Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File:                     JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier:          BHDe2tcI/uW/yZkKvrptVHClVfLWhXoox9W+w0t0GB8=
Subject key identifier:   37:0F:70:A4:6A:61:CF:3E:71:7F:37:4C:B2:75:C4:B7:A0:9C:83:F9
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer:       /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number:          3B
Signing time:             Mon 11 May 2026 08:48:10 +0000
Manifest this update:     Mon 11 May 2026 08:48:09 +0000
Manifest next update:     Mon 18 May 2026 08:48:09 +0000
Files and hashes:         1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: EvnoqFOEkFkWZl5yrpl0HsJdvz0vJayIZqs1Eu126Dk=)
                          2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: d6S2IX4DR/rLbqbsWRy4XlJUKZ6LC3VVHK1EodAZfjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
        Validity
            Not Before: May 11 08:48:09 2026 GMT
            Not After : May 18 08:48:09 2026 GMT
        Subject: CN=6a0197ca-badd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:8c:35:41:b7:aa:fa:98:c1:07:70:0a:bf:
                    42:fd:f0:5f:24:40:64:9e:7c:cc:3e:d1:8d:f4:46:
                    e7:c5:ec:26:df:f9:ea:c5:c8:a0:d9:87:84:e1:8e:
                    9d:57:97:fe:01:fd:d3:3f:7b:f8:0b:b2:c1:36:b8:
                    79:cd:7d:30:ff:34:c1:d9:b6:18:cf:d6:63:af:ed:
                    8f:c0:3a:8b:0b:da:7e:12:19:95:13:24:2d:cd:25:
                    e7:e3:03:f7:0b:d5:4f:68:68:b3:5f:cf:9c:d4:79:
                    03:6f:d2:c5:00:92:d3:f0:e4:07:ab:c1:b3:0d:50:
                    10:c0:02:9f:f7:a5:f3:8b:7f:e9:74:b6:6d:41:6c:
                    bd:ab:ba:f1:82:ac:eb:bf:94:50:87:3e:86:72:00:
                    91:7d:d0:df:5c:be:5d:2f:37:33:9a:61:47:8b:b7:
                    95:ce:3a:a0:64:5a:ff:6f:26:76:41:92:ec:5e:2a:
                    e3:76:8d:ac:85:58:3a:6d:34:67:e7:c7:c1:42:5f:
                    fa:61:1c:66:c2:df:f2:4e:93:a2:04:c9:ff:7e:62:
                    10:c3:c4:b7:bc:96:a2:d8:96:42:90:78:51:d6:ff:
                    1b:6d:d6:54:8e:6c:84:f7:94:02:10:73:9e:a3:e1:
                    cd:00:42:1f:68:b5:4d:dd:be:a7:99:d5:b0:8d:ef:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0F:70:A4:6A:61:CF:3E:71:7F:37:4C:B2:75:C4:B7:A0:9C:83:F9
            X509v3 Authority Key Identifier:
                keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:65:75:c5:2a:f7:4d:be:88:5d:35:25:4a:03:f6:6a:c7:74:
         fc:30:08:65:17:d1:d8:04:1f:a5:86:bb:0b:a9:f7:90:f6:19:
         e1:d0:57:47:01:e6:79:12:76:14:35:97:59:52:38:03:a1:5c:
         17:03:3b:d8:4f:c6:e7:49:e2:32:70:2c:f3:b4:72:4b:d5:17:
         57:40:6e:70:69:73:09:e8:fb:21:d7:85:cf:66:e8:0c:fe:87:
         e1:23:1b:73:bb:25:60:66:f4:56:e6:7d:ef:88:cb:a1:61:51:
         a7:9c:75:04:fe:0b:bb:4f:02:90:e3:6e:c8:a8:c1:bc:49:a4:
         94:c0:b5:45:d2:6b:95:dd:7e:58:2f:ef:a9:2d:a6:20:36:70:
         d8:a0:54:c2:13:48:7a:6a:2d:1d:17:11:17:6b:58:1a:e7:df:
         f5:55:39:fe:bb:5f:53:6d:be:fb:2f:d0:5c:27:fd:6b:86:ac:
         7f:8a:db:21:12:b1:b8:02:4f:ba:d6:37:a5:cc:9e:e9:89:50:
         ac:8c:03:f7:f1:09:3f:d5:55:f3:c8:3e:f5:b7:60:24:dd:e2:
         c0:f7:98:39:33:24:89:b5:0c:21:6b:37:46:14:96:c1:c9:11:
         4c:01:bc:38:f4:e9:11:e9:57:73:7f:30:7b:14:4d:ab:b8:a2:
         1a:fe:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:22 2026 by rpki-client