Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
File:                     jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json)
Hash identifier:          MwDFhSJLVjkipbcREAS8uCKE+NDIyXx6x+6oSj6/yqg=
Subject key identifier:   FA:C0:AC:44:24:43:69:D0:65:0B:37:54:5D:3B:00:33:31:D1:4E:95
Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
Certificate issuer:       /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Certificate serial:       047A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
Manifest number:          0474
Signing time:             Tue 24 Mar 2026 23:45:29 +0000
Manifest this update:     Tue 24 Mar 2026 23:45:29 +0000
Manifest next update:     Tue 31 Mar 2026 23:45:29 +0000
Files and hashes:         1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: LTQvIDLAXP5y2aWzVZ/zGj+G6iSoBYLHzQv+5XBh5Zk=)
                          2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: ISYvVSKYiERQAYBzI/jF083BOrfksWj3XaooDHkbCsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
                          rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
        Validity
            Not Before: Mar 24 23:45:29 2026 GMT
            Not After : Mar 31 23:45:29 2026 GMT
        Subject: CN=69c32219-9f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:71:c0:0f:83:44:be:d0:08:ea:ed:53:dc:91:
                    c4:13:20:74:b7:17:a8:7b:bb:26:79:34:ca:19:a6:
                    e2:a9:4f:e5:ce:9b:95:82:06:d9:30:e8:3f:7b:01:
                    61:6c:91:c0:42:59:bd:5c:81:b1:df:bb:d8:ea:df:
                    b7:1d:da:7b:35:ea:1c:b5:f5:af:23:36:0f:da:dc:
                    73:f2:88:ef:4f:7e:fa:ba:d2:50:f6:fa:f2:b1:b4:
                    5e:a0:e5:f8:2b:2c:22:b2:fc:8b:bd:f0:aa:62:8c:
                    08:f0:65:58:01:8d:cd:26:7c:b8:7d:f4:73:23:93:
                    73:27:45:74:1d:a9:e5:b7:1c:31:b5:81:5a:d1:fb:
                    46:c9:3a:fc:e0:aa:d9:80:53:01:0a:5a:bb:4b:68:
                    d0:9f:88:12:bc:59:64:8e:bc:f0:0d:2c:73:a3:17:
                    3b:af:83:d3:58:a8:cb:21:89:32:7a:70:2e:26:d8:
                    a1:2a:aa:bb:50:c5:c0:e3:9e:ed:c0:2e:4e:d5:30:
                    7a:23:32:e1:eb:78:2b:eb:81:cf:68:ed:95:d7:e5:
                    69:fc:e9:f1:94:5e:20:ce:76:8b:e7:04:c4:a4:d7:
                    8a:8d:05:79:a4:46:b3:ef:ef:75:ac:fd:82:b1:3f:
                    c4:6e:c3:ae:ac:01:fb:cf:5f:b9:fa:c2:ff:d5:10:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C0:AC:44:24:43:69:D0:65:0B:37:54:5D:3B:00:33:31:D1:4E:95
            X509v3 Authority Key Identifier:
                keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:eb:c1:0d:b9:fc:01:8c:44:1a:cc:85:73:92:21:92:02:
         b8:98:62:0c:a1:16:90:7b:a6:84:86:53:80:5e:20:16:18:61:
         d6:8c:1e:49:95:68:f4:20:08:7d:83:c3:fc:b4:b3:eb:69:ad:
         c2:bc:49:d8:03:95:56:e4:69:40:36:1d:3c:2d:27:47:f9:da:
         18:93:a7:8b:00:73:10:44:a0:af:d6:45:ff:56:67:56:cb:a1:
         c7:f5:45:ad:08:d7:c4:8a:f4:95:a8:27:b9:b7:61:c3:73:8b:
         5f:ef:61:10:8f:7d:9a:77:74:98:28:c9:1b:b0:e1:39:cd:d7:
         2d:8e:d8:08:d2:21:0a:c3:b3:9c:0c:47:ec:a0:70:69:15:b7:
         5d:cb:52:4c:2e:c7:b5:bd:25:90:c7:0d:cf:02:bc:cc:bd:cf:
         d2:ff:75:e7:55:9f:52:7c:7d:aa:2b:aa:58:43:cc:4f:0a:74:
         98:67:1f:9a:e3:58:4b:e3:69:f8:3f:53:49:cc:bd:dd:40:70:
         d9:5b:dd:12:21:98:ce:88:a6:be:98:ed:d6:a8:8b:e3:f0:1b:
         e7:00:a8:30:0e:0d:00:7b:cd:0f:6b:67:05:01:21:7f:9d:f9:
         22:e4:d0:1e:70:a8:3b:85:b2:84:41:84:fb:aa:2f:7a:0d:8c:
         59:38:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:58 2026 by rpki-client