Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
File:                     JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json)
Hash identifier:          FRdYucLt6jZD7OlMEInv14I8KRCOEoDqf9/v8J9IgVI=
Subject key identifier:   5C:38:B3:D5:46:C5:CD:3E:30:7E:B3:AB:DB:CB:90:04:F3:95:B0:0E
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Certificate issuer:       /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
Manifest number:          0179
Signing time:             Sun 01 Mar 2026 05:45:19 +0000
Manifest this update:     Sun 01 Mar 2026 05:45:18 +0000
Manifest next update:     Sun 08 Mar 2026 05:45:18 +0000
Files and hashes:         1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: Bfr8uigXe2R0/tULQE3UBlvm+7AIpZPhR3cxYA4OESw=)
                          2: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: LRJxPRAmR3JlEgcNd7QBxJ2k/VEc8kHvg4RkNVnDwmc=)
                          3: E608220401A611F1B4D1E4C1696F56BC.roa (hash: lxxNGVx2V93BMBcbJBsNK5SagJ1rX18ykZwSj/NwNJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
        Validity
            Not Before: Mar  1 05:45:18 2026 GMT
            Not After : Mar  8 05:45:18 2026 GMT
        Subject: CN=69a3d26f-65a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:de:88:c8:38:99:b9:53:30:74:f8:8a:fd:
                    71:fb:f8:f7:d7:5c:e7:0f:17:c3:58:5f:6e:31:9e:
                    40:a3:a7:57:df:9c:de:4c:3d:9e:21:0f:4a:5b:37:
                    8d:27:ef:c8:8b:b2:99:82:2f:9a:fe:c8:fe:9d:ec:
                    2d:19:93:f7:43:07:3d:74:47:d5:3f:d1:03:1b:a3:
                    2e:d7:d0:16:4d:79:62:6a:16:b7:09:d5:68:ed:10:
                    49:d4:2c:31:99:62:09:79:76:1e:e5:6d:a2:95:62:
                    d1:6b:bd:a5:25:f2:dc:d9:b7:22:c3:dd:b3:8e:eb:
                    43:2e:90:72:be:fa:37:69:8f:28:96:df:11:10:c6:
                    d5:1d:7c:4f:82:17:6b:27:83:78:08:72:42:4e:b9:
                    aa:7b:db:96:2d:b4:61:8d:be:84:51:bf:43:ab:01:
                    48:6c:14:92:ba:5e:9b:6c:4f:27:19:87:7e:f2:d1:
                    40:2b:e9:29:b2:fe:77:e7:d3:a6:ee:30:f2:d4:23:
                    86:7d:04:29:86:c8:f7:7f:98:a1:b9:9b:c7:08:4b:
                    3d:c0:fc:3e:35:d2:4f:52:b4:2b:dc:8d:3c:e2:f4:
                    01:b9:6f:1b:d2:ee:9b:ea:1b:66:14:7a:e9:c8:ad:
                    1a:cb:66:91:60:d7:b3:53:ca:0a:b8:26:a5:b8:d9:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:38:B3:D5:46:C5:CD:3E:30:7E:B3:AB:DB:CB:90:04:F3:95:B0:0E
            X509v3 Authority Key Identifier:
                keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:47:da:54:56:2f:3a:eb:a5:05:39:34:b0:02:55:42:2f:1a:
         48:dd:5e:d2:66:bd:89:d0:89:ed:30:94:4b:9e:32:68:c5:5c:
         4d:0a:bb:5b:aa:11:a0:43:1e:55:e2:f1:1f:74:96:c8:47:7e:
         9c:c5:61:68:81:3b:fe:b7:cb:d9:1b:1c:26:81:fe:22:f8:8e:
         91:de:62:47:a9:38:71:a6:42:fd:ee:d9:7d:82:84:36:37:0e:
         f3:aa:85:ad:f0:63:9c:4d:3d:6e:8b:b0:03:81:27:e4:d2:d1:
         18:62:5e:05:45:c3:fa:52:7d:9e:98:1b:ef:d1:1f:a4:1a:50:
         f4:46:87:78:76:2b:4c:b1:b4:e8:c9:ba:f6:30:fe:53:8b:6d:
         cb:72:f0:2b:1f:44:4d:e3:f8:67:af:0c:c4:c0:75:4b:3c:a8:
         99:96:51:71:24:96:7c:40:34:b9:96:8a:9b:d1:9e:0f:8a:f5:
         69:d8:46:a9:bb:19:8e:c6:3f:bf:e8:96:c5:0d:67:de:fd:8e:
         a4:fb:ec:a1:8a:90:22:18:00:f7:02:f2:e2:98:d4:0a:88:de:
         28:fb:21:f5:c7:96:36:4b:e5:4d:16:0c:c8:3a:16:56:1a:da:
         b9:27:71:7a:6d:20:32:96:fc:5f:e4:ee:36:73:88:a6:70:20:
         56:80:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:25 2026 by rpki-client