Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File:                     JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier:          TQc7dtjouZOa2pNNsNquiJjHZ7nVHhkaQa5eDaqMsAU=
Subject key identifier:   26:84:3D:CE:A4:98:8F:ED:3C:BE:CD:72:75:98:2A:C6:56:7A:94:0C
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number:          03B7
Signing time:             Sun 01 Mar 2026 22:37:31 +0000
Manifest this update:     Sun 01 Mar 2026 22:37:30 +0000
Manifest next update:     Sun 08 Mar 2026 22:37:30 +0000
Files and hashes:         1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: /i4eAOpJhSKktmPDDSYBHtZ/VUl0nLC4UpHPg5QGPLU=)
                          2: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=)
                          3: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: PiF0Yq0k7c1ubFi1TWpAeTouaecHeyV9OElEe5rSja0=)
                          4: 095A440652B311F0B25AA911C4F9AE02.roa (hash: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=)
                          5: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: jPjdXIBf3NMgMD5UHQPW9KHHUUZ/8nHgwptXvEXQtlc=)
                          6: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: sH0rebKAz1i2uxLJ3lNxQCxI30HtfefcB9hmlWfdhcI=)
                          7: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: ZSUAE6GXvhMXOzUCFpPcL+jckqylaJU0zvQbSUoc/Ks=)
                          8: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: bjuPOTMp4pbN0z4iigT4wT7hoa5AOWvrE2nP3yVsJ7g=)
                          9: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: j28A6ymDSsnqrRaPG7HiIgQzlW1p/QQe0p1Ap5wA4ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Mar  1 22:37:30 2026 GMT
            Not After : Mar  8 22:37:30 2026 GMT
        Subject: CN=69a4bfab-e427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:aa:90:5a:8b:30:2d:50:86:87:17:2e:7f:
                    8b:e2:46:63:41:96:0b:78:7b:0c:61:4c:29:8b:b2:
                    c8:4d:cf:c7:50:a7:2a:85:90:e2:f0:64:72:cc:b2:
                    34:24:11:f1:ca:f6:eb:ab:b3:e5:9b:81:77:1a:82:
                    69:10:1d:41:88:53:1a:d9:c7:56:c4:e4:a2:98:0c:
                    3a:b6:04:6e:3c:3c:aa:3b:1e:00:9f:ab:bb:35:bc:
                    f3:f3:9e:5e:c5:bc:9a:c0:a7:98:6e:5d:be:f1:a9:
                    23:43:ec:a6:7f:e2:0d:f9:8f:36:2a:7b:bd:93:34:
                    9b:a8:58:68:1d:04:c3:e4:88:97:d1:25:1b:9a:02:
                    b8:e2:0e:4d:e3:6f:fe:49:3d:39:08:86:3b:2a:4b:
                    53:f0:ed:ae:ce:89:11:48:52:58:33:3d:22:a2:a7:
                    00:42:3e:43:66:f2:e6:cb:b6:79:74:46:13:4f:e2:
                    00:6d:03:9d:21:5d:06:03:33:cf:1b:e7:b0:fe:14:
                    3f:03:d7:1f:63:ff:1b:7a:14:36:17:7e:bc:21:86:
                    56:d7:26:40:bc:12:9d:dd:d4:7c:5a:44:81:5e:74:
                    d2:f2:a9:3c:37:d2:16:9a:6c:ce:69:7c:d8:65:96:
                    66:d6:8a:be:5e:ec:96:83:3e:95:9c:8c:9b:35:74:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:84:3D:CE:A4:98:8F:ED:3C:BE:CD:72:75:98:2A:C6:56:7A:94:0C
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3b:aa:45:d4:25:47:c1:e4:98:c0:08:a5:c9:00:ea:0f:ca:
         c1:28:ba:0e:74:29:d4:a1:28:2b:e4:7f:a4:cf:5c:81:d2:f6:
         57:01:6e:05:66:2a:b8:43:81:3b:7b:68:cf:43:94:70:cf:d9:
         3e:ad:33:6c:2a:2b:0d:b7:7b:80:ea:ee:dc:bc:32:18:f8:2d:
         84:86:a8:f6:d3:bd:1d:39:61:5f:c7:29:00:5a:e5:ca:94:99:
         a5:59:25:95:f8:51:26:39:14:4a:1e:03:f1:ad:02:4a:32:b9:
         8a:50:6b:6a:cb:3f:ac:c4:46:5a:f8:37:7d:e6:35:6e:83:4c:
         d5:90:21:12:fc:5b:e2:ec:0e:8d:97:52:b6:0f:22:9a:7b:8b:
         3e:94:fd:43:86:f4:bb:46:52:49:63:91:e7:c2:d5:94:e0:c7:
         1f:3c:4f:77:4a:50:f2:7e:6a:c0:be:d6:78:07:3e:02:66:37:
         6e:b8:5b:32:d6:46:87:63:f9:71:eb:98:8e:d5:6b:e5:c9:50:
         4a:1e:28:a5:07:46:59:c4:cd:65:62:bd:1f:46:c6:42:52:dd:
         92:a8:72:3c:32:c8:46:b8:21:ca:f2:6d:16:8c:95:05:e1:d4:
         d0:67:3c:db:ee:64:7e:ba:5d:a9:b7:15:2e:01:16:db:58:38:
         fe:8c:06:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3
NzEyRTI3NkEwHhcNMjYwMzAxMjIzNzMwWhcNMjYwMzA4MjIzNzMwWjAYMRYwFAYD
VQQDEw02OWE0YmZhYi1lNDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArm+qkFqLMC1QhocXLn+L4kZjQZYLeHsMYUwpi7LITc/HUKcqhZDi8GRyzLI0
JBHxyvbrq7Plm4F3GoJpEB1BiFMa2cdWxOSimAw6tgRuPDyqOx4An6u7Nbzz855e
xbyawKeYbl2+8akjQ+ymf+IN+Y82Knu9kzSbqFhoHQTD5IiX0SUbmgK44g5N42/+
ST05CIY7KktT8O2uzokRSFJYMz0ioqcAQj5DZvLmy7Z5dEYTT+IAbQOdIV0GAzPP
G+ew/hQ/A9cfY/8behQ2F368IYZW1yZAvBKd3dR8WkSBXnTS8qk8N9IWmmzOaXzY
ZZZm1oq+XuyWgz6VnIybNXQxywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaEPc6k
mI/tPL7NcnWYKsZWepQMMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC
MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84
X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbTuqRdQlR8HkmMAIpckA6g/KwSi6DnQp1KEoK+R/pM9cgdL2VwFuBWYquEOB
O3toz0OUcM/ZPq0zbCorDbd7gOru3LwyGPgthIao9tO9HTlhX8cpAFrlypSZpVkl
lfhRJjkUSh4D8a0CSjK5ilBrass/rMRGWvg3feY1boNM1ZAhEvxb4uwOjZdStg8i
mnuLPpT9Q4b0u0ZSSWOR58LVlODHHzxPd0pQ8n5qwL7WeAc+AmY3brhbMtZGh2P5
ceuYjtVr5clQSh4opQdGWcTNZWK9H0bGQlLdkqhyPDLIRrghyvJtFoyVBeHU0Gc8
2+5kfrpdqbcVLgEW21g4/owGUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:20 2026 by rpki-client