Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
File:                     jhrifbGU-weChRk7vcvnggBVNEw.mft (raw, json)
Hash identifier:          lGKSfk3C+LK6TyweALOBGvbZJ5urJcE+82FMxqssX98=
Subject key identifier:   E9:CE:B4:2C:07:CD:01:44:8C:56:98:E4:26:8C:BD:DE:A1:28:21:86
Authority key identifier: 8E:1A:E2:7D:B1:94:FB:07:82:85:19:3B:BD:CB:E7:82:00:55:34:4C
Certificate issuer:       /CN=A9181803/serialNumber=8E1AE27DB194FB078285193BBDCBE7820055344C
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
Manifest number:          10
Signing time:             Sun 01 Mar 2026 10:36:29 +0000
Manifest this update:     Sun 01 Mar 2026 10:36:29 +0000
Manifest next update:     Sun 08 Mar 2026 10:36:29 +0000
Files and hashes:         1: jhrifbGU-weChRk7vcvnggBVNEw.crl (hash: FG+4p9n1i/AsGP45ruPRyC260KHhuzdLjXkJPjBPOpw=)
                          2: CE3F95CC02B311F18F28F1A63E3D8C67.roa (hash: DAka7fMLV65bGOuwmNjPvrI44LXaBykWyx4PYR3DdH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.crl
                          rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181803, serialNumber=8E1AE27DB194FB078285193BBDCBE7820055344C
        Validity
            Not Before: Mar  1 10:36:29 2026 GMT
            Not After : Mar  8 10:36:29 2026 GMT
        Subject: CN=69a416ad-d308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:28:15:aa:36:d9:d6:e5:b5:71:27:90:8d:
                    93:8f:0f:c9:f7:27:a2:43:09:de:00:80:5d:2d:88:
                    5e:63:ef:0e:26:ea:4f:fa:c9:1c:dc:ab:6a:b9:d5:
                    c5:a2:c6:e4:3c:6f:bc:d5:59:b2:46:bb:e0:fe:d8:
                    a0:02:52:07:e8:a9:44:2e:ca:69:4c:53:f9:9a:c0:
                    f5:a1:54:5c:e8:7d:8f:0f:e4:ca:3e:0e:d2:4c:6e:
                    60:be:70:75:cc:5b:22:6e:b7:a9:c8:55:19:a8:98:
                    3b:11:81:9c:c2:f1:9d:6b:7a:9b:e2:e9:dc:f0:4a:
                    95:d6:4d:ab:86:dc:ef:0d:55:dc:24:1f:22:37:96:
                    0d:9b:49:00:c7:1c:5c:df:74:ff:45:f7:9f:02:f7:
                    06:e3:97:f4:88:ec:99:d5:f3:a5:05:6d:ed:92:bd:
                    de:cb:0a:86:e4:a0:d1:28:52:f9:e5:30:4d:e0:06:
                    be:b0:54:18:58:64:9f:82:c1:74:be:72:4f:5b:bf:
                    87:c6:bd:bd:54:c4:b4:ec:79:8b:7f:10:50:69:3c:
                    91:38:41:79:b9:9c:a9:ec:c1:1d:5e:2b:e5:dd:86:
                    28:d9:f2:e1:ba:ab:8a:f7:a9:c8:7d:8f:f8:39:f1:
                    d8:6a:bc:11:b0:a1:1b:0a:83:f4:98:1c:8a:4e:b6:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CE:B4:2C:07:CD:01:44:8C:56:98:E4:26:8C:BD:DE:A1:28:21:86
            X509v3 Authority Key Identifier:
                keyid:8E:1A:E2:7D:B1:94:FB:07:82:85:19:3B:BD:CB:E7:82:00:55:34:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:81:39:3c:53:ba:95:e7:f6:1c:5a:bb:96:d0:fa:c7:ee:
         0b:4d:ac:18:f8:a8:0c:e7:e5:fd:c3:52:1a:bd:f9:24:2e:24:
         e5:53:b1:54:7f:4c:7d:70:1e:e4:a7:7f:53:4a:c3:0f:f8:f4:
         97:29:35:57:98:c1:6c:5b:31:3b:9a:7b:ab:17:e9:b9:77:e0:
         c7:d4:ed:7d:ae:18:f2:30:5f:2c:be:82:48:10:49:86:bb:0e:
         7c:ab:f0:07:86:01:69:31:bd:9a:39:58:e6:41:4c:c6:f9:e5:
         5c:57:22:dc:11:67:ab:bb:e4:ac:d1:6c:4d:5d:49:86:5b:d5:
         93:9d:10:3d:3c:9a:70:03:9b:e2:8b:a7:6b:2f:4f:11:11:ee:
         38:a0:f8:c4:71:86:33:20:04:7b:ee:1b:5c:b8:48:d9:af:0f:
         8c:71:c8:28:f4:01:ce:92:13:85:53:72:73:e7:a5:3a:09:88:
         9c:b5:00:fc:41:52:43:67:e0:a1:57:2a:16:6e:19:5e:fd:8d:
         04:f0:40:1b:67:13:fd:87:95:2f:be:74:e5:1e:41:95:29:61:
         39:83:db:47:33:da:76:81:aa:14:df:d5:fb:5f:86:e8:fc:a2:
         29:a0:5a:a4:ee:9d:43:04:49:1a:6c:18:9e:01:2b:29:b8:61:
         b3:61:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:29 2026 by rpki-client