Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File:                     JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier:          NrfTwa+J8g53YZQE0RQONnpniF1i6IYq19pTNdFzucA=
Subject key identifier:   9C:A6:A3:9F:D2:4E:95:38:26:A6:EA:80:A4:40:4A:1C:05:40:D8:B4
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer:       /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial:       3536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number:          3523
Signing time:             Sat 28 Feb 2026 15:18:40 +0000
Manifest this update:     Sat 28 Feb 2026 15:18:39 +0000
Manifest next update:     Sat 07 Mar 2026 15:18:39 +0000
Files and hashes:         1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: LKUUEkk4ggHtX615sA50Z2VdVbJtYcQr7BZrPlJk1lQ=)
                          2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: a03YccLD26+EVq1g9SXKvWZ2v+EmXltyBYT+9f1nANI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
        Validity
            Not Before: Feb 28 15:18:39 2026 GMT
            Not After : Mar  7 15:18:39 2026 GMT
        Subject: CN=69a30750-cc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:93:17:5e:6c:82:51:73:12:9c:cc:cb:b9:
                    69:3b:90:d7:c0:da:ee:e5:f2:0e:8f:b4:4c:35:43:
                    1d:a6:83:7f:de:77:20:79:27:91:7d:d6:77:02:a4:
                    fb:f7:f7:3f:a0:89:21:24:e8:0d:fc:36:e3:bd:ae:
                    98:ed:f7:69:2e:76:74:15:ea:9a:c0:ab:c2:bd:44:
                    31:b5:8e:7b:78:50:3c:43:88:16:39:ed:c0:a2:2a:
                    15:3a:6f:a7:df:15:f1:15:a3:ed:6e:cc:b3:55:a9:
                    35:cd:ba:c6:79:36:d5:cf:48:bf:21:2f:43:34:ae:
                    cf:09:b5:a3:1f:a4:16:f5:68:75:0a:2d:66:e0:a0:
                    97:cf:17:0e:28:81:13:3c:7d:88:93:53:aa:2a:a8:
                    8b:0b:88:09:2e:03:26:c5:0a:45:d4:c9:81:5b:75:
                    27:07:51:e4:bb:b7:f6:72:f5:f9:27:cd:72:64:77:
                    b3:67:3c:55:a5:79:27:de:c2:b6:26:87:b2:1b:f4:
                    ce:51:59:da:9c:4b:2d:e9:72:a7:5f:83:07:b1:9c:
                    f5:07:84:3a:db:f4:00:4f:e7:b1:52:45:ea:b2:f8:
                    c9:71:3a:d0:c2:3a:b2:35:87:3c:34:22:5a:76:ee:
                    96:4d:74:dd:db:7e:85:c9:8a:6b:9b:f6:51:2b:86:
                    d9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A6:A3:9F:D2:4E:95:38:26:A6:EA:80:A4:40:4A:1C:05:40:D8:B4
            X509v3 Authority Key Identifier:
                keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:30:34:5f:38:c1:4b:a6:03:ca:23:29:9c:80:7a:6a:eb:
         65:7f:4d:63:a5:ca:a5:b1:ef:02:26:ae:91:80:d3:b4:55:ce:
         b3:46:1b:11:c3:7e:cc:7c:a2:9a:be:14:a7:4d:00:54:e9:54:
         4a:a6:94:1b:a0:b8:1c:f2:d7:89:b4:b8:74:95:3c:52:00:d3:
         4e:be:01:27:58:bf:5a:63:45:d8:77:d6:6a:2c:86:3c:b0:54:
         02:c8:79:c6:df:86:f6:92:a2:54:14:ee:dc:69:51:74:48:99:
         3b:59:06:04:77:d3:c3:93:68:46:b3:24:03:0e:1a:ad:88:49:
         d2:9c:ec:3f:8b:7e:9d:61:eb:93:e9:95:13:75:58:1d:5c:00:
         0c:4d:5b:c1:8a:79:fa:aa:a0:b2:32:b8:9d:e0:a1:ad:d1:29:
         f8:b5:41:ff:a6:52:37:bd:57:a8:53:bd:75:15:e6:f6:2f:0b:
         70:e9:43:32:15:bf:c4:48:6b:55:60:54:07:1b:2d:b1:94:32:
         42:e2:00:30:1f:c9:d7:04:3c:32:cb:22:6e:30:95:29:44:82:
         23:03:f3:56:67:87:16:f9:a1:e7:7d:21:af:9d:fb:64:6a:ca:
         15:ac:1b:e9:3a:08:d4:73:3a:64:51:2e:ab:d9:5d:bd:fd:0b:
         83:37:dd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:24 2026 by rpki-client