Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
File:                     J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json)
Hash identifier:          9lN/Lf3GpYBkSnb9k0NB6L9uZrZzQ8T1Lf0nO+NzDkE=
Subject key identifier:   DB:E4:9F:9B:2D:83:FE:47:CD:C8:77:C8:7D:48:C1:E1:0D:93:CF:D2
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Certificate issuer:       /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial:       1697
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
Manifest number:          168D
Signing time:             Sat 28 Feb 2026 16:46:51 +0000
Manifest this update:     Sat 28 Feb 2026 16:46:51 +0000
Manifest next update:     Sat 07 Mar 2026 16:46:51 +0000
Files and hashes:         1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: ZE2kcPJznngrDqMlW17OauKuZXefD/Dl+mwrzVsD01M=)
                          2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5783 (0x1697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
        Validity
            Not Before: Feb 28 16:46:51 2026 GMT
            Not After : Mar  7 16:46:51 2026 GMT
        Subject: CN=69a31bfb-8edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:a0:7d:df:85:0e:6d:16:55:af:f2:dc:bd:
                    ba:4a:7a:a6:4a:71:24:fd:f3:c8:76:12:99:ac:e7:
                    b5:ff:c5:d5:45:b6:f9:ba:89:71:62:45:64:95:5d:
                    a2:c0:74:e0:90:8e:2c:56:4c:77:8b:c2:96:c0:99:
                    fb:f0:8b:e2:87:01:81:c7:0d:7a:40:c3:c9:b9:43:
                    07:ea:dd:c4:13:b4:f6:96:13:96:b7:85:b0:57:c3:
                    18:9a:98:e1:0a:95:16:59:3a:54:8d:33:d3:ce:d6:
                    58:a9:23:7a:d8:15:ae:5a:97:b7:75:7d:57:c1:91:
                    27:9e:de:9a:98:c8:d1:cc:5b:f6:7a:f4:e6:48:fd:
                    7a:ef:ab:f0:ac:62:06:22:c6:81:4f:14:b2:04:9d:
                    af:5c:5d:5f:a1:34:95:39:16:7c:9e:e2:02:0f:01:
                    c1:e7:c2:03:40:1f:d6:cf:09:02:d0:fb:e2:1f:ec:
                    57:c1:13:f6:cd:a0:79:38:a4:17:ba:bc:98:1f:10:
                    ae:e6:dd:af:fc:aa:58:55:2f:55:0b:85:1f:1c:31:
                    97:6c:10:6d:f4:49:6b:da:90:5b:39:03:ec:c5:41:
                    cc:32:ae:7f:77:30:4b:1e:e9:e5:5c:22:6e:d8:32:
                    d2:f6:11:a9:0e:ad:ce:e4:bd:f8:51:e8:b8:4f:88:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:9F:9B:2D:83:FE:47:CD:C8:77:C8:7D:48:C1:E1:0D:93:CF:D2
            X509v3 Authority Key Identifier:
                keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9e:e3:8f:73:6e:ec:ad:72:46:9f:4a:7c:07:3e:f8:e0:6c:
         9f:63:c9:a3:32:1d:40:23:b6:0f:db:6b:13:a8:2a:d8:c4:7d:
         83:34:46:3b:e8:6c:89:de:0d:e7:c7:24:6f:1c:9d:bc:ac:61:
         04:68:5f:50:ac:c3:7d:5b:96:9f:d6:f8:fc:ee:c8:66:03:a0:
         c4:99:ec:e2:de:9b:f0:84:9e:50:f8:db:e6:f1:f8:da:fb:23:
         80:fb:8b:72:80:68:22:1f:b8:29:e7:49:53:27:6f:9c:5e:d4:
         34:b9:a7:82:9a:60:76:fa:6b:90:bd:1f:fa:a5:c2:46:3b:68:
         ff:e5:8a:02:e8:f1:fb:1d:ed:f9:0a:a3:b1:6f:12:81:13:67:
         d4:ff:74:58:7f:a5:7f:31:6c:8b:f8:30:a0:a0:13:68:54:77:
         e1:1b:1b:ce:e0:a6:05:3d:6b:aa:6e:b8:d5:92:01:10:38:72:
         8b:84:e0:2e:7b:91:9b:92:95:17:7c:59:a1:fb:5c:fe:67:cb:
         35:e2:7f:a1:81:d0:bb:0c:bc:44:32:48:2f:d5:ae:0f:2f:87:
         b3:de:c0:b7:3f:69:15:89:cc:19:4a:8e:27:02:d5:76:1a:25:
         81:fb:80:9f:65:1e:0f:49:74:1f:82:0b:cc:39:a7:77:fa:bd:
         46:91:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:13:59 2026 by rpki-client