Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
File:                     jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json)
Hash identifier:          5qVgFzyodGuAfpV5ihtyO9B4cO/Z2c1m9DLrwa8BsA8=
Subject key identifier:   29:C5:93:3B:88:EE:93:90:1D:6C:6A:62:82:11:25:FE:B8:C0:72:4F
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Certificate issuer:       /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial:       0300
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
Manifest number:          02E2
Signing time:             Sun 01 Mar 2026 23:43:24 +0000
Manifest this update:     Sun 01 Mar 2026 23:43:23 +0000
Manifest next update:     Sun 08 Mar 2026 23:43:23 +0000
Files and hashes:         1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: ScdCRbTotMJU4mNzCu50wRGgLC6UCl9rs7dQc5ISIsM=)
                          2: E1870478616C11F0A254E10BC4F9AE02.roa (hash: ftAew0EQNdkbc3/2VDTlGHSmCcRqc+rg4bUvOtG8DsI=)
                          3: 984E33E4E01F11F0913A4E89646F56BC.roa (hash: OcYvm4nslT9HEXifrXrZRqsFAS3xrQM7cYF+95ESEVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
                          rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768 (0x300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
        Validity
            Not Before: Mar  1 23:43:23 2026 GMT
            Not After : Mar  8 23:43:23 2026 GMT
        Subject: CN=69a4cf1c-714a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:75:cc:0b:c0:4d:94:dc:13:ac:6e:66:56:
                    7c:74:bd:cc:05:ed:dc:d2:09:52:f3:ba:da:88:20:
                    95:9f:d3:5c:ff:a1:6c:42:41:86:9f:7b:48:98:ab:
                    98:ca:47:a1:2d:2a:e8:b5:c8:0d:94:d8:17:99:cc:
                    0d:48:63:79:f2:d1:b9:75:be:2b:88:5c:42:00:43:
                    46:f6:d1:57:c1:ef:b8:61:af:9a:41:6b:24:59:93:
                    a5:21:07:0b:11:3b:6e:b9:6b:59:20:32:bb:ec:23:
                    42:83:f3:e8:36:65:7d:18:ce:79:33:1e:ce:94:34:
                    f6:75:cd:ba:cf:34:e9:77:74:c8:2e:b6:19:4a:4c:
                    9b:b9:71:b5:3d:e9:87:54:79:b0:19:fe:7d:35:6b:
                    15:89:59:2b:27:bc:e1:2a:88:1a:89:c1:09:6f:42:
                    6a:02:36:69:c1:d7:c9:2a:65:6f:af:65:6b:e0:79:
                    19:db:8d:0e:3d:07:5d:2a:f4:b2:f5:08:43:47:4d:
                    b8:10:09:9a:49:58:ec:08:4a:91:d2:7b:67:cd:76:
                    7d:77:e1:1c:39:5d:8e:05:14:8e:8e:18:e0:5e:8f:
                    69:e5:fe:1c:85:00:ed:78:f4:00:f8:75:e6:d3:42:
                    be:60:4e:10:8f:1f:9a:09:89:ba:2a:34:7e:e1:ae:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C5:93:3B:88:EE:93:90:1D:6C:6A:62:82:11:25:FE:B8:C0:72:4F
            X509v3 Authority Key Identifier:
                keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:f8:ee:57:71:1a:ac:65:a7:10:9d:c9:e0:c0:09:55:c7:
         0a:17:79:6b:94:c1:82:b0:b5:6a:fa:6b:7c:67:50:49:d8:ba:
         99:7a:45:8b:56:54:26:52:f4:af:c1:ef:d9:8d:6a:5d:b5:d9:
         c2:c6:aa:13:f3:b6:9e:bb:83:78:ae:18:f1:38:93:50:04:4e:
         85:71:e0:0d:ff:6d:5f:4c:bf:ae:2e:bf:83:68:1e:d3:87:52:
         7b:af:9c:14:1a:5a:36:85:0b:ad:35:41:14:31:4e:c9:0f:3a:
         f4:17:a5:8e:1f:26:c9:ef:18:2c:00:54:d4:25:05:bd:1f:f4:
         c0:25:df:c5:ad:e4:88:69:c6:ef:10:bb:9b:f7:79:f6:13:99:
         30:31:a8:2e:2a:45:df:1e:bc:92:4f:26:25:73:fd:32:dc:94:
         56:b5:70:d2:57:40:a3:28:42:e6:f8:7e:41:e3:df:51:cb:3d:
         51:79:65:68:7c:82:9e:8f:0d:4a:2e:97:32:2b:98:3f:b7:8b:
         3e:c5:5c:57:d3:7e:fe:8b:c8:76:22:bc:e6:5b:69:35:91:28:
         d8:d5:50:a4:0a:be:4d:67:c2:05:57:74:c8:9d:f7:15:85:fe:
         9b:8e:ec:81:26:a3:70:06:78:86:7c:82:a3:18:02:71:35:37:
         7f:ba:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:11 2026 by rpki-client