a:41:28:db:a4:a3:8a:99:d7:43:b0:e3:43:
         2f:ea:30:cf:db:0e:e7:cb:5f:88:06:5e:b6:9f:f6:69:d8:b2:
         6f:6d:f8:cf:89:0d:f6:39:64:82:31:f6:15:37:6d:fb:2b:21:
         92:6a:e8:1e:16:11:59:4e:e9:ab:5f:44:60:13:a9:74:15:a7:
         46:c5:91:2b:9d:36:26:e0:93:dc:aa:96:0e:15:ce:20:e2:59:
         64:77:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:15 2026 by rpki-client