Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File:                     jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier:          MvxpiYY1CtgzHa/4RUe+Y/GrN/AmnruqyUAT+rbOq1Q=
Subject key identifier:   F8:98:A9:BB:05:2A:25:FE:74:11:4A:0E:7A:67:E8:1E:96:F3:3F:BE
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number:          CA
Signing time:             Sun 01 Mar 2026 08:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 08:00:48 +0000
Manifest next update:     Sun 08 Mar 2026 08:00:48 +0000
Files and hashes:         1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: ds4/XY0cuwepUvIOjAK9JakJNYB1qb4fu0rw/EkKB8g=)
                          2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: F72jxTcUR/Ij+JDhzrH2FoscAFJXuYuBAzmAY76TMZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Mar  1 08:00:48 2026 GMT
            Not After : Mar  8 08:00:48 2026 GMT
        Subject: CN=69a3f231-f7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ae:52:54:3f:f2:b8:4f:13:92:4a:2e:8c:78:
                    20:55:2d:71:18:c7:7b:e1:fe:2a:eb:54:90:7c:da:
                    4b:dc:a4:76:11:69:59:d9:74:40:1d:d8:62:70:82:
                    d2:22:42:8f:4f:2c:36:2d:e8:82:60:26:df:7a:a7:
                    97:ed:11:71:a8:27:1b:15:cb:51:ec:bb:c6:7d:7b:
                    1c:ec:3d:29:3c:6f:80:fa:49:6a:ed:82:80:48:3f:
                    79:59:a6:17:a0:3e:f7:2a:bc:a8:94:60:4f:98:2b:
                    5d:f3:a3:d9:12:f8:bc:6f:38:ad:26:39:aa:21:26:
                    05:a4:1c:46:83:a7:9e:ec:74:9b:3f:49:17:45:b6:
                    06:30:1c:44:f4:e9:39:d1:a1:85:bc:f8:c5:dd:e5:
                    75:aa:58:48:77:d3:ca:4a:7d:94:df:a2:fa:a1:8a:
                    63:d7:e6:10:b7:95:2d:d8:2c:02:c4:51:6a:79:12:
                    3a:79:5b:e8:83:7c:a5:8e:41:56:b3:37:c9:fa:a9:
                    44:c4:85:f8:ca:fd:e7:7d:02:56:f0:83:83:40:d8:
                    70:fe:59:f3:eb:0d:f6:08:81:0b:9b:5f:13:0f:29:
                    cf:fc:8d:be:d4:b2:32:ec:d9:bf:43:03:4a:c5:5f:
                    e5:c6:ef:92:e7:40:83:e5:c6:6b:da:e3:01:e6:fa:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:A9:BB:05:2A:25:FE:74:11:4A:0E:7A:67:E8:1E:96:F3:3F:BE
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:10:e6:f0:0d:a2:ef:57:24:63:9b:d5:25:4e:3a:05:3f:23:
         f2:5c:b0:2c:10:8b:eb:f1:e4:c0:9e:7b:57:71:3a:93:ec:2d:
         7e:28:1b:4b:d7:dd:95:1f:2d:94:67:b2:52:3a:ed:a4:52:79:
         63:6d:98:0d:f3:48:02:95:28:fc:57:31:38:66:e0:fc:ae:b6:
         d1:0c:9d:c0:f5:67:49:3e:a7:1d:75:5d:7c:94:ea:e0:f4:f8:
         f0:5e:1d:8a:ef:9f:2b:c6:08:be:77:9f:3c:78:66:35:98:af:
         84:00:40:2c:dc:90:4f:6e:de:3c:28:72:72:85:71:35:e5:da:
         ac:cd:45:bf:a2:0b:c0:c4:4d:de:de:2b:01:72:eb:96:b3:c8:
         8b:36:7a:01:b4:93:bd:55:35:a2:21:a6:ae:d7:0a:7c:a7:e4:
         55:de:9c:e6:8a:3f:a3:79:f9:40:29:db:f1:f3:5a:71:bc:35:
         4d:e6:c9:68:48:71:4d:4b:ee:6d:e3:f2:51:8e:ee:17:1b:d9:
         da:95:c4:19:62:53:80:3e:02:86:96:ca:89:65:bc:ce:0b:27:
         ff:18:f3:71:96:f7:5c:33:ec:8e:f6:11:54:9a:22:11:42:e0:
         95:ef:3d:2a:36:ed:d3:7b:7d:05:0e:f4:98:26:bd:8d:34:d4:
         14:de:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:34 2026 by rpki-client