Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
File:                     J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json)
Hash identifier:          WZgsm3rJ6VxiVzJihy6JuXbOWPIxa6Hv3YL49jIbYZc=
Subject key identifier:   E2:D0:B8:22:48:DB:B0:CF:34:41:2A:17:DB:6C:7E:08:60:5A:AD:EE
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Certificate issuer:       /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
Manifest number:          B2
Signing time:             Mon 02 Mar 2026 03:08:39 +0000
Manifest this update:     Mon 02 Mar 2026 03:08:37 +0000
Manifest next update:     Mon 09 Mar 2026 03:08:37 +0000
Files and hashes:         1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: 0iNNjaPmW1bDzcr4kxuo/kZDgsIdehN6mVnDnYd+nzE=)
                          2: B0B186606D4D11F0A6237A81C4F9AE02.roa (hash: RmZJEnExUw2WVaDlvDUuaFpjpoieH5GbsGF3juvTi9A=)
                          3: E55629C4DFEF11F083E035D2586F56BC.roa (hash: sPWi5FiDO7fUcbp/+HtV4DEa+QjOMwHk89p0/p7kf+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
                          rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
        Validity
            Not Before: Mar  2 03:08:37 2026 GMT
            Not After : Mar  9 03:08:37 2026 GMT
        Subject: CN=69a4ff37-1a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:63:56:d9:f1:00:a1:c2:57:a9:4a:06:76:
                    07:24:fc:94:45:cc:3e:42:99:34:0e:c7:dd:62:bc:
                    d2:64:3d:f6:d5:ae:0e:68:f3:3c:0e:af:80:b6:af:
                    6d:33:e7:e1:bd:8e:38:2c:9a:a0:3b:6b:9f:bc:1c:
                    9a:24:67:9b:be:f5:9f:d1:f9:75:ed:43:ee:d2:10:
                    bd:59:ef:bb:d4:23:1a:1b:a2:47:90:77:ca:fe:46:
                    e6:8c:83:9c:19:d1:37:4f:c5:00:6a:c9:59:f7:51:
                    e5:f7:e7:03:0e:1c:53:1a:1d:a9:0f:c4:bc:bd:0f:
                    02:94:14:b4:dd:22:07:a4:98:f2:1a:1e:28:b3:fd:
                    27:83:3e:23:20:9b:80:ea:28:6b:f4:70:02:0c:1a:
                    35:c3:e7:46:55:59:87:32:15:dc:ee:c5:a8:fa:75:
                    b3:dc:2f:70:2e:c6:96:cf:d0:12:53:43:7d:14:77:
                    d0:63:a6:16:3b:59:a6:66:71:b2:a5:57:b8:ff:57:
                    2f:05:8a:f5:0b:bd:3f:2d:73:a6:41:98:84:96:1d:
                    65:84:e5:5a:43:90:00:c4:64:3e:06:1b:72:3e:34:
                    f2:91:50:05:0f:0f:d8:3f:ab:29:01:50:2a:ab:50:
                    bb:6f:f1:63:56:be:25:45:fa:99:8e:45:cc:73:e3:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D0:B8:22:48:DB:B0:CF:34:41:2A:17:DB:6C:7E:08:60:5A:AD:EE
            X509v3 Authority Key Identifier:
                keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:85:66:9c:26:b3:8e:c1:a9:da:8d:6a:00:17:85:5d:d0:42:
         5e:bd:04:b2:60:e2:b4:26:d6:39:1c:aa:e0:ad:94:a4:c8:b0:
         c2:cd:69:a6:b1:8f:06:8e:39:85:ac:65:3a:94:a0:44:d5:b5:
         01:72:83:f4:d2:0b:83:f5:ba:73:dd:3e:d2:61:49:74:00:32:
         c3:7a:87:fb:88:7f:d9:98:c4:71:fb:03:0d:17:e2:6e:50:97:
         5a:b9:de:fd:77:34:73:d8:2a:b2:e5:a1:29:f1:d1:36:af:e6:
         27:f3:00:ad:89:e5:ef:7d:63:f1:c3:e2:ce:19:3d:f1:a2:37:
         8b:31:dd:09:21:76:d6:60:6a:b3:d3:99:89:7f:1b:c3:1e:b3:
         de:b9:f9:ac:aa:ac:91:71:74:37:8c:5d:3d:64:c6:0e:54:54:
         bb:de:32:c6:d9:bb:f1:b6:f5:55:23:18:1e:4c:a2:31:5d:85:
         35:f7:7a:b6:56:f1:3f:f0:15:e4:14:39:51:62:1d:ba:e5:f2:
         63:ec:a1:87:dc:7c:0e:55:7e:d1:dd:fc:13:cb:4a:89:ba:65:
         37:42:50:4f:a8:29:29:1f:f6:f3:ca:b8:0f:f2:0a:6d:78:e4:
         0f:41:22:be:41:3e:0d:2a:8a:bf:84:fe:c0:75:a4:2d:f9:2d:
         78:2f:e8:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2QUIxMTAvBgNVBAUTKDI3RUI1OTJDOUY3Q0YyMTI3MjVDN0EwMDBFMkY2RDBE
OTZDQTUyMzUwHhcNMjYwMzAyMDMwODM3WhcNMjYwMzA5MDMwODM3WjAYMRYwFAYD
VQQDEw02OWE0ZmYzNy0xYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/hjVtnxAKHCV6lKBnYHJPyURcw+Qpk0DsfdYrzSZD321a4OaPM8Dq+Atq9t
M+fhvY44LJqgO2ufvByaJGebvvWf0fl17UPu0hC9We+71CMaG6JHkHfK/kbmjIOc
GdE3T8UAaslZ91Hl9+cDDhxTGh2pD8S8vQ8ClBS03SIHpJjyGh4os/0ngz4jIJuA
6ihr9HACDBo1w+dGVVmHMhXc7sWo+nWz3C9wLsaWz9ASU0N9FHfQY6YWO1mmZnGy
pVe4/1cvBYr1C70/LXOmQZiElh1lhOVaQ5AAxGQ+BhtyPjTykVAFDw/YP6spAVAq
q1C7b/FjVr4lRfqZjkXMc+MCSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLQuCJI
27DPNEEqF9tsfghgWq3uMB8GA1UdIwQYMBaAFCfrWSyffPISclx6AA4vbQ2WylI1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZBQi83NTgxMDIzMjFD
NTgxMUYwOEM0RTk3NERDNEY5QUUwMi9KLXRaTEo5ODhoSnlYSG9BRGk5dERaYktV
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otdFpMSjk4OGhKeVhIb0FEaTl0RFpiS1VqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZBQi83NTgxMDIzMjFDNTgxMUYwOEM0RTk3NERDNEY5QUUwMi9KLXRaTEo5ODho
SnlYSG9BRGk5dERaYktValUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyYVmnCazjsGp2o1qABeFXdBCXr0EsmDitCbWORyq4K2UpMiwws1pprGPBo45
haxlOpSgRNW1AXKD9NILg/W6c90+0mFJdAAyw3qH+4h/2ZjEcfsDDRfiblCXWrne
/Xc0c9gqsuWhKfHRNq/mJ/MArYnl731j8cPizhk98aI3izHdCSF21mBqs9OZiX8b
wx6z3rn5rKqskXF0N4xdPWTGDlRUu94yxtm78bb1VSMYHkyiMV2FNfd6tlbxP/AV
5BQ5UWIduuXyY+yhh9x8DlV+0d38E8tKibplN0JQT6gpKR/288q4D/IKbXjkD0Ei
vkE+DSqKv4T+wHWkLfkteC/oRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:14 2026 by rpki-client