Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
File:                     CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json)
Hash identifier:          ve5N/sQNl8vII+zmlhRZjOWv10NfVvEkRuxcj0IQmaU=
Subject key identifier:   38:2C:3E:C4:F3:AA:5D:76:12:62:5C:3D:18:0D:B3:BE:69:D5:D4:EB
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0B0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
Manifest number:          0AE4
Signing time:             Tue 12 May 2026 19:29:43 +0000
Manifest this update:     Tue 12 May 2026 19:29:42 +0000
Manifest next update:     Tue 19 May 2026 19:29:42 +0000
Files and hashes:         1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: CSSI6+wk8XT71BrfxJKf4W5h7CbH6ibb53WHp8o/DiM=)
                          2: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: bueneiv4zkp1hJi+0Ko6hSLY2lsE8PKm4m/3t84VQKA=)
                          3: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: vfLHTt29kOm1Z7Kfy6jmmNrQQkJF27JhRO5eWjZJVw0=)
                          4: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: AzvWvbrPiuhKiBHdJfjBxy5Ra/OUuOns6Vjq7S/FHI8=)
                          5: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: Y5wKsH1cPWNKRGL2sR47JtUL6S3wrlsTRofvAYJPq3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2828 (0xb0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: May 12 19:29:42 2026 GMT
            Not After : May 19 19:29:42 2026 GMT
        Subject: CN=6a037fa6-4365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:80:1b:f7:c7:49:b2:c2:64:fe:c9:06:5b:
                    43:ff:75:4c:9a:3d:18:28:7e:37:64:96:dc:71:4a:
                    cd:46:72:71:10:c9:b2:99:6e:fe:b7:02:2d:f7:27:
                    1c:ca:97:6f:df:f2:5c:00:ce:c9:89:f6:3f:35:ed:
                    50:bc:79:9d:94:26:67:5d:d9:ae:d2:60:db:e0:64:
                    52:66:7d:ec:99:32:14:73:3d:3d:b7:38:cd:d4:80:
                    b9:24:98:cd:ed:e4:da:f3:38:8a:c0:b2:e7:4c:92:
                    7e:94:27:d9:26:52:78:f5:b0:cf:a0:8d:23:70:7a:
                    29:46:41:1f:8f:22:47:d5:2a:51:22:6c:06:86:0e:
                    c0:8c:5b:6d:40:9c:40:f9:24:52:79:bb:e0:42:40:
                    be:f9:b7:39:a3:02:d9:02:cd:4d:27:2f:83:5c:10:
                    7a:96:04:9b:fe:28:3d:1c:ff:69:95:34:23:94:eb:
                    4e:79:07:5a:4b:f7:6f:26:99:b9:76:d6:c9:f4:55:
                    44:e8:b4:09:a7:14:78:e0:1a:0a:01:89:8e:2c:68:
                    ed:ff:43:2a:c3:10:93:91:c5:65:51:c6:53:a8:08:
                    3b:f0:1e:dd:e9:d1:08:d0:f3:83:d9:f5:c4:9e:c6:
                    6c:6e:06:65:c5:9e:53:1e:18:03:6b:df:40:32:6b:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2C:3E:C4:F3:AA:5D:76:12:62:5C:3D:18:0D:B3:BE:69:D5:D4:EB
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:07:98:f2:0e:b7:c6:35:7c:b3:7b:9f:df:d1:cb:5b:40:67:
         67:43:6b:98:37:d8:c5:7e:35:94:20:fb:ef:1f:1b:ff:d3:ba:
         7f:4e:d5:0e:26:5d:b6:85:96:58:37:8e:61:15:0d:61:af:ae:
         84:a0:a7:d4:de:fe:ce:c6:d7:31:89:03:8a:2b:d4:a5:23:ac:
         00:69:52:dd:a0:80:8d:53:3f:09:0a:3e:60:c5:89:d8:45:d2:
         05:e9:01:e8:e0:3f:ed:45:da:15:e5:8d:5f:92:ea:a6:9d:e5:
         9b:16:ac:6c:37:e7:53:a6:45:bd:1a:ba:2d:6d:f8:b3:1b:4b:
         d2:5d:48:d0:80:73:2e:fa:19:cb:4d:8f:37:e3:08:6d:bf:08:
         b8:64:5f:88:7c:ae:6f:ac:ff:bf:2d:9f:1f:fb:99:82:95:bd:
         d1:d4:36:5f:b2:76:23:d4:a1:57:61:f2:5d:97:64:03:54:aa:
         c4:9c:bb:fd:b2:0e:df:6a:75:f1:f9:0e:0a:73:bd:e2:20:36:
         ec:7e:dd:5f:7f:7b:1e:28:77:6e:cf:d0:4a:af:a2:dc:90:a5:
         51:7a:28:45:5c:af:e8:7e:b7:c3:3a:aa:43:51:58:b4:d3:f2:
         77:65:c4:de:6c:3a:ec:cb:4f:55:4e:f8:f9:63:11:cc:00:0b:
         07:a2:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:29 2026 by rpki-client