Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
File:                     jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json)
Hash identifier:          V+akxvGTnOJj8GBQO4IjXP7uErT0HHQEYF4aJzbcqOA=
Subject key identifier:   DD:EE:44:E2:13:AC:B4:57:97:0F:06:0E:65:7C:7D:3C:C0:2F:50:D2
Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A
Certificate issuer:       /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
Manifest number:          90
Signing time:             Sun 01 Mar 2026 08:50:11 +0000
Manifest this update:     Sun 01 Mar 2026 08:50:10 +0000
Manifest next update:     Sun 08 Mar 2026 08:50:10 +0000
Files and hashes:         1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: LqQmjvxf/tAnqhWtE+MXr5PegZRz9/WbTlRXjMCaZrY=)
                          2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: mrvsb1yUmpT+TPzg/icn7UEU7fIbAnYkrcZJuJgVboM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A
        Validity
            Not Before: Mar  1 08:50:10 2026 GMT
            Not After : Mar  8 08:50:10 2026 GMT
        Subject: CN=69a3fdc2-0f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:aa:bc:f9:b1:cd:52:29:1a:5e:00:ea:6a:
                    46:ce:4d:61:a4:b3:c1:c6:a8:d7:55:e9:59:79:e5:
                    c9:56:51:83:76:f8:c4:c2:21:1c:18:ec:8d:37:7d:
                    bf:d8:ef:4b:64:43:63:de:57:54:6b:2b:80:b2:df:
                    b3:0e:c2:f6:9a:57:06:28:57:75:cd:ab:b4:69:16:
                    74:b3:71:a0:09:be:cc:93:f6:b6:05:ab:06:66:31:
                    9c:fb:ff:1b:f6:53:bb:54:83:a7:9b:50:2e:c7:da:
                    a1:c1:0a:cb:4a:7f:e1:a9:a7:e0:82:b7:d7:8f:4d:
                    3d:14:6c:dd:71:5d:1f:3c:d6:78:73:29:69:51:e4:
                    21:72:3b:29:d3:ac:df:9d:3c:71:be:25:6c:ca:78:
                    d6:a6:62:61:5f:8d:72:4e:be:4b:f8:71:9b:5a:48:
                    54:39:f5:e1:04:3a:c5:3f:8e:e1:53:35:78:aa:4c:
                    80:82:3a:a7:7d:ee:38:ac:40:4c:a7:e2:e3:da:68:
                    1d:ca:2f:0e:a0:19:6b:1c:cc:7f:2d:e8:4f:40:42:
                    48:28:13:df:87:b5:a9:ff:87:c9:dc:d1:2d:51:7f:
                    d8:87:bb:8f:e9:c8:13:d7:5a:a8:2d:22:ee:58:c3:
                    34:c8:3f:a2:da:76:31:a0:ac:e9:c2:5f:ce:52:00:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EE:44:E2:13:AC:B4:57:97:0F:06:0E:65:7C:7D:3C:C0:2F:50:D2
            X509v3 Authority Key Identifier:
                keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:21:b6:ed:2d:7b:95:72:27:f3:96:63:cc:89:bc:51:2b:50:
         b8:61:65:35:46:f0:2c:dd:13:f5:0d:0f:59:06:be:ae:5c:1c:
         83:f6:77:56:89:d4:d0:83:a5:9f:53:b7:6e:e5:dd:6c:d1:ad:
         18:6f:ee:dc:6f:62:65:95:25:e2:bc:c5:75:3a:1d:35:ec:91:
         b7:21:d5:27:60:a7:fa:4c:33:76:be:8a:83:85:c1:0c:03:92:
         e3:2c:26:45:fe:72:7e:f1:4f:08:79:d1:df:d6:87:07:f4:82:
         f1:ff:79:08:47:32:1b:0a:90:4c:d3:9b:74:dc:2b:98:57:8c:
         e5:1a:df:f1:d2:b6:80:2c:e6:96:0d:df:97:22:da:98:8a:d8:
         d1:7a:a9:54:58:68:02:d6:47:4e:d0:d6:d7:69:7b:83:79:10:
         ae:04:1c:31:a3:7b:d4:73:36:e0:b1:eb:a5:65:3c:61:0c:9d:
         b7:8e:0d:98:be:44:f4:b7:d0:4b:65:51:bd:1a:3b:83:c3:8e:
         bf:59:75:11:63:dd:fc:62:41:6c:44:c0:86:0b:90:8c:1c:a6:
         c3:2c:f5:21:21:87:d9:dc:00:b7:cb:62:3b:89:58:93:12:d2:
         4c:22:91:4c:9f:25:1e:06:15:e4:e3:7d:17:00:bc:a6:2b:83:
         d1:3c:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:23 2026 by rpki-client