Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File:                     jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier:          z6tfF2mm676FgNCc1f10leMU1RmEOZz0L5Mg1LdGM2M=
Subject key identifier:   3E:7B:05:4E:34:BF:CC:0A:21:89:F9:BF:96:3E:30:00:45:6E:65:83
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer:       /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial:       3572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number:          3548
Signing time:             Tue 24 Mar 2026 15:13:24 +0000
Manifest this update:     Tue 24 Mar 2026 15:13:23 +0000
Manifest next update:     Tue 31 Mar 2026 15:13:23 +0000
Files and hashes:         1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: B0JPnXVkgfm4RxjkgFibCeOIkZzI06Yv4WBilva9H28=)
                          2: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
                          3: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
                          rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13682 (0x3572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
        Validity
            Not Before: Mar 24 15:13:23 2026 GMT
            Not After : Mar 31 15:13:23 2026 GMT
        Subject: CN=69c2aa14-ae48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:fd:59:be:1d:be:bf:58:ae:2f:51:7e:27:
                    2c:8d:f2:a6:9a:9b:f6:68:df:bc:14:dd:a8:f9:24:
                    f0:5f:41:f2:45:7e:a3:a6:54:7c:97:ae:23:f6:7e:
                    7d:a0:a0:d1:5e:03:9d:01:ad:dd:05:a5:71:48:b9:
                    2a:24:da:27:6b:9a:48:89:72:7a:f8:86:40:fd:ca:
                    c7:50:77:5a:bd:ce:9a:96:82:a0:80:45:cf:d1:dd:
                    c9:61:a4:1c:27:b3:c7:e2:cd:39:2d:c2:d2:18:d3:
                    f2:9c:96:cf:75:03:cb:f3:7d:0f:9e:92:9b:65:05:
                    47:50:28:cf:ee:c1:67:06:aa:0a:f6:ae:51:cc:c7:
                    c8:58:06:02:3a:fc:a7:df:6a:8c:2b:cb:56:2e:0a:
                    11:bd:a4:a1:9f:58:e1:1e:b4:db:00:d4:4f:a8:cb:
                    e8:f5:fb:38:3a:aa:f2:b3:49:fa:4c:73:89:16:c8:
                    1c:7c:92:dc:5e:d4:53:9b:74:df:70:0c:a6:cd:a0:
                    3f:3d:63:8c:c3:23:15:02:ad:56:57:aa:0a:cb:6b:
                    3c:0a:c1:54:d0:02:60:94:73:38:92:f2:45:87:2b:
                    e5:e3:b5:bc:ef:2e:d6:4a:f9:f2:5d:1f:61:06:85:
                    0a:dd:c0:22:36:ba:43:dd:af:ca:ee:5d:48:9c:c6:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7B:05:4E:34:BF:CC:0A:21:89:F9:BF:96:3E:30:00:45:6E:65:83
            X509v3 Authority Key Identifier:
                keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:60:1c:68:21:91:6e:86:6e:7f:69:8b:3f:9b:5f:58:31:d6:
         af:83:ca:0b:fd:86:13:c9:9b:06:fe:bf:4d:49:79:da:62:af:
         d2:53:e5:c4:b1:f9:f4:9e:48:2d:f1:a2:d9:74:e9:2e:93:2a:
         2d:03:39:8b:b6:07:96:7e:92:e1:7b:b7:b1:fd:bc:7a:17:8b:
         93:e0:af:d1:fb:a5:fc:3c:b5:43:a5:0a:33:20:ae:7d:c8:f6:
         0c:ca:a3:c3:4d:97:44:31:d6:90:cf:2f:67:18:65:f4:1c:c8:
         2e:47:e7:96:5c:bb:a1:6c:05:5d:98:a9:64:f6:3d:92:b4:3d:
         f5:ae:94:18:31:bd:e5:8a:14:f2:69:5f:bf:90:92:13:1a:d3:
         e6:2d:6d:dd:ae:17:af:2e:da:35:9b:bd:b4:e8:96:7f:f3:8d:
         db:36:13:98:ea:ca:d2:5f:e6:93:f2:02:88:4c:b6:fb:3e:03:
         f6:2c:ff:12:03:c7:91:72:e5:1a:62:d7:6d:ce:d0:bf:c9:9b:
         dc:67:94:fa:15:29:bb:6f:95:64:9a:d1:6f:2c:dd:b5:f8:c2:
         69:84:fb:51:40:3f:08:b2:4f:11:ae:9c:64:f0:e8:5c:53:ea:
         e9:a0:88:6e:fc:58:8b:37:59:d8:0b:11:08:df:f2:d6:53:0e:
         9f:3b:65:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:42 2026 by rpki-client