Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File:                     JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier:          Hvr9HxIek5pavij9B0rzozJNko/kDLhH5hEQyO2yOvI=
Subject key identifier:   F8:5F:F6:26:A1:59:29:BE:0B:B7:9E:35:5E:14:D4:0B:CD:5E:74:90
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer:       /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number:          D4
Signing time:             Sun 01 Mar 2026 07:51:35 +0000
Manifest this update:     Sun 01 Mar 2026 07:51:35 +0000
Manifest next update:     Sun 08 Mar 2026 07:51:35 +0000
Files and hashes:         1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: ckBHv853btQlQr81eliJdYA5YSTjzvlpIJsFpFPDY/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
        Validity
            Not Before: Mar  1 07:51:35 2026 GMT
            Not After : Mar  8 07:51:35 2026 GMT
        Subject: CN=69a3f007-ec96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:b0:5c:e8:1f:ae:67:f5:f1:8b:64:f1:d1:
                    2c:ad:d2:60:27:6f:b7:b5:aa:f6:b8:75:5d:2d:82:
                    14:b7:19:36:ef:df:05:27:f1:e9:07:94:40:a3:6c:
                    bb:d7:8b:13:10:cd:d0:c9:33:f2:b5:e0:b1:e5:60:
                    d3:29:32:94:16:55:09:33:38:cc:83:2d:d0:c7:61:
                    be:b2:2c:ec:ad:59:17:26:eb:11:ad:c6:c9:d5:79:
                    1b:38:2c:1f:19:6e:00:65:a8:a0:03:8f:75:f6:15:
                    fe:6a:4d:c7:34:46:31:08:c2:f3:3a:bd:26:ca:56:
                    fd:1d:c8:34:2c:7f:64:53:16:cd:64:e5:bc:ce:3d:
                    1a:c5:16:a8:91:08:fb:0e:17:81:5b:6b:95:2f:a8:
                    11:db:c5:98:62:99:e6:b4:70:5b:a1:3c:b3:be:a0:
                    28:fb:82:84:fd:7a:4d:44:b5:05:5d:fd:9a:27:5b:
                    b9:82:7b:1c:17:a1:56:65:57:5f:98:a7:0f:1b:d7:
                    7c:9a:94:78:64:c0:ef:2d:74:1f:cb:31:33:b9:1e:
                    7f:9b:d8:09:53:2d:d1:8b:cf:d8:35:0a:1d:63:bb:
                    f7:8d:17:57:0e:a7:4d:95:60:90:51:aa:c2:c1:26:
                    4e:8e:77:df:06:80:da:71:fb:ed:f6:b6:6b:27:b8:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5F:F6:26:A1:59:29:BE:0B:B7:9E:35:5E:14:D4:0B:CD:5E:74:90
            X509v3 Authority Key Identifier:
                keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:d4:4f:49:63:b1:42:56:d9:6e:c3:fb:d5:d6:c9:89:ae:
         2b:00:a4:83:bd:d4:d9:64:98:9e:e7:08:9a:bc:45:ff:f7:0d:
         c6:9c:1f:66:a4:10:43:53:f9:0f:8e:b6:4a:8b:10:f4:61:66:
         2d:7e:19:07:77:8c:33:d8:8a:f0:b3:1a:9e:d5:34:eb:f7:2c:
         45:5d:f3:66:76:c0:04:cf:3c:a9:53:57:af:2a:a7:8f:4e:2a:
         80:13:78:59:af:42:ca:c3:29:52:be:f1:6a:0d:4e:48:17:9e:
         2a:e1:9b:88:0a:3b:1f:62:91:1f:8a:5f:78:b8:68:8d:5f:06:
         65:ad:6f:d3:3b:b7:b4:8b:57:db:75:5d:ff:88:fd:b0:a0:06:
         b3:6a:f7:e5:f5:3a:b8:ce:9b:d2:b1:5e:b4:10:24:c5:76:28:
         20:46:fe:de:c3:25:de:ac:8a:b3:87:b2:78:30:10:87:17:9e:
         62:07:7f:98:9f:cd:ee:c7:fe:ff:2e:8c:c6:fe:f6:02:80:7f:
         8c:c4:bf:58:bd:63:66:cd:66:07:98:02:30:39:c9:1d:58:ea:
         c7:a3:fc:7c:b7:3b:ae:3d:76:36:4e:9e:a7:df:a0:9b:a7:32:
         fb:04:5f:1e:55:51:87:a8:aa:f3:65:3f:9c:fd:54:ca:c7:9e:
         c6:57:f6:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2QzIxMTAvBgNVBAUTKDI0NzIyRDMxQzI1MTNFNEU3Rjg3RURCNzBERkU5REM5
NEY4NDY4QkEwHhcNMjYwMzAxMDc1MTM1WhcNMjYwMzA4MDc1MTM1WjAYMRYwFAYD
VQQDEw02OWEzZjAwNy1lYzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuEewXOgfrmf18Ytk8dEsrdJgJ2+3tar2uHVdLYIUtxk2798FJ/HpB5RAo2y7
14sTEM3QyTPyteCx5WDTKTKUFlUJMzjMgy3Qx2G+sizsrVkXJusRrcbJ1XkbOCwf
GW4AZaigA4919hX+ak3HNEYxCMLzOr0mylb9Hcg0LH9kUxbNZOW8zj0axRaokQj7
DheBW2uVL6gR28WYYpnmtHBboTyzvqAo+4KE/XpNRLUFXf2aJ1u5gnscF6FWZVdf
mKcPG9d8mpR4ZMDvLXQfyzEzuR5/m9gJUy3Ri8/YNQodY7v3jRdXDqdNlWCQUarC
wSZOjnffBoDacfvt9rZrJ7hAxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhf9iah
WSm+C7eeNV4U1AvNXnSQMB8GA1UdIwQYMBaAFCRyLTHCUT5Of4fttw3+nclPhGi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODZDMi8yNTU1QkYwNkQx
N0YxMUVGQjM4NDY5MjhDNEY5QUUwMi9KSEl0TWNKUlBrNV9oLTIzRGY2ZHlVLUVh
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pISXRNY0pSUGs1X2gtMjNEZjZkeVUtRWFMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODZDMi8yNTU1QkYwNkQxN0YxMUVGQjM4NDY5MjhDNEY5QUUwMi9KSEl0TWNKUlBr
NV9oLTIzRGY2ZHlVLUVhTG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATmHUT0ljsUJW2W7D+9XWyYmuKwCkg73U2WSYnucImrxF//cNxpwfZqQQQ1P5
D462SosQ9GFmLX4ZB3eMM9iK8LMantU06/csRV3zZnbABM88qVNXryqnj04qgBN4
Wa9CysMpUr7xag1OSBeeKuGbiAo7H2KRH4pfeLhojV8GZa1v0zu3tItX23Vd/4j9
sKAGs2r35fU6uM6b0rFetBAkxXYoIEb+3sMl3qyKs4eyeDAQhxeeYgd/mJ/N7sf+
/y6Mxv72AoB/jMS/WL1jZs1mB5gCMDnJHVjqx6P8fLc7rj12Nk6ep9+gm6cy+wRf
HlVRh6iq82U/nP1Uyseexlf2Yg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:37 2026 by rpki-client