Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
File:                     jqgV0DpRxRztXr5f2ZNStjdrVX0.mft (raw, json)
Hash identifier:          6ZAu9KyIjW90vB13vjjpg2LCRMhTope6NTCiUgzGSGc=
Subject key identifier:   37:1C:45:06:A6:67:A2:1D:61:6A:0D:D2:18:85:7C:FE:92:7A:BF:F9
Authority key identifier: 8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D
Certificate issuer:       /CN=A9136067/serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
Manifest number:          2B
Signing time:             Sun 01 Mar 2026 10:09:59 +0000
Manifest this update:     Sun 01 Mar 2026 10:09:58 +0000
Manifest next update:     Sun 08 Mar 2026 10:09:58 +0000
Files and hashes:         1: jqgV0DpRxRztXr5f2ZNStjdrVX0.crl (hash: Ycswxhi+ze+Lnfrxe1EP/nTR3HH/FgM2XD2oK/QwbS8=)
                          2: 902A638ED68011F0B036527A68D3641D.roa (hash: Vz8eeIUSMui4xVAuI1Jf8LJNi6cDsIJmlb8VFlttmdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl
                          rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136067, serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
        Validity
            Not Before: Mar  1 10:09:58 2026 GMT
            Not After : Mar  8 10:09:58 2026 GMT
        Subject: CN=69a41077-66f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:09:94:d4:00:b5:b9:fd:cf:ed:5b:a3:f0:
                    9f:73:d2:1f:da:2a:e4:a2:ac:0e:80:4c:52:b7:05:
                    90:6c:b3:e4:8d:e5:aa:d8:b7:54:e4:08:32:ff:ba:
                    50:5b:56:21:05:40:36:c4:99:e3:7d:4a:81:66:2c:
                    4b:e7:19:4e:d7:c4:dd:55:27:c5:df:13:75:cb:4f:
                    55:54:1a:05:fd:e4:0a:81:5d:e5:58:83:f0:4b:68:
                    e9:6e:51:54:26:de:00:30:74:a7:f3:b2:9e:1c:80:
                    05:10:86:6d:c6:db:47:ba:dc:4d:b7:68:b0:2c:0a:
                    92:ca:a8:52:00:71:38:0e:c4:1c:5a:41:96:a2:08:
                    c6:20:ae:40:fa:13:a7:e1:77:cb:b2:09:96:c0:38:
                    e8:be:56:1e:84:f3:f0:c4:af:2a:f8:5c:99:01:69:
                    c1:ef:01:d0:2f:22:b1:ef:d2:b7:09:62:cd:d1:c4:
                    23:1a:1b:04:73:96:b3:90:55:17:b5:a3:e2:4d:07:
                    f2:f5:b5:42:e3:c6:6e:06:46:7a:cf:f2:c7:9f:64:
                    39:15:f0:1c:d8:a6:e5:d8:de:ef:ed:03:ed:b6:56:
                    38:00:7f:9a:ee:5c:9e:75:c4:8b:4a:3d:81:a9:b8:
                    66:d3:59:0f:b1:09:88:0c:ef:83:09:c2:9a:e6:d4:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1C:45:06:A6:67:A2:1D:61:6A:0D:D2:18:85:7C:FE:92:7A:BF:F9
            X509v3 Authority Key Identifier:
                keyid:8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f6:5e:44:bc:ca:cb:40:9b:24:72:c3:43:ed:dc:01:8a:86:
         9b:df:86:5a:14:b3:80:b3:cd:ca:1c:c0:3b:c6:66:49:b6:e2:
         cb:65:b6:3c:c0:b0:10:5c:de:59:5f:18:f4:b8:1e:fc:3e:ba:
         06:05:99:61:13:e3:ad:d9:03:4a:7b:4a:9f:68:e6:18:70:16:
         bb:1a:b8:ab:49:38:3d:75:4c:99:da:58:88:d9:04:cb:41:c5:
         cb:60:8c:a5:6b:94:34:ce:1d:f7:c8:51:1d:e9:e8:3a:d7:c9:
         87:2e:cf:ed:57:0f:bc:1e:0a:81:c3:90:96:11:03:aa:f5:5e:
         ca:7e:ac:00:e5:ff:9c:fa:cf:7e:17:ca:9d:3c:97:f8:d1:41:
         2f:7a:60:63:93:83:f8:52:83:e0:28:88:7e:ce:48:79:21:55:
         89:82:74:5e:66:30:49:39:7d:f3:be:57:6a:ee:f2:c2:b5:1d:
         f7:03:65:35:be:19:9a:48:35:5e:1f:77:b3:fd:3f:52:43:44:
         f9:6c:0d:22:f2:b8:45:85:55:95:f6:f1:71:97:30:4a:ca:fa:
         60:59:10:84:45:51:93:d7:82:e6:bf:8c:50:4c:8a:bf:94:16:
         ff:c0:64:2a:9c:45:2b:a8:25:52:95:80:65:04:08:ab:e8:5f:
         ba:5c:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:10 2026 by rpki-client