Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File:                     juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier:          9F4idz568m88FqvVuDVe1UnXLlzSE9K1tlXxG4dsAXA=
Subject key identifier:   9B:C3:AB:10:03:DC:F4:83:EB:50:BD:39:DD:7F:2F:54:C9:91:C3:05
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number:          021C
Signing time:             Mon 02 Mar 2026 00:24:10 +0000
Manifest this update:     Mon 02 Mar 2026 00:24:09 +0000
Manifest next update:     Mon 09 Mar 2026 00:24:09 +0000
Files and hashes:         1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: ziBaRPkkT/ix+x/SrpxBzfBxfuZRXSaQ7GVBlygVr5c=)
                          2: 45399802215111F0B94CA13FC4F9AE02.roa (hash: zJka1MeJK7lnwqtIr5JF4dvCTJ8BDAuJUIST/U00HkI=)
                          3: FD678F40214E11F095B05918C4F9AE02.roa (hash: dwCv7pQVK29BHwFaFsuGflmejhNgA5PpUoP3YGaDUCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: Mar  2 00:24:09 2026 GMT
            Not After : Mar  9 00:24:09 2026 GMT
        Subject: CN=69a4d8aa-a574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:0f:ab:0c:45:cc:e3:56:8b:40:68:35:ff:
                    ae:08:de:28:fa:a0:c6:df:26:05:a7:6c:a0:f1:cd:
                    aa:56:80:f6:e7:35:6b:b3:99:67:31:10:a9:9c:2d:
                    6f:fb:18:fd:f4:bc:21:59:34:f3:9d:9f:89:f3:b8:
                    72:4b:1e:6b:4b:42:30:6c:7c:ab:aa:7b:63:57:8b:
                    48:3e:4b:fa:34:39:9f:31:21:f4:0c:df:55:0f:cd:
                    f0:57:b4:11:2d:5a:78:9b:c6:20:34:b4:41:5e:0c:
                    27:bd:bc:17:a2:05:c2:19:d2:74:8e:11:9a:88:f7:
                    cd:c2:96:86:1d:f7:ce:62:e2:b1:5d:1c:e8:5b:80:
                    7f:16:cc:67:22:ec:f4:32:a5:f5:d6:29:50:49:1d:
                    bc:07:80:3d:57:98:ff:6f:d6:d0:ec:84:cf:eb:26:
                    77:e1:88:a4:21:c6:e4:df:a9:cf:10:f4:86:d1:da:
                    ec:fb:6e:58:5a:00:d4:23:87:ec:42:90:3a:df:8d:
                    54:db:6e:58:08:ec:6b:2d:12:01:b5:9a:ee:5d:43:
                    bd:77:59:a0:c4:ee:29:c8:03:ea:63:5e:d1:d0:42:
                    ae:5d:aa:36:b2:b4:3e:c7:e1:5f:f2:02:05:ed:1c:
                    bb:50:32:ed:c2:83:78:31:e4:c4:c7:b6:1d:f2:f5:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C3:AB:10:03:DC:F4:83:EB:50:BD:39:DD:7F:2F:54:C9:91:C3:05
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:6f:da:a0:bb:a6:e7:ea:36:83:90:7b:42:90:3b:31:4d:1a:
         f0:ae:99:ac:4a:c6:0a:68:f5:32:a5:af:b2:91:fd:a9:89:33:
         c0:4d:d4:89:b7:60:55:ad:7a:4e:0d:62:98:41:e9:12:73:c6:
         16:79:85:c7:89:27:86:3c:c8:1a:a9:11:88:39:5a:80:f0:e2:
         e3:b5:32:df:f7:cb:2b:e1:e5:4a:37:3d:b8:d0:1b:54:d0:5d:
         14:7f:8f:0e:fc:19:59:f4:11:82:af:79:f8:3e:85:42:3c:c5:
         ec:e4:93:6f:a1:00:f0:7a:81:75:58:61:9c:37:f4:e9:e9:23:
         0a:f4:49:70:3e:3b:f4:da:23:cf:77:98:c2:29:cc:5c:3d:7b:
         3d:de:be:ee:18:eb:b5:55:3c:89:a4:af:84:69:61:ea:de:af:
         85:6d:a6:72:ad:3f:64:f9:44:f0:41:da:b9:a7:e0:ac:af:e6:
         fb:ff:48:9b:a7:44:83:34:d1:f4:7e:11:a7:67:ed:39:d8:93:
         69:f4:71:d8:c7:12:8c:07:69:b2:59:29:b4:42:37:a2:fd:ca:
         73:7d:7c:bf:00:8f:9b:8c:00:b3:76:b4:f3:cd:a4:80:9a:ec:
         d3:c2:06:83:8e:f6:36:77:08:15:32:f7:dd:65:f7:7b:ed:73:
         0b:df:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:04 2026 by rpki-client