Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File:                     JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier:          zmWYYdQGMdMG9ISWxAIvf1UxTL3LBrMl6ZDPnUHsnPk=
Subject key identifier:   21:3E:A3:65:FD:93:13:EB:E1:2D:13:10:6B:D2:2B:71:C3:E4:9E:25
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       2FB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number:          2F9D
Signing time:             Mon 02 Mar 2026 00:28:00 +0000
Manifest this update:     Mon 02 Mar 2026 00:27:59 +0000
Manifest next update:     Mon 09 Mar 2026 00:27:59 +0000
Files and hashes:         1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: +vpe4vPRVc0uZY/LxyzUZfgdsbJyKrcv3rVmR4l/Rnw=)
                          2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: qMI0+qSJUDBOM2XBKVGT0iY5F9iduz0xMqXjCiho+4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12211 (0x2fb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Mar  2 00:27:59 2026 GMT
            Not After : Mar  9 00:27:59 2026 GMT
        Subject: CN=69a4d990-3f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:a2:e2:36:0f:63:45:4a:d5:91:e9:8b:08:
                    0b:dd:cf:d3:39:f6:86:6a:0b:7a:f3:80:50:df:5f:
                    9e:b9:db:57:a5:de:6f:88:cd:7f:47:64:7c:9c:a3:
                    29:a7:cb:71:f8:65:82:fc:ca:9f:d6:61:11:80:e0:
                    b7:ea:1b:1b:90:86:6c:09:21:c6:7b:25:f2:1a:2d:
                    c7:a7:4f:4e:88:e7:b6:3d:57:8a:b5:1a:10:f0:d2:
                    bc:98:1d:d7:a3:e1:f2:ee:17:71:cf:9c:3d:67:77:
                    d1:f8:94:77:1f:38:37:76:b6:f0:75:a5:31:d9:6e:
                    0b:0e:17:5a:6f:ce:65:ba:8c:6f:23:13:32:58:93:
                    a5:e6:90:c0:1a:54:11:22:66:ef:ac:93:91:d8:d0:
                    05:e7:7c:78:1a:42:c3:5c:a4:c7:7e:cc:d2:b4:dc:
                    2e:1b:c1:a6:1f:5d:83:dd:b5:62:31:40:0f:0c:8e:
                    7e:48:d7:a0:b7:9a:e6:43:6c:0b:1d:d0:39:8b:39:
                    27:c1:44:2e:fa:36:93:7f:92:50:cb:5b:f2:25:64:
                    12:e1:a6:4f:4b:e1:13:2a:90:c3:58:da:04:13:a3:
                    ba:44:fa:dd:f8:be:7b:09:9f:72:fb:d8:ec:aa:c9:
                    7f:39:ca:4f:54:77:2e:f8:e6:31:35:43:ea:84:84:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:A3:65:FD:93:13:EB:E1:2D:13:10:6B:D2:2B:71:C3:E4:9E:25
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:ab:e3:dc:de:8b:c9:92:3a:99:ab:f1:63:71:d7:76:ed:
         df:8c:87:59:12:9b:a3:47:3b:e0:96:2e:76:92:b8:32:b2:fd:
         06:2c:3f:ab:c9:41:a3:2a:e7:05:6c:97:98:f3:3e:16:68:6b:
         32:7d:16:fa:99:40:c1:69:40:da:1b:cc:ba:78:9a:c4:c4:fc:
         67:d9:9f:f3:55:dc:98:0a:bd:94:32:f1:d7:80:18:3e:48:c9:
         54:eb:96:57:64:75:aa:fe:9c:f5:20:97:ff:a4:95:98:66:a3:
         00:38:79:ee:5b:9d:fe:fd:d3:b1:71:9f:33:eb:a3:80:b4:1e:
         21:56:b0:9e:69:8b:e6:b9:41:3d:1f:20:08:8d:ec:b5:61:2b:
         8a:4e:70:79:0b:f7:a5:99:c1:7d:76:cf:70:d8:c3:9b:4e:a6:
         56:cd:65:f6:4a:59:cd:45:7e:c0:13:51:ac:19:9a:3f:79:9e:
         37:c8:63:20:bd:6d:98:0b:b4:d2:25:ba:ef:75:18:e5:5f:df:
         ba:61:32:46:7f:9a:36:ff:ca:9a:1c:5f:9d:b3:45:7e:8c:b3:
         ca:c1:a9:86:f8:ab:d3:e7:06:95:43:89:ed:57:78:f6:1f:24:
         2c:3e:c0:e6:88:f7:1f:a7:00:0c:24:f1:d5:f0:b7:e0:c1:c3:
         da:d6:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:16 2026 by rpki-client