Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
File:                     J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json)
Hash identifier:          0Vqx/rx24sWP5+Kn/yO5uVmQpFXa4kJEyubEsUSb2XM=
Subject key identifier:   47:E3:2A:30:94:21:1F:CD:CC:A6:1B:BB:C9:52:C5:27:59:56:D9:59
Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB
Certificate issuer:       /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
Certificate serial:       06F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
Manifest number:          06F1
Signing time:             Tue 24 Mar 2026 21:47:28 +0000
Manifest this update:     Tue 24 Mar 2026 21:47:28 +0000
Manifest next update:     Tue 31 Mar 2026 21:47:28 +0000
Files and hashes:         1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: Rm8rcleFBL6OBBpwQ9+hZn9LFoN1S3aByKC+IDOalTY=)
                          2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: NuZ0V56C6Hli1WMtvi5fxImBApK6WDo7ku/N8isp6hQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl
                          rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785 (0x6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189261, serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
        Validity
            Not Before: Mar 24 21:47:28 2026 GMT
            Not After : Mar 31 21:47:28 2026 GMT
        Subject: CN=69c30670-6363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:50:72:b0:24:d4:66:ea:83:66:60:ad:86:
                    53:bb:91:bf:26:d6:3c:9a:ec:bd:d4:0e:89:67:21:
                    64:58:c5:ce:55:a9:d7:60:5d:65:39:cd:f6:d2:2a:
                    09:56:b9:1c:94:63:89:27:ef:69:68:e0:b3:08:8a:
                    03:cd:69:7d:74:84:39:af:a9:b8:92:9f:4c:80:5c:
                    4a:9b:11:4b:cd:22:99:7d:0f:1e:9b:b7:f0:49:03:
                    b1:c8:bc:ca:8e:ec:40:c0:82:26:a6:dd:b9:f5:9c:
                    4a:84:5b:3b:5a:11:a3:d4:67:95:24:18:00:02:bd:
                    4f:29:52:f9:87:e6:9d:82:fd:f8:c7:21:8a:b3:2c:
                    99:15:a2:2f:34:95:67:2a:51:d6:75:0f:26:86:d6:
                    29:25:d3:0b:f3:d0:f2:20:cd:a2:aa:6c:43:a8:3c:
                    85:e2:0d:fd:50:17:f9:01:3a:8c:9d:7d:2c:41:1a:
                    d2:2b:82:07:53:24:61:2c:bd:0b:18:7b:01:13:58:
                    ee:12:87:e7:43:67:48:2c:4e:5d:11:5c:1f:32:f8:
                    b4:09:a3:af:ec:30:fa:93:52:57:21:28:37:e1:31:
                    fa:3d:21:16:ad:fc:57:04:73:65:a0:6e:9b:c7:41:
                    5e:f2:48:88:b5:85:09:1d:e5:c7:b3:4c:bf:81:a3:
                    06:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E3:2A:30:94:21:1F:CD:CC:A6:1B:BB:C9:52:C5:27:59:56:D9:59
            X509v3 Authority Key Identifier:
                keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f4:35:9c:83:42:1b:ae:64:f4:3c:2c:5d:c6:12:fc:37:75:
         d4:e8:13:42:a4:c0:58:10:2f:8e:fe:65:39:6f:f2:9a:8c:10:
         72:3c:c3:56:f0:f9:d5:a2:92:1b:f0:0c:27:63:f2:dc:91:c9:
         5c:ea:ea:d4:18:87:4a:9c:f1:e4:4e:1b:c2:38:9b:fe:1e:e8:
         d6:e5:03:46:c4:a6:1a:b6:62:79:3b:2b:a8:90:2d:f2:e0:af:
         45:72:61:fa:52:59:84:7c:7e:a4:71:85:c5:48:cc:93:90:a5:
         d4:28:c0:45:10:ed:a8:85:f8:35:5a:64:64:b0:c8:37:00:0d:
         29:49:42:7f:ec:a2:a2:39:d1:85:58:e5:0c:8b:93:78:9e:77:
         81:a4:fd:89:c8:4e:e4:3e:64:59:a0:c2:ca:47:24:db:93:dc:
         ab:bc:04:47:99:dd:d1:84:a9:b9:98:3e:2f:ee:9c:2b:eb:de:
         48:28:0e:97:59:c8:d3:48:79:92:e7:67:62:65:f8:7d:e8:9d:
         cd:22:fd:99:dd:81:81:45:a5:8f:b8:b9:40:6b:78:c7:ba:d7:
         c6:bc:f3:98:db:33:8d:12:1a:dd:fc:c3:f0:7f:f4:48:48:e6:
         67:c5:a0:c3:c0:6c:b1:a1:a9:29:76:d1:74:3a:93:9c:74:04:
         cd:89:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:23 2026 by rpki-client