Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
File:                     jwhmaAoC5LoOvh6PIljuKBzUPv4.mft (raw, json)
Hash identifier:          3TRcw3CDK0LAX1pfLU2ofBX+0cFVB89LxD61XvSEV60=
Subject key identifier:   51:24:4E:63:90:BB:83:0A:E9:2E:13:25:D6:7D:DD:78:6C:A4:44:56
Authority key identifier: 8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE
Certificate issuer:       /CN=A913B510/serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
Manifest number:          7A
Signing time:             Sun 01 Mar 2026 09:04:48 +0000
Manifest this update:     Sun 01 Mar 2026 09:04:48 +0000
Manifest next update:     Sun 08 Mar 2026 09:04:48 +0000
Files and hashes:         1: jwhmaAoC5LoOvh6PIljuKBzUPv4.crl (hash: 9jcqIqU1J31onzF8SzrJPFh/JiPMQIvvMDQYqwMdh2A=)
                          2: 9D1CBEB65D8111F0A04DD550C4F9AE02.roa (hash: WD6JX9ZeI2PyoWb+KcklrsjlIHW009aV5ZILyIaO+Ps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
        Validity
            Not Before: Mar  1 09:04:48 2026 GMT
            Not After : Mar  8 09:04:48 2026 GMT
        Subject: CN=69a40130-daeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:72:97:49:ea:23:37:98:d1:7f:3f:6b:e1:
                    65:12:1d:26:ef:60:7c:af:b3:fe:37:3e:68:63:ac:
                    b0:20:b3:b0:70:dd:9d:49:50:84:31:b1:e5:45:e0:
                    e2:c6:12:7e:f0:02:7c:d0:54:a1:67:99:95:d9:35:
                    e6:c2:fd:ce:08:ac:2b:be:eb:64:17:d1:44:a2:8c:
                    07:f9:6c:0f:47:12:94:23:06:1c:e2:e1:80:ab:1c:
                    7d:8d:12:2a:12:ad:26:06:04:94:93:d9:d1:a7:73:
                    2b:58:60:49:3b:d7:fe:36:76:ac:f9:c7:94:52:12:
                    0f:d5:a6:77:c7:16:f9:3a:ac:f4:20:b5:29:17:5c:
                    7f:cc:e6:0b:41:29:5e:49:ca:c0:45:cd:88:c3:23:
                    4a:16:05:9a:ea:ba:24:a6:f4:ec:66:f2:c4:1a:0a:
                    85:c0:7c:57:81:9f:57:ed:ea:5e:0d:dd:6b:95:01:
                    86:75:55:cf:27:b9:5a:df:5a:ad:e1:2b:3d:be:f9:
                    1e:0d:58:5d:45:c2:da:6a:ed:e2:0c:03:3b:2d:ba:
                    c8:d8:7a:9a:2d:d9:9a:6a:9d:62:73:87:02:03:36:
                    26:ba:aa:5a:87:82:60:fe:5d:d8:6f:b5:98:85:ac:
                    b2:70:e0:da:ce:7f:79:ca:50:27:45:8d:e0:fb:a9:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:4E:63:90:BB:83:0A:E9:2E:13:25:D6:7D:DD:78:6C:A4:44:56
            X509v3 Authority Key Identifier:
                keyid:8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:22:21:1c:db:fe:c2:c3:23:42:0f:17:2f:d9:a7:4b:df:
         8c:d8:dc:12:17:4f:73:c8:ab:70:e9:d9:c1:c4:c9:66:23:a9:
         f5:f0:06:e4:78:63:83:fd:96:64:12:54:f2:9d:1e:9f:a0:61:
         14:6a:5b:b0:29:b8:1e:1b:96:8a:07:03:15:56:0c:8a:30:cc:
         1a:36:9e:b7:58:0c:0e:5b:8a:73:18:54:43:e1:42:6b:ec:3b:
         59:2e:b4:99:3d:aa:dd:29:1b:75:53:95:43:fc:00:ba:0d:35:
         dd:59:a9:a7:dd:27:c4:7f:5b:54:12:b7:38:c0:e2:d0:b4:39:
         52:65:f7:be:69:a1:43:3e:d4:c5:4b:e6:9c:d6:c1:e1:f1:6f:
         76:c3:50:62:72:97:39:e3:59:9c:5b:c3:3c:56:c5:0b:64:83:
         19:c6:a9:6d:12:f0:94:41:a8:6b:e5:8e:27:24:cb:34:b9:00:
         0d:d4:2b:fe:e5:bd:de:c5:f3:62:2f:88:ad:26:74:01:2c:7a:
         2e:41:f8:ef:c6:c4:da:af:b5:02:fd:a8:91:7f:90:e7:7d:6a:
         f5:c8:e4:68:97:5b:14:a2:63:c1:24:8f:51:f0:7d:e4:40:e0:
         df:d8:0a:67:47:07:d8:4e:e9:0d:4d:96:93:ea:4f:7f:b5:1e:
         62:79:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:00 2026 by rpki-client