Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
File:                     JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json)
Hash identifier:          kzyAymieN64YCz8Rgf1pxBQ4Q12gR+zGsv9uoGXMcVE=
Subject key identifier:   E7:E9:42:72:C4:6C:D2:2E:02:CB:BE:E7:D1:9A:A2:AF:C6:47:42:72
Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09
Certificate issuer:       /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
Manifest number:          B1
Signing time:             Sun 01 Mar 2026 08:26:57 +0000
Manifest this update:     Sun 01 Mar 2026 08:26:57 +0000
Manifest next update:     Sun 08 Mar 2026 08:26:57 +0000
Files and hashes:         1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: d6/BXf63aqG/kBa1ZOO5tIlgNaumNGlb57xlyfIKB5Q=)
                          2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: gLLXVBbnqOuYpmPZP1sg2HQN+ZDT78K787nO1Ano868=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl
                          rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
        Validity
            Not Before: Mar  1 08:26:57 2026 GMT
            Not After : Mar  8 08:26:57 2026 GMT
        Subject: CN=69a3f851-f3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:65:2e:be:e8:46:f0:0a:00:b1:2d:99:b5:
                    42:a7:83:b4:2c:bf:0b:84:d4:16:6f:b1:81:4d:f8:
                    33:cc:9b:26:e3:f7:cb:df:40:d0:24:ee:f0:08:14:
                    7c:6a:77:b3:e9:d6:0b:24:18:bb:bc:e7:4b:2a:c0:
                    a5:43:90:33:b0:fc:8f:9f:b8:cd:70:5b:33:78:b3:
                    ae:67:fb:2b:25:0a:a3:8f:d1:9e:fa:d9:05:e9:b7:
                    02:55:79:87:82:f8:d6:78:92:9c:27:44:22:ba:6a:
                    2a:10:8f:7a:82:4e:a9:e2:1d:b9:a6:8e:bb:da:f1:
                    a9:59:4a:c4:77:2e:26:a3:43:17:cd:60:a9:c7:95:
                    fe:e7:a5:ad:e4:08:0b:df:eb:86:97:21:d3:8b:35:
                    81:ee:96:f5:f1:46:85:d4:93:1e:73:e8:8f:9e:b7:
                    16:54:e9:e5:71:85:82:3c:5b:d3:64:9b:b4:99:ea:
                    94:04:d4:81:94:6f:9f:3d:71:f5:7a:a1:19:f0:87:
                    42:48:e5:0f:20:ea:bb:a8:f8:e7:eb:66:e8:09:96:
                    7a:9b:64:d7:b7:05:56:c7:4b:51:43:92:62:9e:10:
                    b9:cb:b2:22:15:a4:46:dc:fe:4e:95:72:1f:cc:57:
                    cf:ee:30:63:78:59:01:e0:fe:15:57:b8:e9:04:a9:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:42:72:C4:6C:D2:2E:02:CB:BE:E7:D1:9A:A2:AF:C6:47:42:72
            X509v3 Authority Key Identifier:
                keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:78:c3:96:cb:2d:8e:69:25:e6:89:99:cf:21:aa:f9:a7:dd:
         e7:ec:8d:21:44:3c:00:e6:01:48:88:62:9a:2f:ab:ee:32:1f:
         fe:bc:fc:6d:74:7a:4a:3a:15:1e:6e:64:97:80:b8:ac:c8:ef:
         03:fd:de:c1:01:60:15:19:8d:74:b5:8b:76:ac:e9:72:d1:0e:
         4f:25:5a:0e:33:44:e0:8b:37:a2:38:62:68:2e:8a:af:4a:b4:
         ad:25:6a:f3:f1:b3:05:27:cb:9e:79:39:19:bf:12:64:bb:04:
         da:2e:3d:5b:00:d9:22:ed:40:48:f9:5d:79:f2:bc:62:bc:92:
         5e:19:3f:90:ca:ae:80:a8:86:b3:52:9e:bf:8d:9d:ec:20:74:
         4f:c2:45:a0:49:45:65:ff:da:f4:66:cc:d8:3f:64:c9:5c:de:
         08:50:f4:5b:40:01:b5:f0:72:a8:d2:f7:1c:62:39:a5:04:6b:
         16:a5:c5:6b:c6:09:51:6e:90:98:2b:87:40:92:83:57:28:41:
         a7:f9:2b:79:34:fb:6a:e7:05:81:59:9c:ac:22:86:ab:70:a2:
         4d:08:9d:b0:8e:1f:2d:4a:28:95:5b:da:21:69:9c:f5:90:2a:
         a9:93:4c:ad:fb:05:6f:d8:1c:dc:70:3e:0c:5e:19:d8:12:20:
         5a:15:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:55:16 2026 by rpki-client