Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
File:                     jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json)
Hash identifier:          rkfV4roSCudyjiPQS9KomYD8YgHiOCilyG3L3x9EqqU=
Subject key identifier:   88:F7:EA:BE:04:77:02:52:E1:FE:52:55:D7:11:67:78:8F:AE:CA:5C
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Certificate issuer:       /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
Manifest number:          016D
Signing time:             Sun 01 Mar 2026 05:47:45 +0000
Manifest this update:     Sun 01 Mar 2026 05:47:44 +0000
Manifest next update:     Sun 08 Mar 2026 05:47:44 +0000
Files and hashes:         1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: QxoOz25dlBcoczslhVemHp2ZickCwj/DxFFGWGBGgrE=)
                          2: 6F09FF784B3111F0AED6945EC4F9AE02.roa (hash: I1sNkwrJ9A9oI4DVJU2qBgFfehpgUx5dO53gjYthp7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
                          rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
        Validity
            Not Before: Mar  1 05:47:44 2026 GMT
            Not After : Mar  8 05:47:44 2026 GMT
        Subject: CN=69a3d301-840c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:0e:98:02:8a:bb:be:b9:a0:a1:e1:8c:60:
                    1d:f5:54:10:70:b5:8c:df:26:45:b8:dc:d6:3d:69:
                    20:10:0d:34:f5:b2:b6:30:5e:d0:fb:e5:34:60:9b:
                    f0:a4:a1:c6:c1:42:22:2c:e2:9f:a3:4e:13:ab:45:
                    09:79:9d:aa:af:ff:65:1f:b0:92:2c:96:03:15:5a:
                    54:ae:be:82:cd:4c:0c:c0:e4:20:21:a1:68:bd:5c:
                    d8:a9:a2:19:19:82:8a:d0:06:7f:37:56:b2:6b:49:
                    19:79:8a:c2:c0:ac:a8:f5:1d:1c:a4:f3:bc:7d:20:
                    e1:63:73:84:99:56:49:77:b7:52:3f:14:e4:9b:a7:
                    9a:36:48:33:2e:b2:2a:61:7b:dd:3a:d7:31:4f:c7:
                    0f:57:99:b8:fe:5b:9a:74:1f:9b:78:f3:cc:99:89:
                    41:09:18:70:7a:74:df:34:1b:17:b2:6c:db:48:cd:
                    10:67:f9:e4:a5:40:d1:da:ce:cb:07:d3:cd:bf:20:
                    60:3d:c3:0e:b1:2e:fe:ee:fd:58:3c:55:52:68:d3:
                    d0:99:c2:72:5c:a0:19:15:f3:52:e6:a7:8a:5b:11:
                    50:cb:fa:ef:3b:42:0b:51:67:6c:ee:15:c3:e6:16:
                    3d:01:fe:73:41:5f:29:c3:7b:a5:98:ae:ce:f2:29:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:EA:BE:04:77:02:52:E1:FE:52:55:D7:11:67:78:8F:AE:CA:5C
            X509v3 Authority Key Identifier:
                keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:66:a9:6c:ce:6b:c8:19:53:14:93:25:61:77:48:8a:ab:2b:
         f6:05:41:4c:3c:ef:08:c3:aa:74:f3:51:21:14:d8:4c:b8:c5:
         ae:12:64:e0:ae:fe:42:4b:57:43:4f:b3:88:75:d4:5a:b8:5a:
         b9:fa:fa:1e:74:71:c0:7f:61:a8:c6:5c:12:2c:2d:e9:03:7f:
         81:5c:dc:23:4a:df:b9:2d:9a:59:9e:8d:f7:7e:c8:96:d0:68:
         fb:f7:44:b8:2e:a9:67:18:cb:8b:9d:8a:ec:d7:e7:2a:05:af:
         af:b4:37:99:d9:f5:31:b6:de:03:d8:06:c4:55:ad:22:24:66:
         0f:68:6a:4d:6f:7d:d4:c7:88:7f:57:94:b4:30:59:db:75:c1:
         a2:47:6f:4c:82:ab:65:29:66:22:f3:7b:91:72:0e:f8:5b:b6:
         bc:c8:9f:ce:97:6a:0c:67:01:30:54:ab:1d:ee:26:4c:4c:c2:
         8d:94:85:9a:49:7a:d0:f4:07:86:72:90:e1:b7:62:c1:0b:63:
         75:c3:69:f4:7a:3a:2d:fe:31:fb:86:1f:29:65:55:fa:98:94:
         16:a1:75:b9:74:3e:95:55:59:a7:15:16:ba:38:0b:af:40:dc:
         49:53:08:d4:4e:26:1c:bd:75:46:3b:ac:86:7d:e2:f1:79:25:
         5b:4f:57:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCNkQxMTAvBgNVBAUTKDhFMDJCNUM0REVCNTNGMkI3MTJGRjA3N0RFMDQ5MDgz
NzVFODEzREIwHhcNMjYwMzAxMDU0NzQ0WhcNMjYwMzA4MDU0NzQ0WjAYMRYwFAYD
VQQDEw02OWEzZDMwMS04NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlR4OmAKKu765oKHhjGAd9VQQcLWM3yZFuNzWPWkgEA009bK2MF7Q++U0YJvw
pKHGwUIiLOKfo04Tq0UJeZ2qr/9lH7CSLJYDFVpUrr6CzUwMwOQgIaFovVzYqaIZ
GYKK0AZ/N1aya0kZeYrCwKyo9R0cpPO8fSDhY3OEmVZJd7dSPxTkm6eaNkgzLrIq
YXvdOtcxT8cPV5m4/luadB+bePPMmYlBCRhwenTfNBsXsmzbSM0QZ/nkpUDR2s7L
B9PNvyBgPcMOsS7+7v1YPFVSaNPQmcJyXKAZFfNS5qeKWxFQy/rvO0ILUWds7hXD
5hY9Af5zQV8pw3ulmK7O8ikBpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIj36r4E
dwJS4f5SVdcRZ3iPrspcMB8GA1UdIwQYMBaAFI4CtcTetT8rcS/wd94EkIN16BPb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8yMTUyMjE4MkU3
OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5dHhMX0IzM2dTUWczWG9F
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUI2RC8yMTUyMjE4MkU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5
dHhMX0IzM2dTUWczWG9FOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYmapbM5ryBlTFJMlYXdIiqsr9gVBTDzvCMOqdPNRIRTYTLjFrhJk4K7+QktX
Q0+ziHXUWrhaufr6HnRxwH9hqMZcEiwt6QN/gVzcI0rfuS2aWZ6N937IltBo+/dE
uC6pZxjLi52K7NfnKgWvr7Q3mdn1MbbeA9gGxFWtIiRmD2hqTW991MeIf1eUtDBZ
23XBokdvTIKrZSlmIvN7kXIO+Fu2vMifzpdqDGcBMFSrHe4mTEzCjZSFmkl60PQH
hnKQ4bdiwQtjdcNp9Ho6Lf4x+4YfKWVV+piUFqF1uXQ+lVVZpxUWujgLr0DcSVMI
1E4mHL11Rjushn3i8XklW09Xvw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:41 2026 by rpki-client