Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
File:                     jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json)
Hash identifier:          k5LIlNNZWdW9noX7vU8vDViLUYeOh/XX0MiMrojT7Fc=
Subject key identifier:   77:A8:4D:60:CA:47:67:CA:41:5A:35:DB:85:A8:11:E1:5E:6E:86:40
Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
Certificate issuer:       /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Certificate serial:       3528
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
Manifest number:          351E
Signing time:             Sat 28 Feb 2026 15:07:57 +0000
Manifest this update:     Sat 28 Feb 2026 15:07:57 +0000
Manifest next update:     Sat 07 Mar 2026 15:07:57 +0000
Files and hashes:         1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: CIc+RqINhJ+SVLSNrZa8k8hkqx4HhHFJNARQkibAzMk=)
                          2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: JhBlCdse37bUv/gVZipzEykF5bWTjoKirJc9dxySSLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
                          rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13608 (0x3528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
        Validity
            Not Before: Feb 28 15:07:57 2026 GMT
            Not After : Mar  7 15:07:57 2026 GMT
        Subject: CN=69a304cd-7481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:31:31:6c:95:cc:9e:03:26:64:3b:d1:c8:
                    17:43:4b:e0:89:da:41:c8:9e:17:78:0e:5f:13:06:
                    2a:e9:1d:bb:08:ad:64:cb:a0:3f:c6:67:8d:9c:35:
                    90:8c:f8:2c:95:46:2a:d7:57:a8:83:d1:c5:d2:86:
                    4a:d2:a8:2d:65:b4:82:98:00:4b:16:fa:ea:64:b1:
                    eb:53:79:7b:eb:37:19:66:c6:04:b2:b7:f0:d5:3e:
                    c6:74:58:8e:16:dc:ec:12:48:0d:1e:eb:3c:9b:29:
                    aa:3c:8b:b9:9e:28:d2:6d:3d:ff:e3:aa:87:9f:e6:
                    55:db:23:78:1c:a1:9c:7b:12:bb:04:c1:95:ce:58:
                    2e:db:02:19:a4:af:95:d6:ce:26:24:04:63:aa:fd:
                    53:a2:d2:00:b7:6b:16:8b:b5:b8:1b:d2:58:e7:5c:
                    96:f8:90:27:2b:24:f1:24:80:2a:cc:57:80:94:c9:
                    21:f8:3a:b9:c5:17:4b:2b:f3:89:4c:bc:61:67:ee:
                    30:c3:8f:a4:c3:0f:0d:b0:bc:28:9e:d1:80:c1:cb:
                    fc:ff:bf:ec:29:69:1a:7e:38:2e:31:73:61:71:71:
                    93:58:d4:ba:1d:3d:b5:da:99:bf:54:a6:cd:b9:47:
                    51:78:4f:eb:9a:fb:88:83:68:b7:25:b9:84:27:f9:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A8:4D:60:CA:47:67:CA:41:5A:35:DB:85:A8:11:E1:5E:6E:86:40
            X509v3 Authority Key Identifier:
                keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:44:e3:16:c4:4b:97:de:ee:05:1b:16:0d:fc:fc:85:80:ac:
         3e:b2:67:e2:fb:ab:be:1a:10:23:f3:91:b7:86:db:8c:4e:b5:
         cb:9f:2c:50:81:dc:47:30:e0:13:75:3d:43:6a:d1:76:4e:d6:
         49:d3:1d:c8:df:fd:fa:85:66:d3:ad:4c:c4:1a:59:ee:31:1c:
         19:ae:16:65:00:25:cb:32:dd:e3:9e:8e:9d:3d:70:10:d9:3e:
         2a:bd:a4:46:ea:95:da:cd:5b:f1:bf:df:56:36:92:e9:f0:16:
         47:7c:9f:f0:8f:77:14:9b:72:b6:e2:58:dc:dc:72:57:5e:b7:
         57:a3:8f:53:7b:87:3a:c1:f9:89:05:27:aa:de:32:4f:79:18:
         56:93:52:ad:1c:58:fb:06:fb:83:f5:85:74:2e:d7:ec:1a:80:
         a7:d5:9d:fc:50:84:47:ba:46:e5:04:cb:da:38:e6:82:01:95:
         57:37:06:a2:b6:a0:6c:1c:0b:12:0d:17:ca:57:12:e1:24:1f:
         4a:7e:74:76:c7:40:c0:9b:90:cc:9d:73:7f:7f:1c:ef:01:b8:
         32:10:7e:24:3b:81:ab:ed:e4:5c:8d:52:b5:cd:5c:69:fd:7e:
         86:61:79:98:11:02:90:2e:b9:57:52:48:1f:13:e9:b6:ff:ed:
         af:58:8d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:39:58 2026 by rpki-client