Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File:                     jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier:          grkoL75zH/syj7lBUV4/KYfZln6RV5wvLhde1/DQiS0=
Subject key identifier:   DD:2E:AE:65:AD:9E:AF:D8:B5:D1:67:02:F4:C7:1D:19:05:82:1A:C7
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer:       /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial:       054D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number:          053F
Signing time:             Sun 01 Mar 2026 00:05:12 +0000
Manifest this update:     Sun 01 Mar 2026 00:05:11 +0000
Manifest next update:     Sun 08 Mar 2026 00:05:11 +0000
Files and hashes:         1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: 8rUyWU8Peo5mNhz9WxGyrDmyt8esrEKC42cxp/m7cy8=)
                          2: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (hash: dBrvRhE7d6Gn9XYLN8nXQpwQDGFVLLDwce3vUOtRs0Y=)
                          3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: TsQo1WVy7+xiLxG6l3ch8mItS0YptsU2uDmAtTmaMrs=)
                          4: 19270196406311ECB405CB27C4F9AE02.roa (hash: 1UGikhqVC/p0q/nRUe3Y/KltgB00K+avhNJIYpdz6SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
                          rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
        Validity
            Not Before: Mar  1 00:05:11 2026 GMT
            Not After : Mar  8 00:05:11 2026 GMT
        Subject: CN=69a382b8-0e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:18:55:78:28:5c:b2:da:e7:90:c8:fa:9e:
                    2d:d9:c6:79:03:9d:48:d7:00:da:25:37:b3:a8:a1:
                    46:c5:df:b4:b8:0f:ff:a6:fd:e7:58:d2:09:a8:1b:
                    e3:10:ac:22:b5:8c:f8:10:47:2e:86:22:3e:6c:18:
                    80:21:87:62:f6:22:6e:06:ca:53:41:e0:d8:5f:e7:
                    00:66:cf:ce:1f:e1:c5:79:60:aa:a5:20:29:26:06:
                    cc:cc:d9:b4:98:63:0f:24:cf:8f:c4:b6:e5:20:e5:
                    35:99:40:c6:3d:34:f4:b0:78:55:e8:26:7d:e4:0f:
                    f6:66:d3:d8:80:f6:b0:59:2f:18:49:8b:b5:1f:57:
                    17:b8:2c:92:89:c6:3d:6b:57:3a:d1:cf:63:74:5b:
                    30:9d:12:f4:f8:4e:5a:e4:c5:20:01:90:53:73:35:
                    2b:4e:84:bb:09:af:5f:d1:b7:22:7e:08:7a:69:f1:
                    36:af:19:12:01:83:4c:0c:b6:70:6e:48:cf:5a:3d:
                    77:67:1a:7e:0c:20:08:84:83:13:3c:d8:aa:a4:de:
                    b7:40:6e:27:fe:62:ab:99:ef:96:89:93:e6:28:b5:
                    7d:5e:fe:42:19:a0:50:1b:af:87:98:a5:8a:8e:19:
                    60:8a:8f:b1:df:76:4a:33:57:2c:2b:10:6a:cd:6a:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2E:AE:65:AD:9E:AF:D8:B5:D1:67:02:F4:C7:1D:19:05:82:1A:C7
            X509v3 Authority Key Identifier:
                keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:90:8b:71:5e:d2:43:e9:84:a1:44:fd:b4:44:8e:28:8b:e0:
         81:de:2d:46:2f:94:de:d9:61:dc:10:6b:74:c7:51:26:35:bf:
         18:ce:c8:c6:26:c7:9e:2b:98:44:44:91:ab:8f:b6:b1:c6:2a:
         7a:5f:41:17:07:be:f5:b1:cb:0f:51:00:52:dc:85:64:4d:59:
         1b:5a:9c:b7:f1:d3:5f:43:b4:08:8b:6b:31:d8:b4:bb:bb:8d:
         50:f8:df:5b:a4:e6:fc:d8:72:6f:73:88:30:82:28:47:77:e3:
         da:97:08:0f:71:48:d6:5c:db:76:72:71:62:30:d8:7b:19:13:
         2f:0b:48:4a:97:17:0b:d8:f4:5f:12:3f:48:f3:e5:22:a7:c9:
         1e:26:d1:cb:48:ad:80:be:1c:9e:3a:c8:79:ab:fe:33:dc:a8:
         62:61:64:7d:f7:2b:ad:15:c2:3e:80:03:0f:57:2b:e1:b3:2e:
         0c:d9:57:2d:00:73:89:9e:78:e9:bc:aa:c6:2a:ee:12:f6:2f:
         21:37:b0:f4:3b:81:8c:af:44:0f:94:72:6e:23:cf:66:7a:27:
         c1:50:76:fb:34:3d:1b:2a:bb:06:47:a0:bf:86:e9:bc:ac:f9:
         7c:8c:1c:32:49:68:dd:7c:1b:8d:77:0b:fd:1a:09:3b:55:47:
         d8:93:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:18 2026 by rpki-client