Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
File:                     JLnt5SwDqG4PIShpO2weCock7RU.mft (raw, json)
Hash identifier:          v+DaSimZPVLH9crVMvHMP67AyutVXlttuUrK9S/9UWM=
Subject key identifier:   75:8B:D4:20:5A:D7:A3:66:A6:F7:92:37:5B:10:F0:36:C8:5F:25:F5
Authority key identifier: 24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15
Certificate issuer:       /CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
Manifest number:          02BD
Signing time:             Mon 02 Mar 2026 02:07:55 +0000
Manifest this update:     Mon 02 Mar 2026 02:07:54 +0000
Manifest next update:     Mon 09 Mar 2026 02:07:54 +0000
Files and hashes:         1: JLnt5SwDqG4PIShpO2weCock7RU.crl (hash: V7yfOyBskZPjwrw+hkqqpw9fac/9GjhGSZjpcBX5rcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl
                          rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2AF, serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
        Validity
            Not Before: Mar  2 02:07:54 2026 GMT
            Not After : Mar  9 02:07:54 2026 GMT
        Subject: CN=69a4f0fb-0fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:48:90:6e:05:2b:e0:49:49:4d:1e:ef:93:
                    6e:d8:59:74:d8:a6:ed:12:8c:86:29:3d:71:2f:f5:
                    8e:78:fa:14:44:65:5d:55:99:89:20:fc:44:79:77:
                    1c:e5:06:40:39:0f:f2:98:71:0d:72:fe:20:0a:2b:
                    25:d8:12:73:1f:57:dc:b6:c5:14:0f:d3:f7:2a:73:
                    85:43:17:07:d0:20:19:45:51:ad:6e:07:79:5e:83:
                    cc:25:7b:2e:d7:be:82:08:e6:de:8c:12:42:7e:ba:
                    af:c1:05:57:4a:54:0b:82:18:bf:c0:ae:aa:ce:f1:
                    2c:23:ac:85:ef:62:70:d2:f5:57:a0:8d:a9:3f:06:
                    7b:cf:36:ab:32:41:2c:90:33:10:3e:9b:f8:5b:8b:
                    d6:ad:3d:e9:7c:5b:45:f4:9f:9a:1b:80:24:2b:60:
                    48:b2:af:1d:42:8b:da:0d:9b:1c:31:11:fb:23:d4:
                    21:21:a0:a5:af:d3:c8:c4:77:a5:13:3c:16:7b:7f:
                    68:82:97:7d:1a:14:51:0d:04:ba:cf:60:26:9a:e7:
                    4a:58:7e:66:72:95:a3:4f:7a:db:d5:53:82:be:bc:
                    62:85:f3:23:c8:5d:e5:2c:4a:a6:2e:59:70:71:c4:
                    bf:6d:8a:5f:80:db:b8:d1:1e:dc:71:45:ce:7e:e8:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:D4:20:5A:D7:A3:66:A6:F7:92:37:5B:10:F0:36:C8:5F:25:F5
            X509v3 Authority Key Identifier:
                keyid:24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:bb:e9:40:af:2c:4c:62:c6:8b:c9:1b:71:d1:a5:90:7f:
         ba:0a:69:2a:5f:7d:37:d3:04:24:cc:fd:89:98:93:13:1c:6f:
         44:c8:c3:d2:90:0d:35:74:a6:bd:26:01:da:92:9b:ab:fc:26:
         39:64:bd:f5:39:99:17:6a:f9:e5:38:e6:8d:89:92:f1:a3:21:
         b7:1e:dd:a1:72:24:87:bb:79:69:06:cb:1f:0f:69:51:5d:c1:
         87:87:b3:2d:c0:92:da:2b:66:f3:55:62:19:02:43:28:68:95:
         24:24:60:f2:77:c5:ee:dd:f2:74:a5:54:cf:30:bc:f8:c9:53:
         c3:b0:99:43:ce:33:9b:40:6e:08:1d:2f:6e:46:50:5c:9f:53:
         3a:80:35:78:22:a2:4e:01:15:b4:93:a5:d6:25:9d:42:5a:3a:
         85:2e:e7:4e:f4:ae:2e:6b:ea:b2:8a:45:1d:0c:aa:f3:c9:83:
         95:78:cc:48:de:fd:2e:60:53:45:77:59:e1:6c:ee:9f:0b:39:
         6c:4e:bb:b2:1f:81:dd:00:69:b2:69:32:c5:93:e4:e3:99:6b:
         20:b0:fd:8e:9d:50:dc:25:9b:35:d5:db:e2:bf:a1:7c:73:36:
         f8:9e:e5:b7:86:ab:ac:74:e3:2b:79:05:ed:2c:22:23:bd:29:
         b1:60:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:11:07 2026 by rpki-client