Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
File:                     JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json)
Hash identifier:          rDeFoHbcf578rngglTdMiQyL38tmlWSRVXSdOY8aUrw=
Subject key identifier:   07:40:AA:20:1D:35:E7:57:B6:F1:8D:40:03:A8:C4:4F:D4:D8:C1:F7
Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Certificate issuer:       /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
Manifest number:          6B
Signing time:             Sun 01 Mar 2026 09:17:01 +0000
Manifest this update:     Sun 01 Mar 2026 09:17:00 +0000
Manifest next update:     Sun 08 Mar 2026 09:17:00 +0000
Files and hashes:         1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: ++UYFh3cm8WQ2RPtCnzTGWLWtN9MyFCEfrkNYDhLT+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
        Validity
            Not Before: Mar  1 09:17:00 2026 GMT
            Not After : Mar  8 09:17:00 2026 GMT
        Subject: CN=69a4040c-aee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:d9:03:31:3e:50:c6:8c:bf:86:bb:05:be:
                    45:95:8a:a2:c1:dc:f9:09:cd:d5:7c:2c:64:34:b3:
                    bd:2f:4e:16:2d:2b:18:13:9c:5b:04:85:f5:94:7a:
                    66:2b:97:bc:b1:f3:05:7a:78:0b:91:f1:e3:39:e7:
                    83:cc:fd:4a:f1:f1:c5:7d:e0:d2:95:e5:02:02:fd:
                    67:d0:ff:ec:95:3e:2a:f2:5e:84:6d:f2:b0:6e:c1:
                    26:e5:47:de:fc:49:65:5a:29:ac:81:72:cb:2d:ef:
                    16:ee:1d:3d:8c:f1:05:d5:59:42:de:21:92:42:1e:
                    87:14:66:28:db:8d:a1:0a:27:12:09:b0:b0:b2:ed:
                    04:79:4e:bc:28:4b:e4:58:d8:b6:a6:41:ea:42:ad:
                    84:68:51:12:65:2e:82:c0:31:b6:a9:38:ae:54:63:
                    91:00:b3:cc:13:a4:e3:e7:82:1c:e1:dd:a4:8d:80:
                    14:7c:65:82:3e:9f:81:91:0e:15:47:d5:7e:f7:6c:
                    53:41:14:4a:14:3f:19:37:7f:af:0d:e9:81:32:f0:
                    4a:9e:36:d8:00:53:7e:07:8a:aa:f5:c4:19:95:c7:
                    63:a8:1e:e9:e0:5c:09:90:ff:7c:27:86:8e:a8:98:
                    29:69:61:21:2d:a4:2a:e4:d3:c9:88:02:31:9d:7c:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:AA:20:1D:35:E7:57:B6:F1:8D:40:03:A8:C4:4F:D4:D8:C1:F7
            X509v3 Authority Key Identifier:
                keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:9d:88:a4:7a:db:b7:5f:7c:85:87:44:09:83:10:08:08:
         3f:b3:83:25:a6:b1:cb:b9:ef:48:72:7a:44:f0:59:41:6d:4e:
         52:74:4e:d9:c3:7b:41:46:71:8e:90:5c:b5:a4:ac:de:27:9f:
         14:8c:3c:28:86:f7:37:53:30:e1:77:19:eb:83:14:6b:b0:1a:
         94:af:8c:04:f8:70:33:78:84:89:33:e5:2c:48:54:88:9f:54:
         f8:87:f6:5a:d0:f2:39:b4:2f:ce:c5:da:f8:43:ee:8c:cb:8f:
         1f:c6:0e:0f:3c:79:45:f3:96:fa:83:15:d2:30:e0:94:e9:13:
         5b:f4:e6:8e:ff:ca:1e:5d:7a:a4:cf:ca:29:ba:29:64:ab:ef:
         5a:2c:cf:87:bd:0c:58:67:54:54:a1:29:82:15:17:36:97:43:
         cd:92:ed:d6:82:e8:80:ad:da:cf:05:c7:16:0b:2a:86:b2:b0:
         1a:28:e4:46:8d:44:14:94:a5:59:45:da:d8:57:04:e7:4e:2e:
         7b:e8:8a:57:d5:dc:42:ec:a8:76:60:06:8b:7f:31:b7:0b:f2:
         60:38:bb:d5:21:f3:55:c0:50:28:bb:99:77:49:00:a5:f3:d5:
         ac:cf:d6:be:05:72:3a:5d:5b:29:ac:75:b4:6e:8f:14:6b:e3:
         31:14:d5:c6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
N0MzRjExMC8GA1UEBRMoMjQ2NDI1MDExOTlENkMxREU5NkZBM0ZGMkVCRTY3N0Iw
RTAzMEQxMDAeFw0yNjAzMDEwOTE3MDBaFw0yNjAzMDgwOTE3MDBaMBgxFjAUBgNV
BAMTDTY5YTQwNDBjLWFlZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOe9kDMT5Qxoy/hrsFvkWViqLB3PkJzdV8LGQ0s70vThYtKxgTnFsEhfWUemYr
l7yx8wV6eAuR8eM554PM/Urx8cV94NKV5QIC/WfQ/+yVPiryXoRt8rBuwSblR978
SWVaKayBcsst7xbuHT2M8QXVWULeIZJCHocUZijbjaEKJxIJsLCy7QR5TrwoS+RY
2LamQepCrYRoURJlLoLAMbapOK5UY5EAs8wTpOPnghzh3aSNgBR8ZYI+n4GRDhVH
1X73bFNBFEoUPxk3f68N6YEy8EqeNtgAU34Hiqr1xBmVx2OoHungXAmQ/3wnho6o
mClpYSEtpCrk08mIAjGdfBlBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB0CqIB01
51e28Y1AA6jET9TYwfcwHwYDVR0jBBgwFoAUJGQlARmdbB3pb6P/Lr5new4DDRAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0Q3Mzc0MzdFNzMz
MzExRjA4MzlDREM4M0M0RjlBRTAyL0pHUWxBUm1kYkIzcGI2UF9McjVuZXc0RERS
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSkdRbEFSbWRiQjNwYjZQX0xyNW5ldzRERFJBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
QzNGL0Q3Mzc0MzdFNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyL0pHUWxBUm1kYkIz
cGI2UF9McjVuZXc0RERSQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAdAZ2IpHrbt198hYdECYMQCAg/s4MlprHLue9IcnpE8FlBbU5SdE7Zw3tBRnGO
kFy1pKzeJ58UjDwohvc3UzDhdxnrgxRrsBqUr4wE+HAzeISJM+UsSFSIn1T4h/Za
0PI5tC/Oxdr4Q+6My48fxg4PPHlF85b6gxXSMOCU6RNb9OaO/8oeXXqkz8opuilk
q+9aLM+HvQxYZ1RUoSmCFRc2l0PNku3WguiArdrPBccWCyqGsrAaKORGjUQUlKVZ
RdrYVwTnTi576IpX1dxC7Kh2YAaLfzG3C/JgOLvVIfNVwFAou5l3SQCl89Wsz9a+
BXI6XVsprHW0bo8Ua+MxFNXG
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:27 2026 by rpki-client