Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
File:                     sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json)
Hash identifier:          S6dd4+geRUEq8VdeOXDMUn5DJKo/Az4Pi+6nb/YDkD8=
Subject key identifier:   07:B1:A2:BC:04:FE:31:64:8A:C7:B3:47:A5:A5:F7:56:90:B5:0A:4B
Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4
Certificate issuer:       /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4
Certificate serial:       0344
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
Manifest number:          033E
Signing time:             Mon 02 Mar 2026 00:53:29 +0000
Manifest this update:     Mon 02 Mar 2026 00:53:27 +0000
Manifest next update:     Mon 09 Mar 2026 00:53:27 +0000
Files and hashes:         1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: 17BmFMZqrHsVB0Eg6TIJ+fnIRzNrVqi6Db+Ejpggkfg=)
                          2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: Gq0WXZ0cD48tr9fsKq8+09MVpOYTWFXkSjsAuoJgQTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4
        Validity
            Not Before: Mar  2 00:53:27 2026 GMT
            Not After : Mar  9 00:53:27 2026 GMT
        Subject: CN=69a4df89-f1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:b7:61:3c:e7:83:96:6c:71:cf:38:b8:1d:
                    45:6e:2b:c8:c2:c5:d1:c0:22:b0:04:62:c3:bf:4f:
                    70:a3:d1:fe:6f:d0:1f:99:5d:2f:97:fd:7f:6e:4a:
                    98:2f:f9:56:e1:66:31:75:b2:be:be:c1:75:9c:46:
                    cc:07:71:87:52:e8:e6:06:b0:a5:f9:e9:b0:76:52:
                    90:75:4f:d0:86:6f:6f:79:50:dd:22:68:5a:31:92:
                    1c:39:a8:c9:5d:a6:96:6c:7a:06:50:ec:72:7b:db:
                    d2:8d:66:ca:7b:3a:6d:db:c4:00:b4:b5:32:46:71:
                    0f:29:8d:82:ec:ca:d0:7f:5f:1f:e7:d6:c0:41:ce:
                    6a:a7:e4:c4:23:0e:0d:da:45:9e:7c:4f:4c:a4:bd:
                    83:09:11:0b:ed:de:7a:26:97:c7:1e:af:e7:4a:f1:
                    1f:77:8d:55:7a:99:93:f6:29:62:a4:6d:b7:8e:6e:
                    39:63:9b:6c:5f:6a:17:c6:dc:ca:5b:ee:72:66:d8:
                    00:6d:ce:64:19:64:ac:2a:77:a0:7e:cc:9d:98:4c:
                    cb:6c:22:d8:b7:5a:73:e3:4f:89:93:3d:a1:c6:21:
                    2c:bf:b0:aa:93:54:3d:36:b6:09:38:97:ce:84:09:
                    ba:45:28:1a:16:f2:3d:63:66:8e:b2:ba:0a:5d:2a:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B1:A2:BC:04:FE:31:64:8A:C7:B3:47:A5:A5:F7:56:90:B5:0A:4B
            X509v3 Authority Key Identifier:
                keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0d:ac:09:6b:55:ca:1b:50:a3:56:8b:ab:9b:52:5c:44:e4:
         5e:30:10:de:e9:02:32:4b:49:1f:9a:a6:8b:af:4a:1c:d6:3b:
         ad:2f:78:e5:9e:93:2e:4d:88:d2:31:cb:79:e3:fb:9f:de:5f:
         ac:0b:d6:8d:36:61:31:93:36:e9:7f:3d:cc:40:99:3b:f3:d1:
         aa:e0:d5:8a:02:15:10:08:be:28:77:9d:bc:40:b3:8f:ec:4b:
         ae:42:4d:28:d7:30:02:97:b0:af:02:03:4c:d8:ad:9b:a9:46:
         38:37:1c:e9:3a:59:7a:c5:1b:0a:48:60:79:5c:27:72:39:de:
         63:76:08:0e:7e:1f:a6:8f:9c:e1:55:1a:4e:e1:3c:06:4b:46:
         73:99:d8:90:62:f4:00:8d:1f:00:9c:e0:ba:ae:00:44:52:2d:
         a9:a3:1a:62:e4:d2:19:b2:93:ba:1d:c5:8f:4f:82:d1:50:9b:
         af:59:5d:71:25:37:0e:e1:90:ed:16:12:53:19:c7:97:89:e8:
         81:f0:02:2f:3e:a6:7e:58:50:7e:e5:1b:38:6f:b2:c3:4e:5d:
         6a:51:96:f6:21:45:fb:86:a9:47:5b:ac:97:47:e7:ed:e9:83:
         e6:67:2b:55:bd:ae:18:42:8e:63:46:ca:fa:d8:90:2b:7f:3d:
         28:2a:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:44 2026 by rpki-client