Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File:                     JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier:          Fp75AZELylmckqfv7LnWPBljReeosz96T1uBbM34+UY=
Subject key identifier:   69:8F:F3:DD:AD:CF:79:DE:C9:7F:4D:A4:AE:ED:A1:7F:43:30:52:13
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number:          EE
Signing time:             Sun 01 Mar 2026 23:20:31 +0000
Manifest this update:     Sun 01 Mar 2026 23:20:29 +0000
Manifest next update:     Sun 08 Mar 2026 23:20:29 +0000
Files and hashes:         1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: G0y+e/Rxxn2fJSXFuk/2z/2oO7hCuPjsp0mqQeR6L4w=)
                          2: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: VQA6pjuu/o8U/g10GJhyRj7RgcZTt+KPBg7nxgVDWd0=)
                          3: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: G5O36SvC9VS8QmGgtVxcSVr/0IErmRE6s7oSkFzNs38=)
                          4: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: aDcnlxap4XDDt9ANdIB0EdEbEwHi3xK45nvSfh/8fvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Mar  1 23:20:29 2026 GMT
            Not After : Mar  8 23:20:29 2026 GMT
        Subject: CN=69a4c9be-9116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:32:9b:07:23:7f:bd:2c:af:e2:66:7d:df:
                    17:6b:f8:a1:48:0b:b9:11:a2:90:7c:44:6a:ac:8b:
                    b0:0d:d4:73:bf:58:33:01:e5:f3:2a:46:b6:07:14:
                    75:3b:b5:cb:de:e9:1e:a0:8c:88:7f:df:89:81:fc:
                    83:b9:a1:23:13:16:fd:4e:29:2c:48:bb:8b:fe:29:
                    70:82:5c:84:7a:de:e6:cf:0f:75:fd:91:5f:6d:e9:
                    6b:fa:cb:17:25:5b:c1:08:71:ed:17:81:2b:f0:f5:
                    26:4c:9f:33:ed:c9:1b:c6:26:77:0d:a1:05:e9:f8:
                    a6:78:66:4e:4a:55:d8:7c:90:06:3a:34:c4:20:c6:
                    7a:f1:27:52:36:e7:58:96:43:d4:9e:cf:f1:84:77:
                    89:8e:04:e9:95:b8:9b:2b:7d:05:b9:c3:07:3c:12:
                    35:e5:29:b6:e2:26:ed:20:5f:3a:ba:ab:00:a9:71:
                    69:61:08:bc:fe:9a:78:1e:05:e0:f7:c0:81:c6:cb:
                    e8:e9:05:07:51:d9:54:ca:bf:f0:8f:e6:15:a1:ba:
                    ac:bf:7d:55:73:f6:36:a9:1b:3d:32:e4:9c:f0:e6:
                    7b:78:94:99:e2:0b:0b:da:07:d6:cc:d2:04:79:d8:
                    d2:74:2f:d4:c7:2a:13:6e:a6:71:49:c9:0f:39:1a:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8F:F3:DD:AD:CF:79:DE:C9:7F:4D:A4:AE:ED:A1:7F:43:30:52:13
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:10:c8:56:55:da:f1:16:97:1f:c4:01:82:75:21:89:0d:d6:
         12:8a:47:cf:1e:ba:4b:ee:be:10:fa:c8:43:7b:a8:47:3c:ce:
         83:43:dd:0d:b3:af:30:ec:a3:df:b0:54:fb:90:b3:47:49:ab:
         6b:c0:c5:6b:b6:35:15:86:95:17:40:8f:50:81:f6:6b:26:80:
         e1:51:13:5a:cf:7f:77:5c:77:73:20:47:1a:c4:12:a2:29:c0:
         a6:60:ad:8d:b1:80:b3:7a:7d:72:54:65:2a:b0:e2:be:04:e7:
         48:86:84:a9:3c:11:41:96:c7:ba:bf:fb:98:4c:f8:c3:b6:47:
         bd:25:67:75:25:65:1d:33:56:d2:20:3f:de:93:91:d5:e1:6d:
         e1:09:47:66:79:2d:53:7a:99:ea:c9:7d:83:87:01:22:a2:81:
         92:8b:22:be:83:8b:58:2e:a5:12:1d:18:d2:6d:0f:89:b3:d3:
         3c:8d:18:db:1e:c2:ab:78:41:03:b6:4e:0e:da:1d:56:f8:ac:
         07:d6:1f:b3:66:2b:a0:d7:ab:9c:74:63:d4:8e:5e:72:09:c8:
         e9:11:88:31:ca:b0:41:d6:8d:7b:64:ea:6d:fb:5c:19:21:24:
         f1:0c:ff:d1:7a:4e:a5:f3:68:b3:7d:dd:ea:63:1f:1d:63:3a:
         e9:bd:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:01 2026 by rpki-client