Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File:                     CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier:          zGuVKRNCHs9xZsUwj2FO0fJlzKyzgstVSZVXcA6cVFQ=
Subject key identifier:   74:A5:AB:54:F4:BB:03:B0:A2:58:E7:4A:A7:38:7D:52:85:C9:FD:4A
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer:       /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial:       043B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number:          0426
Signing time:             Wed 25 Mar 2026 00:03:00 +0000
Manifest this update:     Wed 25 Mar 2026 00:02:59 +0000
Manifest next update:     Wed 01 Apr 2026 00:02:59 +0000
Files and hashes:         1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: cdxvOnH5HGOCG3bgtDG2EzkmxLiJca6a4CvuiMCbjMs=)
                          2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: RTRGzx3DTtJG0iPu4hiw7fBG/3vhdOfJ/25U/hTfNGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
        Validity
            Not Before: Mar 25 00:02:59 2026 GMT
            Not After : Apr  1 00:02:59 2026 GMT
        Subject: CN=69c32634-6ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d0:c1:dc:07:7f:45:eb:53:68:00:92:3c:7c:
                    fe:85:97:b3:0d:5e:32:9b:fd:fd:19:4a:eb:18:a0:
                    27:76:3a:3a:82:9f:48:98:22:e2:3a:a8:c9:d2:26:
                    41:cc:c3:97:4a:23:1b:25:9c:db:ea:fa:b1:7b:38:
                    e9:1a:f9:d2:e1:4c:29:00:a5:a2:12:5b:84:b0:dc:
                    77:36:7a:92:40:36:70:44:1f:11:6c:9e:8a:3b:1d:
                    ef:d8:44:ae:65:98:96:a6:8d:31:1c:52:5a:f7:27:
                    0b:58:38:15:0a:85:cb:e9:33:ee:bf:9b:6a:27:54:
                    ab:9d:6d:5a:8f:05:51:bb:ec:e6:ff:f7:97:9b:8f:
                    52:64:f0:72:14:6a:dd:d6:65:c8:ad:e7:1f:00:ed:
                    cb:c1:9d:c4:cb:65:5f:ac:cd:dd:e7:40:c6:10:34:
                    4d:e3:be:55:ae:85:37:ab:10:5e:29:11:c1:03:79:
                    fa:c7:cb:52:b3:d1:4e:54:70:71:b0:d4:3a:90:84:
                    d3:e1:22:4d:a2:4b:17:a6:4a:76:f9:b5:4c:f0:86:
                    6b:a8:86:cc:ef:02:0b:fc:39:06:7e:25:29:69:89:
                    ac:8d:db:ce:51:05:ac:3f:76:63:61:f9:4c:21:f2:
                    d7:e3:6e:8b:8c:a7:53:43:b2:56:54:14:ed:ec:d7:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A5:AB:54:F4:BB:03:B0:A2:58:E7:4A:A7:38:7D:52:85:C9:FD:4A
            X509v3 Authority Key Identifier:
                keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:07:d8:60:32:a1:6b:85:a5:2d:38:24:be:3e:c0:1e:5b:79:
         8c:60:4a:2c:f9:85:85:9c:54:6c:c5:68:f1:16:cc:f7:8b:16:
         70:05:dd:3b:a3:94:a6:7e:87:3d:cb:f5:1b:40:6a:67:65:29:
         bb:ee:73:bf:d2:fb:13:1a:36:56:d9:a5:3f:81:c5:86:fa:c5:
         a0:eb:a2:bf:4c:8e:e0:d6:b3:97:79:96:cd:af:dc:80:40:83:
         2e:ca:38:45:49:61:46:f5:ee:3c:18:5e:60:b0:df:b3:03:a8:
         33:ec:fa:83:db:42:46:ec:51:54:17:67:b1:3e:3d:08:a8:e0:
         7e:b7:bc:38:a9:79:f5:b9:91:93:d0:c8:f7:f8:cc:99:e7:3a:
         c1:05:16:be:2c:35:58:64:ed:b6:33:bf:a2:ae:b3:d4:44:c0:
         8e:13:c5:f1:fc:06:96:bc:10:c1:6a:4f:39:24:49:3a:f1:90:
         fb:78:d7:8c:8b:1e:b6:75:5b:c3:6f:dc:d7:35:6e:be:0f:e5:
         54:f7:4c:38:7a:bf:3a:63:8c:4d:34:9c:ab:33:c2:d4:c7:23:
         85:97:25:9f:d2:1a:7e:38:9b:3a:8e:8b:1f:9c:f3:0b:4c:10:
         52:9e:05:2c:a3:50:e8:fa:a4:4c:80:10:c4:4b:c3:75:e1:ac:
         2e:64:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:46 2026 by rpki-client