Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
File:                     Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json)
Hash identifier:          QA5mPV0pA0Ax07surT4c64PccfaBRjsw83SRFH+lTEs=
Subject key identifier:   FE:7F:83:02:4D:96:0E:A5:42:A8:4D:53:9C:B7:35:8C:CB:C9:14:39
Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
Certificate issuer:       /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
Manifest number:          0629
Signing time:             Sat 28 Feb 2026 23:19:55 +0000
Manifest this update:     Sat 28 Feb 2026 23:19:54 +0000
Manifest next update:     Sat 07 Mar 2026 23:19:54 +0000
Files and hashes:         1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: 2Fd70TNkllL0aJ5TOaIwoCh2dCcrHZymCZ9HbWjczyQ=)
                          2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: YZoDP7uFEWqnfWm1TYIvs+eX9VTAE2B/+B+GLXbeKaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl
                          rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
        Validity
            Not Before: Feb 28 23:19:54 2026 GMT
            Not After : Mar  7 23:19:54 2026 GMT
        Subject: CN=69a3781b-8d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:18:6d:7e:8e:3a:be:ee:e6:3c:a5:f8:9c:
                    bf:e6:de:5c:12:21:38:f3:89:5d:be:0c:7e:53:32:
                    39:a4:2e:bd:0b:09:cb:3e:3a:45:4d:a5:15:74:00:
                    9a:71:20:d5:ef:ab:03:bf:ad:8e:9a:16:89:ef:75:
                    8b:32:bd:57:d7:54:0b:3b:d2:63:78:3a:e8:d9:96:
                    11:f2:a8:40:b4:7a:dd:3f:12:10:8f:e5:e3:07:f4:
                    8c:c7:81:58:1d:a4:1c:ef:89:77:d7:b6:bf:64:e9:
                    a2:b7:ad:b6:21:2d:94:db:76:0a:9f:43:39:61:f9:
                    4f:bb:46:38:35:0e:98:88:5f:03:81:77:cf:42:a7:
                    8b:fe:cb:f4:d3:56:82:27:b8:96:ea:50:b9:2e:25:
                    e4:08:d1:46:be:71:e7:00:ee:c8:36:3f:cb:ca:a3:
                    4d:ca:2b:23:17:8c:25:47:b9:a7:64:39:9d:23:7d:
                    f1:b1:39:c8:dc:d4:2b:7e:60:64:4f:e0:3c:92:f4:
                    0d:01:0f:92:45:01:83:5a:02:2e:36:8b:ae:82:1f:
                    9b:3e:21:8f:d4:95:c7:2f:42:a8:98:f3:47:de:d7:
                    ec:4c:7d:27:9d:5b:eb:44:de:4d:79:23:ba:74:a7:
                    6e:74:bb:98:fd:42:51:93:a7:3a:c5:55:dd:4f:4d:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7F:83:02:4D:96:0E:A5:42:A8:4D:53:9C:B7:35:8C:CB:C9:14:39
            X509v3 Authority Key Identifier:
                keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:2c:06:36:62:9b:58:f1:88:74:08:87:f1:a1:4e:cc:33:
         20:99:6e:d0:96:62:6f:df:6c:ef:f2:c9:51:79:b5:45:96:7b:
         8b:73:2c:a8:a9:4b:43:98:61:e8:a8:d9:4c:f7:e6:10:09:63:
         8c:f1:51:05:1f:c8:3c:28:71:b0:a6:46:0c:98:5d:71:b5:09:
         91:85:82:a0:fb:03:7f:2c:54:60:dd:b4:1c:f0:c5:d4:d9:19:
         72:4b:95:6b:38:df:f5:40:9f:ca:b1:31:ab:55:ff:42:20:bb:
         c3:61:a1:c5:c5:66:b2:a0:ae:47:84:f9:34:a2:c2:b8:bf:ea:
         94:59:2f:13:b8:70:01:1f:5d:73:4b:32:31:8a:d4:e8:de:fb:
         64:27:ae:db:1f:e8:df:15:d2:06:c3:59:b6:72:c9:bc:1c:ff:
         d2:b0:6c:cd:08:56:54:fb:93:91:bb:04:75:1c:19:6b:b4:63:
         c5:bd:da:54:90:db:52:29:25:51:30:72:c4:3b:38:28:50:92:
         35:1c:d1:ca:41:b3:70:66:a7:95:55:c7:17:77:c7:1c:39:4d:
         78:fb:08:6b:97:5b:88:c0:d3:26:f5:5b:dc:b3:f4:45:d3:ed:
         4f:de:d7:d3:71:22:4b:e5:00:96:6a:24:f7:a3:c2:ae:2c:73:
         fe:2b:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:35 2026 by rpki-client