Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
File:                     _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json)
Hash identifier:          pQaxkIBOSFCtWo0J/Nr/lj6V4zKpYW2k8npa/aZRguw=
Subject key identifier:   84:85:45:6E:96:23:FE:B6:0C:6B:11:CB:7E:92:F4:0D:9A:0F:B8:03
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Certificate issuer:       /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial:       180E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
Manifest number:          17FC
Signing time:             Sat 28 Feb 2026 16:36:16 +0000
Manifest this update:     Sat 28 Feb 2026 16:36:15 +0000
Manifest next update:     Sat 07 Mar 2026 16:36:15 +0000
Files and hashes:         1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: fhwded6bJnpU5q2EU9ahVC4rs7ye6Z3VqQ3sZTj5ccE=)
                          2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: H2kVJ1Qljol4RJT+WjYqTUcreshPKQd5F8/PLTtjDEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
                          rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6158 (0x180e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
        Validity
            Not Before: Feb 28 16:36:15 2026 GMT
            Not After : Mar  7 16:36:15 2026 GMT
        Subject: CN=69a31980-1e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:3d:d3:51:de:12:e5:18:f0:92:ff:4e:90:
                    76:a5:0e:a7:53:94:06:db:78:6e:a8:a7:b8:e7:7c:
                    c6:d6:62:d1:fc:e4:e9:99:8b:4f:75:ae:b1:9b:e5:
                    31:e8:dd:09:ad:03:a3:06:fb:28:82:bf:cd:46:ec:
                    6a:e7:34:54:05:a5:fb:ab:c9:0c:97:8d:45:ce:8c:
                    0c:58:d5:a2:76:49:53:45:cf:aa:73:91:86:62:23:
                    8c:8d:31:f4:11:54:0e:e2:64:c7:a4:18:1d:35:5e:
                    22:d0:f4:00:15:3f:db:47:9b:f4:08:0f:94:9d:64:
                    bb:b0:4f:2a:62:d6:bf:a1:e1:c1:05:58:7d:fc:10:
                    dd:f9:ce:87:7a:c7:d8:4b:e4:61:81:42:29:e9:9b:
                    fe:94:39:a8:9a:db:06:92:35:11:c0:db:a4:b1:40:
                    9d:01:b4:a8:5d:8b:f3:42:0b:4f:53:6b:83:cc:b9:
                    18:04:16:14:72:87:11:45:57:61:e7:68:8e:02:6a:
                    15:44:19:ec:4b:62:98:5c:d7:69:da:e8:fb:88:08:
                    21:54:45:0d:79:47:86:0f:48:35:08:35:6e:a0:a6:
                    3e:8b:ce:eb:3e:d8:bb:27:75:68:27:c8:bc:9b:64:
                    32:5a:c4:e5:3c:b2:d5:47:16:b8:2e:7d:2d:69:0e:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:85:45:6E:96:23:FE:B6:0C:6B:11:CB:7E:92:F4:0D:9A:0F:B8:03
            X509v3 Authority Key Identifier:
                keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:fa:ea:d0:e9:85:b1:f6:02:a0:dc:e4:0e:f3:22:68:2d:
         ee:b0:7b:03:46:ff:f9:6b:ba:ac:c2:e1:56:df:b4:6a:a6:e7:
         86:e8:cd:cf:82:f9:ba:a6:07:ec:53:bd:1e:a0:f0:36:61:45:
         be:16:3d:6b:a7:42:4c:b3:d0:c8:4d:0d:36:84:57:b5:4f:50:
         c0:d5:ea:3c:c6:fa:75:5c:6e:c0:af:f9:cb:3f:d9:b8:98:2d:
         66:97:6d:68:63:71:40:a5:89:0e:1f:94:34:c5:48:e3:6d:a8:
         21:7f:6a:02:5f:af:4d:34:0c:a6:56:b2:35:42:b5:5c:de:3c:
         a5:38:65:80:de:76:c5:d0:24:f2:47:62:4e:91:b4:29:e2:f2:
         9d:52:de:62:5d:7c:45:6d:3b:33:7b:3f:e9:b3:1a:79:88:11:
         c9:81:3f:1d:5f:75:19:f1:34:9b:b4:d5:c2:bf:fd:bf:c2:6f:
         d5:c9:f5:28:15:b1:5d:13:c8:c6:ca:d5:6f:0b:e7:90:39:24:
         f7:e2:23:48:fa:ee:b6:3b:87:a9:60:3c:83:8d:b2:81:5c:bd:
         f6:58:fd:9d:72:21:5d:2a:78:a3:f6:8f:cf:41:b9:fa:3a:f9:
         1c:0b:b2:09:9a:bb:f9:36:58:22:ef:e2:87:bc:45:0e:a0:22:
         10:1f:2a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:13 2026 by rpki-client