Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
File:                     JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json)
Hash identifier:          QuuBUlvJxQ9VLM1/IHE0nUdoqTOymGyYfpUi3LvWOvQ=
Subject key identifier:   4F:99:6B:7B:54:21:5B:CC:10:92:C8:28:B9:F2:9A:F6:9B:22:90:BC
Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
Certificate issuer:       /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Certificate serial:       135E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
Manifest number:          134E
Signing time:             Sun 01 Mar 2026 22:42:13 +0000
Manifest this update:     Sun 01 Mar 2026 22:42:12 +0000
Manifest next update:     Sun 08 Mar 2026 22:42:12 +0000
Files and hashes:         1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: oLj5/BymK5KG/cY6JkAlwiwOmKmCCCQSJgdY1WeGbYQ=)
                          2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: 7RR7Eg0wKm27NUGXm8j0ljoSWx4fgcR/0JinjGBY2bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4958 (0x135e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
        Validity
            Not Before: Mar  1 22:42:12 2026 GMT
            Not After : Mar  8 22:42:12 2026 GMT
        Subject: CN=69a4c0c4-5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:ec:3b:62:c0:c0:00:02:fb:44:a2:69:79:
                    a0:b7:37:99:3c:c2:26:4c:53:a6:fd:f7:a2:19:9b:
                    ae:dc:46:71:bf:1a:8d:25:8d:5a:3d:bd:5a:b8:bc:
                    bc:d7:da:62:e3:3c:c3:78:e7:c5:e9:a8:b0:15:11:
                    1e:c3:70:32:b6:fa:59:fc:1c:6f:84:f4:7c:f2:55:
                    ec:07:e3:16:bc:a4:2a:34:2c:e7:ee:ad:8d:24:3d:
                    ec:3f:58:66:f5:f6:38:c1:33:00:9c:e2:40:50:a2:
                    94:d2:da:7e:b2:81:72:64:75:40:b6:b2:2e:6a:d1:
                    8d:a9:40:41:8c:b8:65:78:f2:26:51:22:55:e2:37:
                    0c:f7:2e:35:3c:a4:4d:c6:61:9c:04:df:fb:c2:1e:
                    4a:f2:6b:05:bf:27:6b:cf:6e:dc:81:f9:c2:94:f0:
                    9d:56:72:d5:8a:5d:4c:29:be:e6:e0:0d:42:ad:2b:
                    bd:7c:b3:5d:26:b9:7b:78:31:b9:4b:f1:0b:cb:6d:
                    84:4e:18:a5:a4:af:77:4b:16:30:ab:50:14:34:3d:
                    ac:2d:b9:22:7d:3e:31:1f:f1:a8:c5:ee:24:1b:eb:
                    21:25:57:9e:26:84:5b:66:16:4c:4d:21:32:15:d3:
                    f2:ee:b8:df:1f:de:6f:7a:97:f0:49:60:31:a8:28:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:99:6B:7B:54:21:5B:CC:10:92:C8:28:B9:F2:9A:F6:9B:22:90:BC
            X509v3 Authority Key Identifier:
                keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:54:78:e3:39:a2:24:db:c3:8c:31:12:51:d4:9e:2a:66:50:
         7a:d3:8d:fb:ab:4b:f0:67:f6:fa:81:8a:ca:52:ba:36:e1:21:
         60:ae:53:d3:96:e5:3a:9f:27:31:01:bf:41:21:d4:fb:22:b7:
         3e:27:21:b4:52:86:9b:97:0f:e0:ae:84:ac:f1:94:bd:a1:29:
         50:34:37:90:98:67:ab:35:8f:8b:f2:1d:ba:9a:20:40:8a:1a:
         fe:06:6b:00:0f:8b:a2:82:4d:7a:db:a4:21:1a:ba:18:9f:2e:
         86:f1:09:42:6e:a4:06:8a:63:a6:1f:0c:b5:2e:14:81:57:aa:
         2d:83:67:00:18:bb:e0:6e:6f:39:49:69:4e:ac:b9:dd:f8:38:
         23:75:f3:ae:a0:bf:76:3e:25:d8:bc:b5:13:86:85:21:b5:0a:
         4b:24:2a:b7:de:9b:ca:70:1d:63:33:3e:7a:a3:9a:7d:37:1c:
         5b:10:91:52:c5:e8:a0:e2:aa:bf:fd:1a:23:54:09:a8:20:01:
         c9:8a:31:54:d7:53:1b:6e:b5:bd:63:8d:d9:96:43:5e:2f:40:
         3b:54:61:60:7b:65:d3:4d:23:26:a8:90:50:ad:b8:62:df:f6:
         2e:a2:93:2a:7f:fa:97:3b:32:af:5f:3d:16:cc:92:fa:32:ab:
         7d:6f:9a:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx
NDVGQ0Q2NTkwHhcNMjYwMzAxMjI0MjEyWhcNMjYwMzA4MjI0MjEyWjAYMRYwFAYD
VQQDEw02OWE0YzBjNC01NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0JnsO2LAwAAC+0SiaXmgtzeZPMImTFOm/feiGZuu3EZxvxqNJY1aPb1auLy8
19pi4zzDeOfF6aiwFREew3AytvpZ/BxvhPR88lXsB+MWvKQqNCzn7q2NJD3sP1hm
9fY4wTMAnOJAUKKU0tp+soFyZHVAtrIuatGNqUBBjLhlePImUSJV4jcM9y41PKRN
xmGcBN/7wh5K8msFvydrz27cgfnClPCdVnLVil1MKb7m4A1CrSu9fLNdJrl7eDG5
S/ELy22EThilpK93SxYwq1AUND2sLbkifT4xH/Goxe4kG+shJVeeJoRbZhZMTSEy
FdPy7rjfH95vepfwSWAxqCiRGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+Za3tU
IVvMEJLIKLnymvabIpC8MB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG
QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx
SGphV3EzbGkyQ01VWDgxbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE1R44zmiJNvDjDESUdSeKmZQetON+6tL8Gf2+oGKylK6NuEhYK5T05blOp8n
MQG/QSHU+yK3PichtFKGm5cP4K6ErPGUvaEpUDQ3kJhnqzWPi/IdupogQIoa/gZr
AA+LooJNetukIRq6GJ8uhvEJQm6kBopjph8MtS4UgVeqLYNnABi74G5vOUlpTqy5
3fg4I3XzrqC/dj4l2Ly1E4aFIbUKSyQqt96bynAdYzM+eqOafTccWxCRUsXooOKq
v/0aI1QJqCAByYoxVNdTG261vWON2ZZDXi9AO1RhYHtl000jJqiQUK24Yt/2LqKT
Kn/6lzsyr189FsyS+jKrfW+a1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:31 2026 by rpki-client