Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
File:                     JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json)
Hash identifier:          CdMGdbENHh8Oe3HVC5xXq4U4/A7vgO68WfTO1UvWvYE=
Subject key identifier:   68:4D:F2:BD:82:B2:46:62:B6:6A:28:45:92:80:2F:79:19:8B:69:C8
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Certificate issuer:       /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial:       18A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
Manifest number:          1882
Signing time:             Mon 02 Mar 2026 01:32:54 +0000
Manifest this update:     Mon 02 Mar 2026 01:32:53 +0000
Manifest next update:     Mon 09 Mar 2026 01:32:53 +0000
Files and hashes:         1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: Co+DDVHZITzVAD0LIz9mWQbOCPuVVA5bJnQS9SGxezs=)
                          2: B5018AB0F2F111F08D4F09A1476F56BC.roa (hash: tpT68E0M3mFJ+XcHkcNvjHUefCfKea/pcyuU4Yj5Ha8=)
                          3: 71FD6FA8F2E311F098475965426F56BC.roa (hash: 5HXjK8kqpM3j7Dq/3YKkV0LQHLdyempUvfhW1aKXLTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
                          rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6309 (0x18a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
        Validity
            Not Before: Mar  2 01:32:53 2026 GMT
            Not After : Mar  9 01:32:53 2026 GMT
        Subject: CN=69a4e8c6-d77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:07:cb:05:0d:e0:cc:b7:37:4f:d7:25:55:
                    36:1b:3e:d6:4c:9a:cb:ad:0c:be:e1:53:f3:2c:17:
                    05:fd:38:bd:9c:61:74:62:8d:27:87:8a:e9:c1:f4:
                    b6:25:19:f0:c2:a3:ce:a8:90:5f:7c:4b:bd:4f:78:
                    f1:ae:a6:ca:82:d5:d9:09:68:a2:f7:14:ec:15:76:
                    b6:e8:a4:2d:eb:c9:f9:32:7d:67:bc:22:1e:2e:f7:
                    5b:b0:6d:ac:db:0b:9e:5e:d4:cc:a8:e7:45:9f:9a:
                    fe:d4:69:0a:ab:e4:79:7c:b6:f0:80:51:45:61:71:
                    fa:5f:79:be:52:f2:fd:f5:95:fd:77:e4:60:9c:e3:
                    52:39:e5:25:c6:e5:53:1b:8a:03:d9:b7:81:b6:bc:
                    a9:a0:b4:e6:75:34:a6:27:82:bf:46:0c:76:1a:0d:
                    db:cc:d4:c8:47:8c:a6:71:a4:59:74:0a:6c:25:53:
                    f8:f8:a8:72:c8:85:62:dd:e4:8c:ea:3c:f9:44:b4:
                    a0:a5:18:51:27:dc:ec:05:bd:23:0c:fd:73:62:a0:
                    e6:2c:d4:0c:cb:a3:4b:7a:4d:5b:85:dd:e1:57:21:
                    ab:63:ca:93:47:95:43:0f:50:5c:3f:07:e6:3e:cb:
                    ab:5e:2c:e8:7a:5b:d0:f1:3c:95:00:66:b1:65:8b:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:F2:BD:82:B2:46:62:B6:6A:28:45:92:80:2F:79:19:8B:69:C8
            X509v3 Authority Key Identifier:
                keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:36:3f:c5:75:3f:3e:f0:33:3c:62:22:ca:a1:51:60:59:04:
         3c:6b:d4:9b:4c:e5:44:c0:b9:52:9f:26:d4:c6:03:6b:d8:3d:
         80:54:95:92:c0:77:9e:70:ff:83:d7:22:37:d2:0b:c4:41:a4:
         37:c8:07:07:3d:02:f0:8d:40:17:04:58:ea:3a:a4:bb:24:e1:
         c4:c8:ab:5a:33:df:b4:50:8a:f1:d2:e4:8b:39:de:39:ec:95:
         54:e6:9d:1a:d8:f9:56:71:6e:94:9f:c7:54:56:80:5e:29:c4:
         03:d4:bf:e1:cf:f0:c7:c5:0b:52:fb:d6:63:ad:f7:81:ef:65:
         24:33:dc:2a:5f:71:af:24:c1:a2:c5:f0:15:d0:9f:62:56:89:
         a5:4c:6b:f7:75:7a:f3:1d:8c:b8:46:d8:12:16:a4:4a:fb:fc:
         a1:54:10:cc:88:df:28:fa:42:50:72:e4:c9:e3:14:d4:78:a3:
         5e:e4:50:3c:ce:1c:96:8e:7d:dc:2e:fa:64:1d:8b:f0:2d:3a:
         2d:00:d1:0d:6e:bb:80:60:9b:ba:5a:d3:98:39:a2:65:24:94:
         d3:20:bd:a7:00:3a:8c:85:a0:ec:59:99:2b:0b:ea:e7:df:1d:
         03:69:14:3e:89:04:00:ce:1b:ac:d7:18:79:ce:41:bd:24:aa:
         0e:17:99:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2
MDFEN0M4NUYwHhcNMjYwMzAyMDEzMjUzWhcNMjYwMzA5MDEzMjUzWjAYMRYwFAYD
VQQDEw02OWE0ZThjNi1kNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoV0HywUN4My3N0/XJVU2Gz7WTJrLrQy+4VPzLBcF/Ti9nGF0Yo0nh4rpwfS2
JRnwwqPOqJBffEu9T3jxrqbKgtXZCWii9xTsFXa26KQt68n5Mn1nvCIeLvdbsG2s
2wueXtTMqOdFn5r+1GkKq+R5fLbwgFFFYXH6X3m+UvL99ZX9d+RgnONSOeUlxuVT
G4oD2beBtrypoLTmdTSmJ4K/Rgx2Gg3bzNTIR4ymcaRZdApsJVP4+KhyyIVi3eSM
6jz5RLSgpRhRJ9zsBb0jDP1zYqDmLNQMy6NLek1bhd3hVyGrY8qTR5VDD1BcPwfm
PsurXizoelvQ8TyVAGaxZYsW9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGhN8r2C
skZitmooRZKAL3kZi2nIMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My
MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD
N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkzY/xXU/PvAzPGIiyqFRYFkEPGvUm0zlRMC5Up8m1MYDa9g9gFSVksB3nnD/
g9ciN9ILxEGkN8gHBz0C8I1AFwRY6jqkuyThxMirWjPftFCK8dLkizneOeyVVOad
Gtj5VnFulJ/HVFaAXinEA9S/4c/wx8ULUvvWY633ge9lJDPcKl9xryTBosXwFdCf
YlaJpUxr93V68x2MuEbYEhakSvv8oVQQzIjfKPpCUHLkyeMU1HijXuRQPM4clo59
3C76ZB2L8C06LQDRDW67gGCbulrTmDmiZSSU0yC9pwA6jIWg7FmZKwvq598dA2kU
PokEAM4brNcYec5BvSSqDheZfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:32 2026 by rpki-client