Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
File:                     JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json)
Hash identifier:          7jAABdl9HFfHKf8q++//fRrDmFY2RUPBmHMszm2PjiM=
Subject key identifier:   94:5D:EF:26:C1:2D:EE:52:8D:7B:D8:57:C4:F4:0A:16:11:AC:C7:8F
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Certificate issuer:       /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
Manifest number:          0156
Signing time:             Sun 01 Mar 2026 06:05:22 +0000
Manifest this update:     Sun 01 Mar 2026 06:05:21 +0000
Manifest next update:     Sun 08 Mar 2026 06:05:21 +0000
Files and hashes:         1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: aCXPudvgft/vCtPIJoKI3ThoGtipBmuTYBF8ElVTDpo=)
                          2: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: fTFZ6NRWPycyT+lyZTMPsMLZ+6Gnl7TMF4JY7aqaKFs=)
                          3: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: oXuCgd284p2fwDuc7fv7+Ly3x2Cr+yyDDkTfSE0guWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
        Validity
            Not Before: Mar  1 06:05:21 2026 GMT
            Not After : Mar  8 06:05:21 2026 GMT
        Subject: CN=69a3d722-4cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:5f:55:6e:e2:a5:f3:d7:71:39:49:ad:0f:
                    dd:e6:ab:d1:5d:4c:7b:7a:10:09:5f:60:a9:0e:d0:
                    0a:ed:ca:9a:1f:50:94:c3:e4:5c:8c:6a:f8:1c:d3:
                    53:26:0a:f1:bd:b2:b7:e5:c8:e4:1d:d7:38:ea:5d:
                    96:27:d0:0d:8f:c4:a4:53:a2:f4:47:db:aa:57:eb:
                    9a:32:7b:d2:3a:3c:3f:db:c5:ed:d5:76:fd:ed:70:
                    1b:f0:75:5f:9b:1d:9e:57:70:82:4b:24:64:ac:1a:
                    15:e0:52:06:d1:7e:d2:99:2b:de:0f:74:b7:2c:8e:
                    d6:03:88:00:cd:b9:3f:5a:ab:68:67:6f:c9:3c:8f:
                    84:7e:84:28:f0:be:e0:e9:a8:90:8a:a9:b1:81:10:
                    85:6a:16:f3:90:58:11:44:b8:ab:75:98:4c:b6:b9:
                    74:2c:73:cd:bf:56:12:b6:e6:c6:26:65:a7:13:e1:
                    2c:ba:b8:54:31:52:37:42:83:e9:df:8e:c1:df:29:
                    77:63:c9:5b:24:f2:4a:48:94:8c:a0:6c:74:f9:74:
                    d4:64:c0:59:75:85:e2:8a:04:f5:e2:f2:cd:ed:51:
                    8f:f2:b3:08:f8:ad:5d:63:3d:72:c5:ac:4f:25:1c:
                    de:14:d7:a3:91:cd:42:c4:36:10:88:1f:dc:95:81:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5D:EF:26:C1:2D:EE:52:8D:7B:D8:57:C4:F4:0A:16:11:AC:C7:8F
            X509v3 Authority Key Identifier:
                keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a3:2a:a7:87:50:41:19:78:c6:05:9e:02:7f:3c:ef:e6:9a:
         79:30:40:03:7a:da:83:bc:38:22:b3:0e:95:51:01:d9:47:fb:
         ea:2a:96:30:5f:6c:fd:2a:09:ee:32:1b:a9:a8:69:3a:be:f7:
         b0:70:3f:a4:a1:a5:14:eb:96:0b:4c:2c:a3:8d:b7:02:54:76:
         9c:5b:14:21:db:db:a2:d9:8e:7c:e1:de:a3:56:b2:b9:1e:7b:
         40:fe:30:98:07:60:0a:68:57:58:45:26:ff:83:37:b5:9c:86:
         c9:4c:85:f8:4d:c6:1a:1d:66:34:85:79:46:c5:c6:9c:f6:80:
         be:6e:93:ad:b5:3f:95:cd:3e:c0:c2:43:97:2f:a6:9f:2e:69:
         4a:ab:9d:0f:d9:6b:81:59:94:c9:a0:e6:b3:cf:4f:40:d3:aa:
         96:50:32:bc:1e:17:b0:cf:de:3f:fa:ff:eb:f9:b2:c3:9d:c5:
         94:51:f3:92:ee:a6:7c:f3:8e:72:b4:97:c5:40:48:a0:f0:12:
         72:3e:4a:8e:0c:d9:5b:fe:87:fa:92:6d:68:64:82:0d:83:10:
         02:08:30:4a:39:31:5b:4c:f3:be:28:2c:bc:fd:bd:16:6d:74:
         b6:60:b3:1a:7f:0e:92:ad:47:dc:17:1f:9c:33:e7:d8:78:bc:
         ff:a6:e4:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUEwQUIxMTAvBgNVBAUTKDI2NTcwM0Q4NTkzM0Y0NUQ5QjA0REFCNzcyMzc1ODRG
QzkyRDlENDQwHhcNMjYwMzAxMDYwNTIxWhcNMjYwMzA4MDYwNTIxWjAYMRYwFAYD
VQQDEw02OWEzZDcyMi00Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcdfVW7ipfPXcTlJrQ/d5qvRXUx7ehAJX2CpDtAK7cqaH1CUw+RcjGr4HNNT
JgrxvbK35cjkHdc46l2WJ9ANj8SkU6L0R9uqV+uaMnvSOjw/28Xt1Xb97XAb8HVf
mx2eV3CCSyRkrBoV4FIG0X7SmSveD3S3LI7WA4gAzbk/WqtoZ2/JPI+EfoQo8L7g
6aiQiqmxgRCFahbzkFgRRLirdZhMtrl0LHPNv1YStubGJmWnE+EsurhUMVI3QoPp
347B3yl3Y8lbJPJKSJSMoGx0+XTUZMBZdYXiigT14vLN7VGP8rMI+K1dYz1yxaxP
JRzeFNejkc1CxDYQiB/clYHywQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRd7ybB
Le5SjXvYV8T0ChYRrMePMB8GA1UdIwQYMBaAFCZXA9hZM/RdmwTat3I3WE/JLZ1E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBBQi83NDQ1MjZGNjBG
QTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlGMmJCTnEzY2pkWVQ4a3Ru
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5VUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTBBQi83NDQ1MjZGNjBGQTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlG
MmJCTnEzY2pkWVQ4a3RuVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADaMqp4dQQRl4xgWeAn887+aaeTBAA3rag7w4IrMOlVEB2Uf76iqWMF9s/SoJ
7jIbqahpOr73sHA/pKGlFOuWC0wso423AlR2nFsUIdvbotmOfOHeo1ayuR57QP4w
mAdgCmhXWEUm/4M3tZyGyUyF+E3GGh1mNIV5RsXGnPaAvm6TrbU/lc0+wMJDly+m
ny5pSqudD9lrgVmUyaDms89PQNOqllAyvB4XsM/eP/r/6/myw53FlFHzku6mfPOO
crSXxUBIoPAScj5KjgzZW/6H+pJtaGSCDYMQAggwSjkxW0zzvigsvP29Fm10tmCz
Gn8Okq1H3BcfnDPn2Hi8/6bkAQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:08 2026 by rpki-client