Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
File:                     JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json)
Hash identifier:          ZV3IOssduelQjxbfS6HSuVLnISdS0W6yNhl8hT1+IuU=
Subject key identifier:   16:66:16:FA:B5:EE:CB:71:DD:8F:0E:12:05:28:EA:9D:2D:C7:51:50
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Certificate issuer:       /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
Manifest number:          018E
Signing time:             Sun 01 Mar 2026 05:17:32 +0000
Manifest this update:     Sun 01 Mar 2026 05:17:31 +0000
Manifest next update:     Sun 08 Mar 2026 05:17:31 +0000
Files and hashes:         1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: u2MdeXJknMlj+ZOcBVlnpQjrX2afXCW6fSMaENN0Gx0=)
                          2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
                          rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
        Validity
            Not Before: Mar  1 05:17:31 2026 GMT
            Not After : Mar  8 05:17:31 2026 GMT
        Subject: CN=69a3cbec-9bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:48:c8:db:e6:44:55:ef:ef:3b:19:c9:94:
                    7d:30:1d:a6:08:96:b7:38:5c:cc:25:89:a1:59:02:
                    0f:16:b5:29:4c:6d:58:42:48:1d:4a:0d:39:88:6a:
                    56:5b:f5:a2:b4:53:50:ee:39:42:dd:5c:d3:75:3f:
                    d0:77:66:39:cc:b4:6b:4b:d6:eb:77:a0:cb:de:17:
                    a5:d6:61:33:ce:87:6a:b9:6c:8f:79:95:e0:23:95:
                    18:33:44:2b:e1:59:54:91:a4:50:25:c4:cd:f5:4f:
                    b7:e9:49:21:82:e2:64:35:4c:fd:6d:e6:ce:bd:08:
                    dd:21:23:49:4d:ee:52:64:24:90:06:19:03:36:09:
                    72:f2:d1:5b:84:90:86:bf:f9:b5:72:63:1a:86:cd:
                    7a:fe:85:11:e6:6b:97:e0:06:d6:12:c7:4c:25:19:
                    dd:e3:3d:69:f5:97:8c:af:16:99:01:9b:ab:40:d7:
                    ee:79:3b:ee:9f:98:ba:1c:1f:58:6b:9b:9b:7f:2d:
                    4c:bd:9b:80:18:1b:0a:20:53:4d:b4:0f:02:06:a7:
                    8f:bb:59:ad:d0:b6:72:28:5f:f8:9c:b9:65:57:2c:
                    ee:ce:cc:74:7b:cb:2f:8b:6b:f9:0d:aa:27:1d:3d:
                    b1:d3:ef:a6:d0:2a:fa:2d:f1:c3:4b:1f:9d:5d:0d:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:66:16:FA:B5:EE:CB:71:DD:8F:0E:12:05:28:EA:9D:2D:C7:51:50
            X509v3 Authority Key Identifier:
                keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:80:47:1b:ce:46:22:ec:75:67:95:02:7c:d7:ed:ff:aa:
         99:ea:f4:85:06:68:f6:34:c6:da:81:77:fe:ce:a9:1c:49:2a:
         7b:75:cb:04:f3:77:0c:8b:04:de:19:b2:74:4f:21:2e:93:91:
         e3:77:f8:53:6f:9b:e3:62:fd:d6:d8:00:9a:44:ae:57:40:7c:
         2a:51:2a:0c:03:a4:50:de:7d:a2:a0:ca:bb:fa:51:6f:29:3b:
         f2:94:54:62:53:8b:b9:77:9b:d6:e9:8e:d5:96:3f:ac:a8:29:
         d6:9b:86:d3:2d:91:77:c3:45:af:1c:d3:a2:c7:7e:79:27:9b:
         ff:62:41:c1:6e:18:ab:10:0d:35:29:c6:68:74:41:5d:4c:12:
         a8:90:69:92:b4:7f:ac:38:31:ef:cf:95:67:7e:3a:c4:f0:1d:
         be:f7:40:fa:4d:04:d9:1c:bd:c3:c2:b3:b4:53:ec:87:0b:da:
         7a:d6:62:12:dd:ca:03:d0:4b:c5:38:28:fd:27:d6:03:5c:42:
         36:8b:c1:79:ab:32:f6:60:92:60:a1:6a:3a:bf:45:06:9c:5c:
         c9:36:fc:a7:af:a7:d2:ed:2c:41:bd:0e:39:83:41:07:9d:a8:
         1b:8a:4a:6a:c0:18:fc:17:64:72:a8:77:73:66:bb:4d:e8:22:
         e3:ca:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:46 2026 by rpki-client