Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
File:                     jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json)
Hash identifier:          opTLqi+N+DSQaQbhmDabRDpIpx41S3ihUlYNXAX0lmk=
Subject key identifier:   35:EB:C2:2C:9A:D0:8B:DD:C4:24:DE:E1:2B:39:1C:4E:EE:00:B4:47
Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B
Certificate issuer:       /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B
Certificate serial:       0BAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
Manifest number:          0B97
Signing time:             Mon 02 Mar 2026 02:47:18 +0000
Manifest this update:     Mon 02 Mar 2026 02:47:16 +0000
Manifest next update:     Mon 09 Mar 2026 02:47:16 +0000
Files and hashes:         1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: FiiN3+dIbYI8mWVUAhVdsKswXKPkssfVBBw3l2lJSpc=)
                          2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: neCLfyxIjMZ9iLTUkHrvwgW7vvikcScIptIMYyahCcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl
                          rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2988 (0xbac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B
        Validity
            Not Before: Mar  2 02:47:16 2026 GMT
            Not After : Mar  9 02:47:16 2026 GMT
        Subject: CN=69a4fa35-e4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:0b:6d:5d:21:00:27:74:f9:0a:00:ea:63:
                    6b:55:44:15:05:e3:7c:48:e7:99:c1:ad:a9:e5:b1:
                    8f:55:34:8c:09:f4:d5:4f:79:7f:81:6d:2d:94:3a:
                    1f:8e:c4:fe:1d:06:a0:5b:57:49:4c:a3:60:80:81:
                    cc:13:1d:da:38:ab:dd:61:4a:2e:77:02:f7:7d:8a:
                    8a:cf:ef:60:23:62:e1:96:04:20:d6:ca:3c:d5:5a:
                    1c:07:82:2b:cc:b9:11:84:60:61:5f:1f:9a:88:53:
                    f0:40:4f:4f:aa:22:82:73:ca:28:5e:b7:04:85:83:
                    38:a9:b4:0e:01:12:ac:7c:56:85:78:01:d6:4e:3a:
                    df:90:52:b4:a9:0f:ab:f9:ef:64:7e:8b:5d:62:5a:
                    1e:50:7e:89:3e:03:00:56:5f:83:3f:e3:d9:03:21:
                    04:ee:0d:cf:11:3f:e9:4f:1f:f0:d6:48:86:fa:ec:
                    f1:b0:bd:c6:bc:80:89:5f:92:87:82:e1:ad:9a:57:
                    9b:b5:b7:4c:06:0c:2f:27:45:32:57:a0:d6:a2:bc:
                    ef:4c:dd:36:65:4f:df:cd:8e:04:f2:30:a4:9d:49:
                    4c:64:6f:20:da:f7:4c:9f:c2:28:d5:7a:86:ff:ba:
                    1a:52:27:03:27:7a:d4:2b:2d:0f:50:1e:ef:59:a2:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EB:C2:2C:9A:D0:8B:DD:C4:24:DE:E1:2B:39:1C:4E:EE:00:B4:47
            X509v3 Authority Key Identifier:
                keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:a4:c7:c6:25:b3:82:a9:ab:b9:6f:64:bd:75:b5:21:41:
         9e:16:ab:98:a7:1a:04:88:6b:db:3d:d4:c8:fe:22:e6:b4:41:
         cc:bf:83:f3:e4:c0:a1:8a:c2:3c:49:d4:80:2f:d0:bb:07:10:
         ad:a6:0e:7a:cc:56:ca:6c:fb:5b:f7:59:82:7b:15:9a:c5:3d:
         b3:e6:68:bb:a2:36:e1:ce:3b:11:f4:23:b9:92:71:48:d6:bd:
         81:cb:fd:59:cf:16:c7:35:a4:f4:5a:88:dc:6c:df:ad:47:f9:
         97:03:d1:25:9e:9f:e5:18:0f:df:dc:ad:29:ba:25:50:ea:de:
         f6:1e:0f:24:bb:2c:14:88:07:7a:96:1c:93:96:7f:c7:98:a0:
         d2:9c:74:fc:b9:05:55:02:e6:fb:98:1f:4c:d5:52:81:e1:e7:
         3b:11:79:e2:c1:48:e4:39:13:69:e6:02:51:16:da:3f:ff:50:
         ca:38:b9:59:1c:fd:e7:3d:78:da:91:8f:c9:1f:bf:14:88:da:
         e7:ae:8c:6d:8a:d0:0f:b2:bb:73:99:82:7e:a1:1a:88:2a:ee:
         78:9c:fe:7a:cd:ec:56:b9:72:fe:8d:fe:46:9d:d2:3b:42:12:
         e2:73:58:e1:08:a5:48:45:33:85:17:91:b9:59:b7:c1:8c:b7:
         76:6b:dc:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF
RTAwNjI1NEIwHhcNMjYwMzAyMDI0NzE2WhcNMjYwMzA5MDI0NzE2WjAYMRYwFAYD
VQQDEw02OWE0ZmEzNS1lNGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstcLbV0hACd0+QoA6mNrVUQVBeN8SOeZwa2p5bGPVTSMCfTVT3l/gW0tlDof
jsT+HQagW1dJTKNggIHMEx3aOKvdYUoudwL3fYqKz+9gI2LhlgQg1so81VocB4Ir
zLkRhGBhXx+aiFPwQE9PqiKCc8ooXrcEhYM4qbQOARKsfFaFeAHWTjrfkFK0qQ+r
+e9kfotdYloeUH6JPgMAVl+DP+PZAyEE7g3PET/pTx/w1kiG+uzxsL3GvICJX5KH
guGtmlebtbdMBgwvJ0UyV6DWorzvTN02ZU/fzY4E8jCknUlMZG8g2vdMn8Io1XqG
/7oaUicDJ3rUKy0PUB7vWaLhLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXrwiya
0IvdxCTe4Ss5HE7uALRHMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0
ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi
Q1VqN0tWOE1wUV91QUdKVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK/Wkx8Yls4Kpq7lvZL11tSFBnharmKcaBIhr2z3UyP4i5rRBzL+D8+TAoYrC
PEnUgC/QuwcQraYOesxWymz7W/dZgnsVmsU9s+Zou6I24c47EfQjuZJxSNa9gcv9
Wc8WxzWk9FqI3GzfrUf5lwPRJZ6f5RgP39ytKbolUOre9h4PJLssFIgHepYck5Z/
x5ig0px0/LkFVQLm+5gfTNVSgeHnOxF54sFI5DkTaeYCURbaP/9Qyji5WRz95z14
2pGPyR+/FIja566MbYrQD7K7c5mCfqEaiCrueJz+es3sVrly/o3+Rp3SO0IS4nNY
4QilSEUzhReRuVm3wYy3dmvcng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:58 2026 by rpki-client