Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
File:                     JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json)
Hash identifier:          FAHPWWNRAzBOxLUSzIGp5YO8VsTU++iFo86S5Zw4unI=
Subject key identifier:   D1:AF:8F:9D:18:B0:91:20:79:71:60:93:0A:2E:63:BB:ED:7B:FD:35
Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
Certificate issuer:       /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
Manifest number:          72
Signing time:             Sun 01 Mar 2026 09:13:56 +0000
Manifest this update:     Sun 01 Mar 2026 09:13:56 +0000
Manifest next update:     Sun 08 Mar 2026 09:13:56 +0000
Files and hashes:         1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: yVoc8MpJ5k0yYVJxTkiZr9Z0Zf6EZd/BhvaXuQj4TfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
        Validity
            Not Before: Mar  1 09:13:56 2026 GMT
            Not After : Mar  8 09:13:56 2026 GMT
        Subject: CN=69a40354-6538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:34:f8:94:e9:22:7c:da:80:f6:06:33:a4:
                    3c:7a:e4:21:f5:73:a4:03:fe:4a:b4:7c:9f:b1:10:
                    9a:25:1d:01:92:16:3a:9a:ee:92:82:e8:17:19:36:
                    6f:89:5e:06:d8:7f:86:2f:9b:ea:c5:44:b2:af:19:
                    db:66:cb:63:28:94:ac:ef:d2:02:cc:21:b1:0a:12:
                    17:1f:83:00:df:76:8f:f1:7a:dd:19:82:17:b8:d7:
                    b8:9a:82:be:14:2b:41:cc:5a:9f:01:be:12:a0:79:
                    22:db:e5:3f:90:fa:20:4e:ca:a0:01:13:aa:23:56:
                    67:ca:a3:23:86:c4:01:ef:c3:df:9e:78:73:bf:f4:
                    5a:22:eb:78:37:29:f7:c5:99:f8:2d:a0:5d:8e:61:
                    51:cd:49:4e:e5:b6:0b:f8:fe:14:17:3f:b6:80:43:
                    10:43:03:88:25:f1:17:5f:7b:8d:e0:93:f7:8a:cd:
                    2b:47:17:81:c2:da:6b:46:41:3d:b0:f8:cf:25:7c:
                    67:e4:10:37:d3:11:7d:69:33:2e:44:6d:ec:12:0e:
                    6e:23:b7:ce:d9:86:dd:f1:ac:e4:a1:6a:e9:50:5a:
                    db:8a:7c:96:9a:26:ec:a3:39:b2:75:dc:da:08:04:
                    a4:b8:79:a7:94:01:50:16:cc:45:9e:7b:d7:ab:33:
                    52:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AF:8F:9D:18:B0:91:20:79:71:60:93:0A:2E:63:BB:ED:7B:FD:35
            X509v3 Authority Key Identifier:
                keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:71:db:85:08:10:31:fb:cc:a7:d9:0c:98:6b:47:c4:ed:ae:
         fe:dd:f1:9c:28:b4:2f:e8:ae:8b:5a:c6:48:f1:60:0d:a6:c1:
         26:7d:98:52:e2:80:1d:61:a3:90:6a:38:c4:fe:66:05:39:a7:
         eb:b6:b2:b4:af:4b:1e:05:01:4c:f2:72:1a:49:18:2c:65:94:
         30:88:b7:bc:fe:69:6e:56:76:bf:d2:78:17:79:a9:28:b7:2b:
         89:72:90:be:71:d6:2f:37:1e:e5:45:88:42:fc:09:9a:2c:51:
         a7:f5:b2:6c:9c:c2:13:d2:bf:df:7b:a7:fd:26:a1:cb:03:8f:
         b5:ca:d5:62:6c:ea:f6:3a:fa:d1:56:36:02:26:2f:8e:dc:db:
         35:7d:ce:8d:b4:e6:34:7a:4d:55:1a:01:75:8b:86:d7:97:d6:
         e2:57:99:26:10:ec:bf:a3:8f:d3:0f:95:19:02:a0:7b:d6:a0:
         23:7a:32:5b:4a:09:91:6c:1c:8a:07:98:69:36:a2:a8:c4:55:
         08:89:f8:82:11:b6:e8:d9:8a:8e:a1:9e:22:32:a9:71:5a:d3:
         ec:eb:d5:f4:7b:2f:12:10:c0:15:42:f1:ad:e1:62:ea:ae:71:
         7e:f3:7f:db:8d:e3:79:9d:b3:8f:43:70:6e:96:37:d6:8e:29:
         1b:26:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:04 2026 by rpki-client