Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
File:                     jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json)
Hash identifier:          st6D0FGPXRgVMl7k75s7NA9hMB870gQlHuEzwDIjhN4=
Subject key identifier:   B2:36:00:04:AE:02:97:19:26:F9:64:1F:C7:CB:F6:B7:7C:27:C3:F4
Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
Certificate issuer:       /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
Certificate serial:       1B07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
Manifest number:          1AF9
Signing time:             Thu 26 Mar 2026 16:16:46 +0000
Manifest this update:     Thu 26 Mar 2026 16:16:45 +0000
Manifest next update:     Thu 02 Apr 2026 16:16:45 +0000
Files and hashes:         1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: P1qJTVM0HTuAjvMwoYPgrI9cfbqZSNzruF6/xUqBVSU=)
                          2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: Y2/DWOhiNLTIfd+BC0rA1wwGAZ/36dnSpHDJrho7PpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl
                          rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6919 (0x1b07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
        Validity
            Not Before: Mar 26 16:16:45 2026 GMT
            Not After : Apr  2 16:16:45 2026 GMT
        Subject: CN=69c55bee-35c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:66:47:ca:40:37:f4:10:d8:36:70:b1:1a:
                    92:03:c1:68:5b:32:73:b6:81:b0:c4:97:a5:18:44:
                    6c:1a:e8:6e:f1:a0:a5:e9:d7:3c:29:cb:9d:d9:bf:
                    36:35:4a:9e:d4:79:6b:94:ca:be:11:93:17:17:01:
                    d0:8a:f5:f0:4f:60:2b:c0:33:60:33:4d:61:a3:b0:
                    43:36:c1:c7:bf:4a:48:ab:dd:5c:2a:56:0d:52:82:
                    5b:b8:ce:c2:34:92:2d:e6:d1:c3:66:cb:2a:2a:2a:
                    46:4c:d5:48:a2:0b:6c:ce:13:5e:df:1b:83:ec:62:
                    c8:9d:b8:46:06:fe:72:ea:fb:b1:aa:7a:77:88:95:
                    8c:b4:41:9e:c4:7f:7c:bc:45:69:f2:f0:2e:9c:18:
                    be:ce:5b:9c:21:24:a3:86:21:db:b9:66:e3:8e:7c:
                    06:07:f0:ec:64:0d:53:d9:44:3a:94:41:af:d9:76:
                    71:95:cd:15:1e:16:94:b8:8c:b6:9e:5c:51:8d:a6:
                    cd:f4:39:83:53:a4:c9:91:53:f0:5b:c3:6a:21:13:
                    f4:e1:63:14:f1:52:a7:a0:36:64:60:52:18:8a:af:
                    10:78:dc:ac:0d:73:58:49:ec:80:56:f4:e5:0a:e7:
                    d7:c4:98:bf:a3:33:31:14:6e:3c:55:37:44:bb:a4:
                    a7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:00:04:AE:02:97:19:26:F9:64:1F:C7:CB:F6:B7:7C:27:C3:F4
            X509v3 Authority Key Identifier:
                keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:2e:db:79:7a:34:36:91:c6:bb:f4:db:42:e1:4b:8a:8c:
         af:2f:10:de:cb:80:44:7f:bc:84:28:e4:30:fc:49:a6:bc:e6:
         81:4b:5a:5f:07:3c:10:47:a4:40:59:fe:b1:a3:b7:e9:f2:ae:
         cb:91:35:f1:05:6c:c3:7c:17:09:a1:1b:0e:fd:51:63:ba:64:
         cf:81:b3:6d:5b:e7:9f:66:95:19:67:a3:f7:ca:37:0b:e2:dc:
         d3:02:76:8c:3c:1c:03:e1:5c:4c:2d:74:4f:b6:f3:04:92:67:
         fb:b8:f2:a3:5b:0e:95:a8:8f:2f:49:06:a9:35:86:1c:32:83:
         7a:ed:f9:15:b5:06:a7:54:5f:21:e8:eb:a7:89:0e:cc:de:ba:
         a9:a0:66:55:48:a2:a3:1f:23:11:73:23:9a:6a:81:a2:1e:c6:
         50:57:7a:65:14:72:b9:f3:42:f4:e3:b2:f1:26:12:aa:f1:bc:
         7b:d5:0e:61:30:93:98:76:8b:f9:9b:be:0c:e1:81:47:49:2f:
         03:c9:ee:48:46:d4:bb:14:bd:30:33:fc:43:f0:df:b4:b6:d9:
         6a:4e:ba:84:49:1a:6d:6c:e0:b2:d5:70:c4:10:4c:11:71:06:
         1d:60:8a:32:07:59:09:72:4d:ea:62:fa:ba:68:95:ea:b1:9f:
         5e:a5:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:33:06 2026 by rpki-client