Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
File:                     jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json)
Hash identifier:          9Fp0HWiZ4BbBTANIGeOl7mFreGMz97fdrFUEIm36ois=
Subject key identifier:   05:99:CF:4C:1B:1A:18:32:01:AC:83:E1:80:DC:B6:7A:9F:CB:EA:26
Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
Certificate issuer:       /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
Manifest number:          024F
Signing time:             Mon 02 Mar 2026 01:18:01 +0000
Manifest this update:     Mon 02 Mar 2026 01:18:00 +0000
Manifest next update:     Mon 09 Mar 2026 01:18:00 +0000
Files and hashes:         1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: MHbvEKX16cZFaw7MTeseVr7Z7WZrSRhXYKS6luVBI5U=)
                          2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: OwTmdvXh/fVgIelq52MoT3QNfZLp7zkcbYsPTc6P3yc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
                          rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
        Validity
            Not Before: Mar  2 01:18:00 2026 GMT
            Not After : Mar  9 01:18:00 2026 GMT
        Subject: CN=69a4e549-1551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:7a:d8:94:aa:8b:8f:f0:5f:b6:de:d9:0d:
                    31:b9:bd:94:5f:b5:3e:2a:ab:fe:25:ca:ad:c4:50:
                    c9:1c:88:fc:99:4a:97:b0:79:5c:0d:f9:3e:14:a1:
                    cf:b2:80:6a:f2:cd:ce:71:ff:df:46:23:d2:a9:8b:
                    f7:bd:97:5c:ab:bc:3e:88:8e:16:36:a5:a1:cd:31:
                    27:87:3c:23:c3:2a:01:0d:89:9e:4c:b9:0f:49:70:
                    c8:50:d6:bc:bb:e2:a4:ab:43:67:ab:1a:59:ad:7a:
                    6e:7e:9d:69:ae:7a:13:5e:39:85:e9:4f:82:9e:a3:
                    cd:6c:c5:ed:2a:88:53:aa:df:ed:16:a7:6e:31:09:
                    07:08:3e:2c:15:10:43:08:1c:d6:70:59:b8:61:7e:
                    a1:2a:2f:9a:d4:58:cf:6a:29:7f:72:bf:a0:1c:21:
                    60:6f:c5:b7:d9:77:51:60:62:8a:23:7e:58:3c:21:
                    14:02:63:b5:f9:8c:82:20:61:33:09:48:e9:56:af:
                    72:11:9c:65:68:18:32:a4:08:e2:fe:42:98:34:87:
                    4e:93:85:75:fe:12:af:1c:99:c2:6a:fb:b4:cd:d7:
                    f7:9a:46:4b:63:61:b0:34:f2:dc:1d:65:1d:fd:6e:
                    b2:f4:9d:b1:0c:d2:29:a8:cb:60:d7:b4:3b:78:83:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:CF:4C:1B:1A:18:32:01:AC:83:E1:80:DC:B6:7A:9F:CB:EA:26
            X509v3 Authority Key Identifier:
                keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a0:b2:17:ba:99:15:ad:e5:8a:2b:84:25:3c:4a:e5:79:57:
         36:ba:91:d8:45:13:69:a2:1c:65:cd:01:b8:36:07:67:68:1b:
         a8:6c:29:77:d1:07:cb:7d:5c:8c:d3:bb:a0:78:ce:47:b5:59:
         4b:46:b2:f5:67:ad:80:ec:97:cc:74:a3:ed:10:77:5f:a3:63:
         07:4b:f1:46:28:24:0d:5d:b2:75:a6:63:f5:e6:b2:0c:76:51:
         38:43:1c:73:c5:d1:9e:ac:37:84:31:6b:5b:2a:38:2f:59:c9:
         db:f7:0b:64:85:5b:f4:45:6f:0d:7f:ae:c6:86:07:41:57:d1:
         97:37:7d:e8:97:47:0f:e7:44:32:a5:b9:4f:07:d0:2f:b0:73:
         f1:39:ae:e5:61:3e:eb:2d:b8:df:dc:6a:24:9d:99:fa:2f:3e:
         23:51:df:a0:ee:6f:c8:19:72:92:ed:37:e4:7c:78:60:31:b2:
         05:3a:b2:99:8a:93:09:79:a6:1b:56:7c:ea:de:26:15:60:18:
         4f:78:86:ca:87:16:66:92:fc:bb:0e:18:98:3f:cf:7c:b2:49:
         70:c6:0d:12:ad:15:13:30:dd:46:b5:62:4b:bd:d4:a3:18:fa:
         22:c1:a9:d5:43:46:92:f5:10:39:d0:1c:1f:5c:72:8b:eb:c4:
         2a:4b:04:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC
QjE3NEVCMDgwHhcNMjYwMzAyMDExODAwWhcNMjYwMzA5MDExODAwWjAYMRYwFAYD
VQQDEw02OWE0ZTU0OS0xNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQR62JSqi4/wX7be2Q0xub2UX7U+Kqv+JcqtxFDJHIj8mUqXsHlcDfk+FKHP
soBq8s3Ocf/fRiPSqYv3vZdcq7w+iI4WNqWhzTEnhzwjwyoBDYmeTLkPSXDIUNa8
u+Kkq0NnqxpZrXpufp1prnoTXjmF6U+CnqPNbMXtKohTqt/tFqduMQkHCD4sFRBD
CBzWcFm4YX6hKi+a1FjPail/cr+gHCFgb8W32XdRYGKKI35YPCEUAmO1+YyCIGEz
CUjpVq9yEZxlaBgypAji/kKYNIdOk4V1/hKvHJnCavu0zdf3mkZLY2GwNPLcHWUd
/W6y9J2xDNIpqMtg17Q7eIN0nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWZz0wb
GhgyAayD4YDctnqfy+omMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw
QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN
aERidFU4QTBQT3E3RjA2d2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs6CyF7qZFa3liiuEJTxK5XlXNrqR2EUTaaIcZc0BuDYHZ2gbqGwpd9EHy31c
jNO7oHjOR7VZS0ay9WetgOyXzHSj7RB3X6NjB0vxRigkDV2ydaZj9eayDHZROEMc
c8XRnqw3hDFrWyo4L1nJ2/cLZIVb9EVvDX+uxoYHQVfRlzd96JdHD+dEMqW5TwfQ
L7Bz8Tmu5WE+6y2439xqJJ2Z+i8+I1HfoO5vyBlyku035Hx4YDGyBTqymYqTCXmm
G1Z86t4mFWAYT3iGyocWZpL8uw4YmD/PfLJJcMYNEq0VEzDdRrViS73Uoxj6IsGp
1UNGkvUQOdAcH1xyi+vEKksEcw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:38 2026 by rpki-client