Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
File:                     JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft (raw, json)
Hash identifier:          Egyvppu0wl3gCUr958gUm+m6G3WGGIAslltLrle3O4E=
Subject key identifier:   BB:42:EE:B4:E1:1F:44:B0:73:2F:D5:AB:5B:F4:B9:2D:70:DE:D7:7C
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Certificate issuer:       /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
Manifest number:          0127
Signing time:             Sun 01 Mar 2026 06:42:48 +0000
Manifest this update:     Sun 01 Mar 2026 06:42:47 +0000
Manifest next update:     Sun 08 Mar 2026 06:42:47 +0000
Files and hashes:         1: JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl (hash: cGICb1me93fcQsg3MZV6vxh7XUEIQl/1ZT+IDeRCwM0=)
                          2: DBAEB8B0ABF011F08F2FF00BC4F9AE02.roa (hash: rS9gJ5dHOcFo/QtTZrIHsBcOteDby1Px5VxrL6U26Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1FF1, serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
        Validity
            Not Before: Mar  1 06:42:47 2026 GMT
            Not After : Mar  8 06:42:47 2026 GMT
        Subject: CN=69a3dfe8-0c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:f2:44:4c:28:13:33:ed:e3:b7:83:ed:9a:
                    d3:3e:68:9e:80:0b:cf:29:4b:c6:22:1f:d5:ac:99:
                    e1:1c:33:5c:85:2a:9c:f7:c7:91:cc:9d:bf:f3:e8:
                    bd:d5:fa:e3:4e:b6:d1:3e:84:24:7e:61:9b:43:4c:
                    40:e8:33:7c:51:db:55:c8:0a:2a:a5:03:5d:59:c0:
                    ba:95:f2:5d:a1:4f:55:39:b3:95:ff:6c:94:e1:48:
                    68:43:83:1d:fa:6d:c8:63:00:25:d9:84:05:06:95:
                    54:67:75:08:1d:2a:fa:02:b6:95:57:89:11:b5:8e:
                    9f:b4:99:9a:14:4c:7e:9e:1b:32:bf:6b:2a:c6:6e:
                    2d:88:8a:3f:83:cd:de:24:4a:5c:20:12:6d:52:68:
                    f3:e2:7e:73:f8:ff:5e:70:ab:09:a5:ca:b1:d1:8c:
                    bb:2d:42:78:ea:18:8e:cf:e6:c8:27:d3:c3:29:87:
                    0a:93:7f:2b:ef:48:4a:32:01:27:9f:5b:e8:a4:3a:
                    ab:68:48:85:08:9b:ff:1f:e5:cf:0b:9b:96:26:04:
                    98:de:90:ac:62:c4:00:8f:59:4d:21:dd:df:8e:56:
                    06:f2:17:d3:a3:e0:68:74:09:6c:b0:bf:a7:cb:51:
                    3e:db:2b:07:a4:66:6c:4a:d5:44:0c:41:2e:a1:74:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:42:EE:B4:E1:1F:44:B0:73:2F:D5:AB:5B:F4:B9:2D:70:DE:D7:7C
            X509v3 Authority Key Identifier:
                keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:88:bc:31:8f:ec:07:68:f2:a0:78:1f:a4:b2:0b:4d:a5:a4:
         6a:7a:30:17:a1:3b:4c:7b:59:10:46:4d:3a:27:9e:a1:54:9a:
         5d:c1:02:9c:58:84:00:e8:b5:a4:c2:a2:4d:38:4c:15:0d:b4:
         de:4e:20:1b:92:d7:91:3e:45:40:20:9b:83:d4:87:11:31:b1:
         79:db:bd:99:36:e5:51:2c:b4:c6:e5:d0:2c:a1:16:97:da:03:
         2c:6f:ce:ff:87:be:bb:69:d6:89:b7:78:5b:29:3f:85:a3:d2:
         e7:c5:b6:a5:4c:3e:72:a8:63:dd:f8:ce:e0:aa:5e:7f:c4:79:
         ba:98:e4:37:f4:b9:f2:dd:ae:36:2e:5e:49:b8:f9:f4:72:95:
         98:b6:37:0a:dd:79:22:5a:bf:31:5d:41:34:23:ed:50:87:fb:
         b2:b6:85:d1:30:79:4b:dd:4c:50:12:b2:6c:bc:35:c6:fc:7c:
         8b:73:47:28:eb:c9:c7:c2:6b:19:95:08:b7:78:08:7b:73:74:
         cb:a7:a2:e3:3a:bd:ed:16:bb:40:cc:1b:75:bd:4d:20:d7:33:
         92:06:9d:d6:4f:cf:2b:0a:5d:2f:e8:1f:a5:29:cf:12:ef:8e:
         f4:ed:c2:9e:2c:de:75:36:73:0d:ad:eb:78:7f:a6:e8:2d:9b:
         a2:de:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:58 2026 by rpki-client