Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
File:                     JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json)
Hash identifier:          QRm5iZ8rGipVI82rTZ+4EgJMMliygp2JHYFmlYNbTLg=
Subject key identifier:   4E:12:C5:AB:72:01:C8:7A:B2:5F:8D:94:32:87:2C:58:8E:EE:FB:3E
Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65
Certificate issuer:       /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
Certificate serial:       0CFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
Manifest number:          114B
Signing time:             Sun 01 Mar 2026 22:56:52 +0000
Manifest this update:     Sun 01 Mar 2026 22:56:51 +0000
Manifest next update:     Sun 08 Mar 2026 22:56:51 +0000
Files and hashes:         1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: 1bktvfBKA+sONynn6S90aKgfjwEoto7DMr8X5RNJrO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3326 (0xcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465
        Validity
            Not Before: Mar  1 22:56:51 2026 GMT
            Not After : Mar  8 22:56:51 2026 GMT
        Subject: CN=69a4c434-bbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:1b:6f:65:f7:7b:40:97:ab:95:37:5d:9b:
                    f1:9b:84:a3:46:c6:51:33:25:57:5b:90:89:c6:b1:
                    b3:d7:ba:20:de:7c:b6:fa:84:e5:fc:7f:62:53:93:
                    3a:d6:ac:d4:99:dd:31:98:f0:b2:99:82:8e:50:ea:
                    18:c4:b4:c1:1e:f6:71:c9:8b:4f:e8:ba:62:e8:ef:
                    83:53:22:40:a2:33:68:46:4c:c5:b7:fc:2c:fa:a4:
                    22:d7:ab:b7:5c:52:ea:3e:07:07:2b:c7:b8:03:15:
                    ea:4d:f3:42:d3:8c:5c:01:bb:5e:d5:51:5f:de:01:
                    2b:64:d8:15:4b:7b:09:a8:35:a6:8b:d3:84:86:ad:
                    b6:44:8f:8c:41:12:58:60:23:a6:f8:4c:79:f4:cc:
                    d8:5f:15:8b:82:3a:c1:5f:49:47:3b:f9:8b:bc:52:
                    43:0d:66:c4:15:2c:3b:d2:a2:d0:76:cb:5f:a4:d7:
                    90:04:8a:d7:53:e4:30:ce:06:d4:89:27:25:1e:3f:
                    c0:11:99:b8:9a:ae:f9:12:32:92:6a:37:90:f1:b5:
                    2f:d8:15:ed:22:3d:cd:eb:77:06:2f:34:bc:26:5a:
                    69:0e:96:87:59:c7:7b:4c:56:f9:fd:28:69:fc:c2:
                    24:32:88:a6:ee:da:14:53:25:93:12:3e:c4:c4:6f:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:12:C5:AB:72:01:C8:7A:B2:5F:8D:94:32:87:2C:58:8E:EE:FB:3E
            X509v3 Authority Key Identifier:
                keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8b:82:d1:67:82:b9:b5:70:aa:40:d9:4a:bd:74:9c:c1:fe:
         df:97:8e:61:11:57:f2:da:33:38:f3:d0:86:00:4c:66:19:15:
         ae:6f:7c:fa:ce:97:ba:a4:4a:2e:41:5f:73:70:67:34:8a:52:
         28:e1:84:56:95:e6:ce:0b:1a:e7:65:07:48:4b:fa:05:0e:13:
         53:a1:23:82:99:02:e0:65:80:bb:4c:11:48:7c:dc:45:84:e6:
         bb:24:ca:bb:ae:4e:5c:f8:f4:59:43:f7:3c:97:1a:a1:88:5f:
         a1:68:92:ed:61:fe:d0:d7:39:1e:66:5b:ee:14:fc:bc:c6:f3:
         79:53:3e:07:4e:7d:65:3c:3e:4a:97:3f:db:64:32:44:b2:00:
         f8:ac:89:5c:e5:3b:82:c3:19:16:18:6b:5f:42:09:aa:f5:b4:
         9e:80:35:52:30:50:06:37:a1:ec:24:45:b4:4a:cd:6c:7f:b2:
         63:2a:f9:a5:76:8d:87:24:e0:b5:aa:39:2e:f9:28:e7:6f:e5:
         5e:a6:6a:f6:c0:b1:9e:bc:cb:ae:3b:e5:af:dc:eb:1a:3a:ee:
         b7:82:b0:90:ac:ae:41:99:e0:6b:60:7d:ff:32:53:ef:a5:ba:
         d1:c6:37:a9:09:ae:98:1a:92:2b:98:bd:22:92:63:98:f1:64:
         34:35:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:43 2026 by rpki-client