Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File:                     Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier:          /TAalfjLx7nRu0WVZpEqFzIua/Cweu8U6qAvETYTz2k=
Subject key identifier:   D2:75:64:E5:6D:75:AA:F5:61:CE:7E:B3:83:74:CE:A2:EF:68:0F:50
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer:       /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial:       0632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number:          0626
Signing time:             Tue 24 Mar 2026 22:29:28 +0000
Manifest this update:     Tue 24 Mar 2026 22:29:28 +0000
Manifest next update:     Tue 31 Mar 2026 22:29:28 +0000
Files and hashes:         1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: aM1oYFYOaggtZYLC5qox9nOaZVkry3wFZ6CHECye6jM=)
                          2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: WB4/4aQXO0dmreo4i2lxjozeibXr37yGg+CXzqW0Gx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
                          rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
        Validity
            Not Before: Mar 24 22:29:28 2026 GMT
            Not After : Mar 31 22:29:28 2026 GMT
        Subject: CN=69c31048-4543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:d6:95:2a:15:33:ea:e2:58:f5:0a:74:0c:
                    7f:6d:9a:02:3f:36:68:5c:ae:76:a7:9a:d3:20:8f:
                    d4:6e:a9:4b:33:e8:79:03:4d:b1:41:d2:7a:75:5b:
                    af:ca:e2:2c:6f:c8:3b:75:d6:11:09:e7:c8:7b:e7:
                    c7:95:60:94:74:87:09:dc:a5:0a:7d:54:8f:1e:84:
                    f2:e3:4e:f2:30:b4:f8:6c:ac:e0:df:04:67:52:14:
                    19:94:56:6e:a7:5f:4d:50:67:b5:49:3c:9a:6d:a1:
                    8c:24:83:c8:b1:52:e8:44:93:a8:b0:2f:66:7f:16:
                    2f:6e:51:83:f7:80:1e:8f:df:bf:82:da:d8:3e:71:
                    7f:a1:7b:10:63:43:69:83:33:40:fe:55:b1:9d:06:
                    c1:d4:7b:d1:26:33:89:6b:72:ec:24:a4:91:5c:e2:
                    de:47:db:2a:d3:e2:89:c9:82:e5:05:23:4a:ef:75:
                    8f:53:3e:38:ab:3d:d9:bf:44:73:fc:db:81:4e:87:
                    59:11:19:6d:00:28:84:54:9d:f6:f4:31:39:1d:b9:
                    de:c4:2a:d1:29:83:e5:6b:b0:15:9a:e3:c4:c0:3f:
                    ca:ee:56:ce:be:2f:16:91:cd:cb:11:cb:db:c7:bd:
                    df:9b:80:3e:04:30:e9:ab:28:63:67:f5:b7:fe:71:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:64:E5:6D:75:AA:F5:61:CE:7E:B3:83:74:CE:A2:EF:68:0F:50
            X509v3 Authority Key Identifier:
                keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:48:4c:9e:91:31:81:33:0b:60:60:70:fc:fa:8a:63:2c:99:
         29:80:7c:2d:70:d1:27:74:a8:54:6d:7e:e5:b3:ed:3f:b5:95:
         75:bb:d1:7d:aa:59:c7:51:f6:ab:7a:a0:04:ca:00:1b:59:93:
         9d:d8:f8:af:49:61:ac:44:5c:e1:70:a5:41:df:ca:3f:46:a5:
         57:4b:af:a7:95:73:8c:4a:d5:6f:4d:d6:2a:04:d9:a2:d5:3b:
         d2:9c:d7:3d:38:c3:82:40:2f:01:c0:a0:b2:49:0a:b1:32:c4:
         41:6c:2f:5f:89:f7:5a:77:68:f6:cc:cf:41:63:8d:05:8b:c2:
         75:35:a6:b8:3a:c4:b2:c0:97:db:28:6e:08:7f:29:2b:d2:53:
         35:7b:6a:0d:bb:a5:05:49:ee:cb:2d:60:01:4f:7b:40:cc:6d:
         bc:87:c8:9f:dd:5e:f7:83:f3:79:29:07:38:ba:70:f2:42:0f:
         2e:51:06:70:28:e7:b4:e3:7e:6a:86:0d:d1:e9:84:c6:df:97:
         c0:a0:8b:92:1a:36:39:da:e2:44:d8:49:af:d4:24:30:4b:02:
         84:a8:de:d0:76:92:6c:b4:9a:6a:9b:12:6d:37:97:5f:b3:14:
         ca:32:3c:93:5e:0e:9c:49:dc:d8:22:59:5d:ae:77:82:47:98:
         23:6f:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:11 2026 by rpki-client