Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
File:                     jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json)
Hash identifier:          b9Z+57IeI/K6RZ3xfbcCVuZTweAXtL+cG9REd0tq2iY=
Subject key identifier:   96:80:27:06:BA:FA:AE:FB:8D:D1:C0:67:A3:44:94:AE:87:3B:25:CA
Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21
Certificate issuer:       /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
Manifest number:          EA
Signing time:             Sun 01 Mar 2026 07:31:35 +0000
Manifest this update:     Sun 01 Mar 2026 07:31:34 +0000
Manifest next update:     Sun 08 Mar 2026 07:31:34 +0000
Files and hashes:         1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: qSQU+pj71IvXWpC/+F6tMm3S5ttFkQGe8EJxNDg9ELo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
        Validity
            Not Before: Mar  1 07:31:34 2026 GMT
            Not After : Mar  8 07:31:34 2026 GMT
        Subject: CN=69a3eb57-c543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a0:c1:dc:c2:bb:53:b2:40:d5:a8:1c:96:57:
                    42:fb:87:03:20:69:82:a5:b6:ca:d3:94:d9:ed:75:
                    12:45:6e:b1:21:0e:b5:6c:b5:08:b1:c7:44:9f:2d:
                    d6:17:5a:81:08:2e:d9:0d:ec:e3:38:29:cd:b5:c5:
                    4b:a2:f3:7b:82:7a:03:6a:3c:f2:29:2f:99:8e:62:
                    ce:ad:03:c4:85:3e:94:c2:fc:77:f3:ba:a0:ee:ed:
                    7f:c7:d8:e1:f1:97:6f:f0:74:2c:86:5e:7f:e3:d6:
                    e3:19:aa:6c:54:20:ed:d7:a9:a9:c5:00:48:f1:2a:
                    42:c8:dc:83:b9:5d:38:45:f1:b6:90:33:ba:17:71:
                    7c:1d:17:44:5d:63:c1:ee:5e:f9:df:e1:1d:e9:52:
                    db:19:69:f6:70:3b:3d:4b:ce:e0:14:2a:38:43:fc:
                    81:d1:06:d1:e5:fa:f3:13:ef:86:22:c7:26:bf:2b:
                    f8:18:1a:65:88:b8:19:90:a8:62:de:47:d9:53:3d:
                    69:b7:7f:a5:40:0d:b8:2a:b1:b7:dd:bb:a3:50:83:
                    79:19:6b:b2:b2:53:a2:8b:44:75:20:1e:15:73:e7:
                    82:18:7a:5d:f8:c1:40:29:8d:81:a1:e6:bf:27:a4:
                    59:fd:5d:7a:77:8d:75:c9:ee:ca:a4:d3:17:62:44:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:27:06:BA:FA:AE:FB:8D:D1:C0:67:A3:44:94:AE:87:3B:25:CA
            X509v3 Authority Key Identifier:
                keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:44:33:8d:50:b8:30:ff:df:21:08:3c:c2:29:1e:89:73:e3:
         16:08:08:e9:d8:dc:97:5f:57:b3:1c:52:4a:eb:6e:30:10:d5:
         60:4a:c1:4c:a1:12:f1:50:a0:4c:58:40:17:4d:6f:d2:8f:40:
         e2:5d:4e:86:60:6a:f1:41:ef:f4:ef:6a:90:db:77:b0:09:c7:
         bb:1c:a2:5b:1e:2b:93:ac:e2:3d:6f:15:a7:f6:f2:74:77:5d:
         b6:29:4a:8c:4f:ad:0c:21:92:ab:3f:1c:2b:da:13:81:fe:22:
         10:c5:f0:2f:02:29:04:2c:22:1f:ba:2e:5a:b0:c9:86:b4:aa:
         a3:84:81:0a:00:61:9f:ee:07:01:c8:34:c6:90:5d:8f:da:5e:
         df:c9:47:8a:d5:a1:41:da:9b:61:4c:3b:6a:3d:bc:04:ba:1d:
         b9:3e:84:63:e1:49:d0:7d:04:f4:8e:2d:0d:f9:0a:05:fc:59:
         94:c8:dc:74:b4:97:26:c7:b0:fb:ae:06:92:7f:f1:ee:11:4a:
         d5:48:93:a7:18:67:1b:bb:4f:ca:ee:37:58:b3:1d:09:d9:45:
         26:62:c4:24:da:72:b7:3c:2a:59:ae:63:ad:56:96:54:8d:20:
         99:a2:91:0d:a9:af:ce:23:8f:aa:e9:50:d3:4c:00:a0:f1:e5:
         81:ce:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:58 2026 by rpki-client