Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File:                     jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier:          ORl0wbISO+eUhSwbyuxGn68m7HVeeRsfkTs061BJoQc=
Subject key identifier:   15:AF:8B:CD:96:92:52:DE:6F:5A:ED:20:9B:8D:F4:C6:95:93:C6:19
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer:       /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial:       0ACC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number:          0ABE
Signing time:             Sun 01 Mar 2026 23:47:56 +0000
Manifest this update:     Sun 01 Mar 2026 23:47:54 +0000
Manifest next update:     Sun 08 Mar 2026 23:47:54 +0000
Files and hashes:         1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: Mp82hnFvWd9qC0ybpbdPdD/gak6VkfLgNVpNlgBtj6s=)
                          2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: /3arRZXVLdrfm4u9cutgJAx+ZHiHzLIvVvAU7Zs/f38=)
                          3: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2764 (0xacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
        Validity
            Not Before: Mar  1 23:47:54 2026 GMT
            Not After : Mar  8 23:47:54 2026 GMT
        Subject: CN=69a4d02b-83ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:8f:bb:58:33:e7:9f:60:5a:40:30:11:d5:
                    0e:a1:15:07:e8:86:89:cb:c2:ac:61:e1:9d:41:1f:
                    11:3f:78:bd:bc:01:80:74:c3:bb:a8:e0:54:6a:be:
                    b3:51:75:19:b7:cf:80:62:d2:bb:bf:4c:b7:43:d6:
                    9e:21:a4:24:20:8e:17:e3:57:60:ae:d5:ef:a3:a9:
                    47:12:d7:f4:52:6f:51:80:21:ab:19:b5:1f:9a:00:
                    27:23:43:e2:c6:95:c1:f2:79:b6:ef:dc:b7:5d:2a:
                    25:93:df:e8:0a:f4:6b:b3:6e:07:0c:a1:79:aa:0c:
                    3f:8b:5e:c1:07:d3:df:4e:c2:d9:19:ee:9a:54:1d:
                    6e:59:17:05:77:81:e4:26:5b:85:cf:d5:29:ae:7e:
                    84:67:81:cf:42:87:08:e0:ef:0d:5c:ca:ad:a4:85:
                    2a:d9:b6:18:6d:8e:f7:29:09:0a:b6:06:b0:21:dc:
                    d8:57:3b:25:58:34:41:18:bd:55:bc:d9:9b:1e:cb:
                    4a:03:13:77:09:94:0c:c6:f8:26:5a:64:d8:5e:01:
                    9b:56:6f:1f:c2:cd:85:ca:ab:e1:ca:62:78:01:a4:
                    3f:2a:1d:72:8c:02:b3:a8:58:13:ed:4c:98:34:7c:
                    1f:a5:52:c9:c9:b4:08:a0:bf:f4:94:75:7a:6a:3b:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AF:8B:CD:96:92:52:DE:6F:5A:ED:20:9B:8D:F4:C6:95:93:C6:19
            X509v3 Authority Key Identifier:
                keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:82:2b:59:eb:79:5e:71:5e:81:08:02:ca:61:9a:be:54:
         24:a9:a0:e0:50:9e:4e:82:7c:61:9b:4b:5d:99:5a:db:a5:82:
         05:7a:d8:3c:8b:19:b0:dc:94:4a:c0:6c:0a:d7:1f:e7:79:43:
         4a:a8:42:16:c3:bf:e8:69:da:d8:38:8a:64:f3:60:31:ff:df:
         03:87:ad:c8:6d:d9:38:78:e4:b9:7f:30:f6:52:dd:ea:82:1f:
         12:19:71:af:75:e9:56:50:fd:ea:18:95:94:82:55:68:f0:69:
         3f:cb:80:f2:0c:d7:25:fd:25:da:02:ae:70:28:7c:fb:26:8c:
         46:78:65:59:59:06:13:2b:26:50:f8:3f:be:10:11:5e:b2:88:
         52:d2:02:3a:16:95:3c:b9:72:b0:2e:6f:21:e9:b5:64:4b:f1:
         12:dc:df:00:49:7e:86:bd:c5:0d:76:ce:d7:e5:98:88:58:98:
         a4:34:fc:7c:4f:aa:d7:6f:62:80:db:77:eb:b1:aa:88:4d:17:
         a4:18:9f:2e:18:41:a6:8d:55:7a:0f:19:77:7d:35:c5:30:0f:
         5d:55:29:71:bd:d3:03:99:b2:88:3f:a0:30:80:6a:1d:32:f9:
         35:ca:e8:81:02:12:bc:3a:b8:f5:ac:56:91:30:df:fa:d4:80:
         ae:48:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:20 2026 by rpki-client