Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File:                     JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier:          YxuGltxNGgp7UqfEle/SwFlU38CpEdOckZZ+hsbGMTE=
Subject key identifier:   22:ED:E2:AF:3E:3B:D6:1F:95:D6:50:4F:B4:DE:9C:12:48:0A:21:FB
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer:       /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number:          85
Signing time:             Sun 01 Mar 2026 08:56:08 +0000
Manifest this update:     Sun 01 Mar 2026 08:56:07 +0000
Manifest next update:     Sun 08 Mar 2026 08:56:07 +0000
Files and hashes:         1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: HHAlUyVqfWwaanPcCQfOnycawZrzSJEBaAx9n9STJ3g=)
                          2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: qCaE67iInJHl1uaOXWUFk7HB/aS48j+fp1lC079yKZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
        Validity
            Not Before: Mar  1 08:56:07 2026 GMT
            Not After : Mar  8 08:56:07 2026 GMT
        Subject: CN=69a3ff28-a2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:2a:61:c1:a8:df:c9:1a:03:4f:77:e7:84:
                    f6:48:84:86:ee:b7:04:93:25:7d:ab:69:3f:e6:07:
                    ed:7e:d3:b3:28:cc:0c:5a:54:72:3c:37:8f:83:a7:
                    5c:56:d2:23:8b:2c:97:d5:37:45:7b:e7:cf:45:ba:
                    e5:6e:14:72:98:3b:b3:75:2a:c4:e0:5b:1b:24:2a:
                    1d:fa:cc:b8:f8:ed:26:5b:70:47:7e:1b:94:e8:66:
                    b0:ba:74:5a:df:a5:b3:01:45:ca:75:02:99:e4:a4:
                    e7:29:19:38:a0:c6:f1:39:99:ea:81:2c:a2:f2:29:
                    74:84:e9:76:b8:50:a5:49:f7:a1:18:df:db:6e:27:
                    b7:9a:15:07:dd:7a:82:e5:ac:9b:89:31:66:45:3f:
                    59:e6:da:f2:7f:7d:37:b2:f3:7d:da:96:91:d5:7a:
                    1d:30:63:13:87:ef:2b:35:6e:35:22:d3:e9:60:09:
                    75:22:ff:9f:18:9a:28:18:42:e9:81:99:83:6a:94:
                    8c:25:9a:7a:27:3e:3a:09:5a:0c:6b:e2:34:cc:ce:
                    8a:b5:7c:40:42:44:31:f1:f8:aa:81:dc:a5:eb:f7:
                    a2:4f:bc:40:da:7f:fa:b3:6b:79:67:80:ca:93:9a:
                    8c:df:91:b3:0d:66:9a:84:9c:7a:bd:de:b9:89:e3:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:ED:E2:AF:3E:3B:D6:1F:95:D6:50:4F:B4:DE:9C:12:48:0A:21:FB
            X509v3 Authority Key Identifier:
                keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:4e:92:3b:54:b8:49:a8:b4:fd:cb:c5:08:dd:d7:54:fa:
         fd:9c:b2:2b:55:1f:f5:21:2a:7f:56:c6:76:4d:a3:dc:f8:74:
         ed:2d:52:79:d7:17:ba:b3:40:11:ff:7a:24:16:0d:51:85:67:
         38:dd:50:fe:32:3e:76:9f:92:9e:e5:e4:36:36:10:98:d8:b4:
         ec:f9:01:67:8b:8a:82:a9:63:fb:93:5b:92:4c:6c:1e:f3:8a:
         e5:62:7a:85:9a:8b:18:a6:ca:24:a9:c7:66:dc:0d:11:35:9a:
         72:10:f6:0f:63:eb:d3:6d:1f:9b:ad:1b:f7:6d:42:1e:1b:f4:
         2b:61:1a:d8:5a:3c:79:68:95:94:1f:ca:1b:0d:f2:6c:e2:0d:
         24:bd:20:7a:1b:19:12:7b:ff:2d:1c:16:40:35:8c:16:40:75:
         76:44:9a:c6:da:78:88:72:32:24:88:30:66:fb:1b:36:a3:9f:
         2d:03:ee:a2:e0:75:5a:f1:b7:4f:b2:5e:31:03:06:cb:5a:ec:
         4c:0b:4f:78:88:b2:d7:8b:71:89:25:7a:73:f6:84:4b:df:e3:
         eb:91:86:49:f6:5f:13:1c:11:4a:4d:3c:e3:26:84:aa:aa:20:
         eb:a6:cf:72:cd:be:1a:1a:08:1c:ca:c0:c1:aa:22:98:83:64:
         cf:41:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:31 2026 by rpki-client