Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File:                     jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier:          jcWgdBW7X5yNXghhdqPb+7Mi3R3rJanMPYpbse8JbJM=
Subject key identifier:   2F:8B:BD:15:4C:4C:46:F1:29:96:95:74:3D:F8:3C:3C:1F:FD:31:0C
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer:       /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial:       09E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number:          09D1
Signing time:             Tue 12 May 2026 19:57:48 +0000
Manifest this update:     Tue 12 May 2026 19:57:48 +0000
Manifest next update:     Tue 19 May 2026 19:57:48 +0000
Files and hashes:         1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: zuCDEMy0BPyKEPgB//R1IgEwC6qMaxcUkj0Rw6eWYl8=)
                          2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2535 (0x9e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
        Validity
            Not Before: May 12 19:57:48 2026 GMT
            Not After : May 19 19:57:48 2026 GMT
        Subject: CN=6a03863c-eea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:5e:23:ff:6c:9b:38:68:92:43:3e:5c:25:
                    37:02:01:9b:54:de:fd:d5:f4:c9:bc:6d:6d:8c:e7:
                    c6:de:14:97:45:1b:d0:26:84:98:5e:fd:fd:d3:a3:
                    33:8d:7d:2c:b0:0c:ef:3c:06:7a:55:04:bf:1c:20:
                    68:51:45:a2:db:59:09:a1:8e:51:3b:1d:1a:87:da:
                    b2:99:6d:67:ee:b1:0c:0b:d3:9e:a1:3f:e4:20:21:
                    95:ac:6c:02:10:14:00:58:d8:c0:a5:6f:3f:00:68:
                    e3:e8:80:dd:c3:46:c8:4b:e8:d0:d8:a3:1a:b4:9e:
                    4c:65:80:30:34:a8:79:01:0b:15:69:2d:4c:06:68:
                    20:0f:88:71:de:5a:d9:30:dc:2d:31:d0:6e:19:b1:
                    37:f7:13:25:60:a4:ee:46:98:21:fa:53:26:8e:71:
                    20:90:71:7c:5d:8c:cb:7a:33:61:68:dd:96:38:7c:
                    06:9c:21:b7:85:4b:f6:4f:54:90:2e:28:17:49:99:
                    6a:ee:d9:93:f3:d5:9a:6b:09:70:77:4d:a4:8a:ad:
                    84:c7:bf:f7:fe:27:0c:f6:a9:d1:5a:32:6f:c5:8c:
                    32:e9:de:e1:76:17:68:77:88:4c:d9:8b:a7:37:89:
                    d0:2d:48:56:ea:49:1e:80:9b:d1:ed:ed:97:e3:7a:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8B:BD:15:4C:4C:46:F1:29:96:95:74:3D:F8:3C:3C:1F:FD:31:0C
            X509v3 Authority Key Identifier:
                keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:38:1d:d4:95:04:57:9f:93:99:75:04:59:9c:56:49:26:
         48:f9:37:83:01:33:eb:2e:49:50:02:1b:51:60:f3:86:fb:f2:
         de:4a:16:ca:35:c9:1a:b8:22:88:b1:14:b4:2a:ba:67:61:61:
         4b:ff:50:af:06:38:e2:fa:13:43:b8:0c:de:79:c7:63:a8:81:
         ae:93:f6:a5:5c:b8:39:41:c4:29:ec:25:1a:63:bb:70:e4:be:
         de:28:07:21:97:5e:63:3b:50:61:10:12:9f:6e:8d:16:26:4f:
         4a:4f:4a:21:06:a8:d7:dd:f9:c7:f7:75:14:ed:10:52:a2:25:
         58:97:63:a4:f8:30:76:7f:2d:65:fe:67:ee:f0:72:0c:67:ab:
         48:32:6b:45:a4:73:b7:7f:e6:1a:d3:ca:ff:92:c7:3a:9f:8b:
         6e:24:a2:db:5b:b1:b7:95:b0:1c:72:34:48:37:0f:43:af:48:
         51:a0:37:74:23:85:70:fb:56:73:79:0c:bd:ee:05:df:bd:94:
         64:f1:f4:73:ae:7d:56:a3:21:8e:72:9a:e5:08:4f:92:3c:a5:
         39:e7:6d:b1:22:f6:78:0f:30:31:20:c8:c0:c4:31:7d:09:5f:
         f0:a3:5d:b7:75:ac:a6:6c:b5:fb:2e:87:27:1c:d0:ea:7d:ab:
         40:ba:86:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:04:49 2026 by rpki-client