Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File:                     JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier:          6n1q7IBSSvL+Wgt654HSqBwEsFnQBlYZZ659Nml26qU=
Subject key identifier:   8C:0F:B6:28:20:84:03:94:10:BC:56:5B:B6:0D:68:EF:D7:F6:91:42
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       2047
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number:          1FF3
Signing time:             Tue 12 May 2026 16:00:14 +0000
Manifest this update:     Tue 12 May 2026 16:00:14 +0000
Manifest next update:     Tue 19 May 2026 16:00:14 +0000
Files and hashes:         1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: dgBqLJtJ3UP9uKr8zKhomcLJvykU37w7zG2PJvCNvuU=)
                          2: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ZyrkgOdS2CMVpPMVwiikQSmBmkf/Q62a7PKdJPSjlLw=)
                          3: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: j6Fn0yl9QruB/L8VIjM7Cvrv8dXDeLRII1Kg9BFfdqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8263 (0x2047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
        Validity
            Not Before: May 12 16:00:14 2026 GMT
            Not After : May 19 16:00:14 2026 GMT
        Subject: CN=6a034e8e-0de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:38:c1:c6:36:48:b0:61:a2:c1:bd:c0:bc:
                    4c:a9:36:f9:23:0b:8c:bf:1f:49:e4:df:7a:d9:eb:
                    a5:7c:84:49:a0:7f:48:76:92:d4:51:2b:54:58:a3:
                    21:bd:91:7a:d6:a6:b1:2f:66:ef:49:f3:7c:e8:66:
                    70:9e:bb:b3:62:d7:cb:17:48:b8:bd:a8:4e:19:1b:
                    7f:fb:64:01:8c:6e:ef:5b:7a:71:a6:d9:05:ee:d8:
                    98:c7:d0:1b:fc:6b:ca:27:4b:24:ee:a5:48:8e:0e:
                    d2:36:d5:13:06:7f:73:ab:fe:dc:43:a6:df:15:e0:
                    4a:2b:17:1c:a2:7e:c0:4b:53:76:0a:35:28:af:af:
                    f7:b6:f1:3e:0a:21:cf:84:19:37:52:3a:13:ad:cb:
                    a8:b0:61:25:f2:da:91:a5:b4:92:96:38:35:a5:2c:
                    08:14:7d:37:3d:bb:78:0f:f4:58:de:49:d0:d7:c1:
                    fb:b7:dd:90:12:db:cf:08:5d:07:6f:9e:e2:bc:25:
                    4c:17:69:c7:3d:2d:52:9b:74:fe:0c:ea:48:78:0f:
                    24:59:15:99:11:9b:d3:a8:43:5e:c4:7d:4f:b2:82:
                    8b:07:15:93:f8:89:bd:9a:8a:f5:e8:97:ee:40:af:
                    73:d0:28:f1:73:ef:9a:c7:7b:b7:13:07:10:e3:07:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0F:B6:28:20:84:03:94:10:BC:56:5B:B6:0D:68:EF:D7:F6:91:42
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fb:92:ae:35:5f:fa:ce:fb:29:69:d4:8a:3c:75:b9:e2:90:
         36:60:53:d5:23:9b:ea:6d:b3:8d:ae:7c:07:a2:c9:d1:55:bb:
         3d:58:e6:dd:29:bb:22:54:39:32:a7:62:00:66:76:14:fb:9e:
         6b:8e:be:14:f4:f3:16:e4:66:4d:c1:f7:b9:47:1a:ec:34:7a:
         6d:a9:04:ed:24:8e:b2:f1:37:e3:fe:9b:b0:c0:89:fd:d1:6d:
         10:0b:82:29:f5:72:8a:b2:e9:36:5d:8f:68:0d:b3:80:42:5d:
         c3:a1:ee:d6:af:ab:40:ac:7e:c8:f0:f5:cf:a0:27:93:2b:7e:
         d2:d0:6c:4f:5d:71:73:02:d0:a5:22:f9:38:30:ac:54:06:c3:
         5d:e6:dd:13:29:e4:7b:b0:0d:5e:0d:ce:18:68:cd:cc:75:45:
         7c:88:53:09:ac:ff:6c:d1:ca:a9:42:a6:6b:c1:8c:78:33:63:
         3a:73:2b:ec:94:19:b0:41:0f:1d:39:93:98:eb:a4:87:be:4a:
         1e:64:06:91:95:ae:ea:14:f8:81:1e:47:6a:c0:b5:bc:bb:c0:
         34:58:b9:a2:52:63:f9:ad:f1:33:a1:59:16:21:3e:4d:13:b0:
         38:f5:25:53:0d:bb:c1:06:2d:79:86:94:4c:ca:40:a7:ce:c0:
         43:e2:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:19 2026 by rpki-client