Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
File:                     jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json)
Hash identifier:          u73nk40UOTiL6e3KSl83SW/H7qepwmg3jBfx7VqUmMw=
Subject key identifier:   8D:A0:87:EB:40:8F:F1:E0:D1:BC:26:F2:79:19:F5:0D:45:3A:31:D2
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Certificate issuer:       /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
Manifest number:          028E
Signing time:             Mon 02 Mar 2026 02:40:39 +0000
Manifest this update:     Mon 02 Mar 2026 02:40:37 +0000
Manifest next update:     Mon 09 Mar 2026 02:40:37 +0000
Files and hashes:         1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: Zg7Miij8ZcC0Jz/+FYbmmLfPn3M6v/72e9rPBaQaIRs=)
                          2: 99E52804462E11ED90035452C4F9AE02.roa (hash: qcEi6yFXe14vxwDIXMsWeAcEI41V5KEYbNBlQcRMfIk=)
                          3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: 3q66unEtiXx6jKcOQRNMynBbEHvMb38v7KWWr1AaGpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
                          rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
        Validity
            Not Before: Mar  2 02:40:37 2026 GMT
            Not After : Mar  9 02:40:37 2026 GMT
        Subject: CN=69a4f8a6-9b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:5c:98:f0:5a:8b:fc:86:c6:bc:9e:03:85:
                    c9:33:f8:6a:ce:63:bd:33:92:17:0a:2b:fc:db:26:
                    98:9f:4b:1a:e8:7a:97:74:45:a8:6c:ca:83:96:e3:
                    01:80:fc:68:3b:2b:3a:29:f8:09:bd:20:57:c7:cd:
                    97:ac:69:4c:ac:75:a8:ed:fb:6c:52:5e:41:6a:2f:
                    f3:c8:38:31:d1:8e:b3:39:37:7c:b8:68:f3:eb:01:
                    53:cc:47:e9:3f:60:9e:2e:11:f7:2b:16:96:bc:6c:
                    b9:53:e2:5d:84:db:5e:c5:cf:3f:90:d2:1f:04:7d:
                    ba:88:79:ef:80:06:a1:bd:10:df:52:1e:01:96:c9:
                    5e:ab:1e:8e:56:88:b9:e0:7e:09:32:dd:7f:dd:d5:
                    62:7d:4d:da:66:34:12:6e:e3:86:c3:0a:59:e3:e5:
                    b9:6d:0a:ba:38:5b:9d:75:af:67:5a:aa:5f:91:5f:
                    0e:d9:ec:15:3b:6e:37:1f:1f:9b:cd:3d:07:5c:20:
                    48:8f:4f:aa:84:96:d9:a1:3f:26:ff:ec:29:06:1d:
                    4a:53:74:79:f8:a9:e8:41:88:f9:5f:3e:e4:0e:41:
                    ca:72:9c:b7:57:1b:d5:f8:c4:7f:61:69:b6:93:e6:
                    a3:42:00:3f:35:8b:f2:43:a3:37:62:da:13:0f:cb:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:87:EB:40:8F:F1:E0:D1:BC:26:F2:79:19:F5:0D:45:3A:31:D2
            X509v3 Authority Key Identifier:
                keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:77:34:07:bd:89:aa:e8:b4:5c:5f:f4:60:c4:1a:43:db:50:
         63:85:f0:75:d3:28:5d:50:80:16:63:cf:3a:47:f2:39:ce:3c:
         aa:43:90:20:0b:57:81:29:f1:8f:2e:7e:bc:9a:d0:3d:4c:1d:
         f6:b7:ee:d9:5d:6e:e7:ed:f7:0f:53:f1:61:56:37:da:6e:48:
         55:4f:e1:47:d4:e6:c2:d1:6c:8b:8a:0f:47:40:88:aa:4f:17:
         46:cf:b7:be:80:3e:96:63:b6:0c:49:c6:60:9e:f9:e7:8c:a3:
         e3:c5:a5:4f:27:c0:fd:60:e9:db:1d:7e:b0:91:90:d7:0a:b0:
         4b:32:b2:69:72:7a:57:2b:50:2e:9a:24:e5:a4:49:8f:b2:9f:
         68:41:e5:61:41:f4:23:58:fb:7f:1c:30:3f:4e:16:75:a6:e5:
         78:8c:6d:d2:b5:5c:3e:a4:60:ac:c3:be:32:c0:3c:fe:f8:ea:
         db:b3:0d:4e:96:c0:b5:98:da:39:64:84:85:e4:65:9e:e4:c0:
         25:41:3e:58:7a:f2:cd:a6:82:db:01:0d:15:9d:18:dc:28:2d:
         e0:6d:44:c3:df:c3:56:6b:15:1c:80:64:86:b7:c8:6f:0e:c4:
         45:35:6e:6b:40:2d:58:b0:77:48:0e:d6:c8:39:4a:f4:6d:46:
         a9:82:2c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:41 2026 by rpki-client