Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
File:                     JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json)
Hash identifier:          oAEIo6R7MsY50g4yjD/7ZBd4RcfoPQCpHH+4PcAWgRc=
Subject key identifier:   2C:38:42:A7:A5:19:C3:F9:3A:5B:0D:8F:42:51:D4:B6:C1:68:CB:D5
Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
Certificate issuer:       /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Certificate serial:       0CF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
Manifest number:          0CEB
Signing time:             Sat 28 Feb 2026 18:17:56 +0000
Manifest this update:     Sat 28 Feb 2026 18:17:55 +0000
Manifest next update:     Sat 07 Mar 2026 18:17:55 +0000
Files and hashes:         1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: zYO5jPJ+mbFhxMLivBBMXh3fMYaPcl8Tlq/hXsGRMm4=)
                          2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3316 (0xcf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
        Validity
            Not Before: Feb 28 18:17:55 2026 GMT
            Not After : Mar  7 18:17:55 2026 GMT
        Subject: CN=69a33153-a0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:a8:be:6c:13:63:81:66:9b:6f:2d:92:eb:
                    70:34:5a:a4:a9:c1:57:41:a8:1e:31:7b:55:9c:c1:
                    33:15:12:2e:7b:08:d2:12:18:33:59:17:74:81:d8:
                    70:39:7f:55:a1:7a:1e:4d:cc:87:88:a6:9c:4f:f6:
                    e0:97:dc:3e:ad:e6:e8:1d:6c:51:ef:22:53:43:ea:
                    ea:29:5d:10:e2:7c:98:f7:e5:3f:c3:33:95:1f:4b:
                    96:38:1c:d0:11:8a:94:47:03:dc:f2:b3:2a:d0:3c:
                    c8:10:2f:b8:42:6d:20:68:be:26:b0:70:87:d8:b8:
                    31:42:a9:f5:f7:81:09:59:96:73:ff:97:39:ef:52:
                    be:ce:11:1c:ae:22:d9:91:e9:72:36:ee:b6:e1:e0:
                    82:d5:84:57:a5:9d:57:13:57:8b:2f:86:ff:56:46:
                    19:c7:bc:93:24:d9:8a:ba:58:8b:a7:75:cf:23:53:
                    00:71:45:3c:62:fd:3b:d8:c0:9c:e6:cc:80:1e:f2:
                    f9:b6:81:e2:d5:2d:8c:80:ff:da:fa:44:48:5d:e0:
                    47:38:04:d2:2c:dc:97:28:27:61:c2:75:ea:f8:1b:
                    3d:4f:1b:94:fe:11:9a:f4:c6:6b:c9:50:03:38:ea:
                    4e:48:2f:12:1d:7e:4c:64:64:9b:85:d7:68:b7:1b:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:38:42:A7:A5:19:C3:F9:3A:5B:0D:8F:42:51:D4:B6:C1:68:CB:D5
            X509v3 Authority Key Identifier:
                keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f6:1a:06:07:ea:5c:4f:54:d3:a9:76:15:30:0e:b5:c2:be:
         b1:fa:ce:22:17:3c:50:08:c3:86:18:f7:39:37:05:f0:a1:4a:
         18:f5:fa:48:c9:c4:1c:b4:4b:5a:0f:e1:9c:99:08:b0:2e:24:
         1f:ee:0d:3b:5e:c4:7e:36:1f:ab:7d:41:28:f8:2d:54:d9:a6:
         61:f4:9a:54:42:f2:3f:cf:fa:9b:32:62:0c:75:aa:60:8a:1d:
         8e:41:f4:e5:4d:17:34:98:ef:bd:a4:92:9b:e9:2a:d2:c9:18:
         5e:eb:d2:41:a2:b4:33:b7:05:87:f4:69:73:d4:59:9f:57:d2:
         8a:8d:6e:0a:85:fe:bb:d1:9a:ec:48:32:bd:98:bc:1f:d4:27:
         1c:5d:1b:2f:3e:16:7b:2a:51:17:04:c4:d8:56:1f:8b:72:60:
         be:56:cd:4d:63:9e:34:a7:54:78:b3:00:48:f4:8e:ea:8e:e8:
         04:9e:1e:bb:dc:09:8d:23:e5:3a:4b:eb:05:7f:02:7e:b5:5d:
         a5:27:75:9c:ae:c9:ca:3b:21:f9:25:46:b7:98:2b:e3:43:ab:
         7a:fb:47:c0:7a:69:42:93:ee:3e:df:1f:d7:ec:b6:5d:e8:e1:
         99:d3:a0:53:3a:7e:17:4a:aa:41:ad:77:8e:bd:f3:34:5a:79:
         b3:96:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:07 2026 by rpki-client