Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
File:                     JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json)
Hash identifier:          EZ2rX3rbE8H3XJAY9E1tvAPCNXzTdu+fkzc53kAjxN4=
Subject key identifier:   C3:43:7D:A3:6D:C9:47:0F:88:4C:E9:D3:48:DC:A3:2B:D8:B4:DB:D3
Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7
Certificate issuer:       /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
Manifest number:          019F
Signing time:             Wed 25 Mar 2026 03:34:16 +0000
Manifest this update:     Wed 25 Mar 2026 03:34:16 +0000
Manifest next update:     Wed 01 Apr 2026 03:34:16 +0000
Files and hashes:         1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: QvVN+LmUyTH0ZpNKnDNVq7HIfdrfvOBW6eUBtIUg51U=)
                          2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: EbaHzYxJkhS/e/mhIStkM2ixlMOj0eIXkmV/72ibVUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl
                          rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7
        Validity
            Not Before: Mar 25 03:34:16 2026 GMT
            Not After : Apr  1 03:34:16 2026 GMT
        Subject: CN=69c357b8-91f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:7c:93:86:91:59:ad:b2:63:04:ab:2f:ba:
                    f5:cc:e0:f2:e6:eb:64:e9:88:9b:45:67:d5:cb:70:
                    35:1d:01:91:85:fb:84:6c:1a:96:40:e6:02:dd:ee:
                    27:e2:b5:e9:8e:1a:c0:f6:ae:be:41:8f:df:4d:1a:
                    ea:ec:33:b7:54:e7:3e:c3:0b:b7:51:97:28:13:c8:
                    14:6c:24:aa:9a:2b:3b:d9:a9:0a:20:d8:34:b3:bd:
                    6f:a8:84:d7:02:9b:c8:d9:74:66:9d:b3:dd:ca:ae:
                    3c:0a:56:a4:bd:68:66:b7:1a:bc:c7:9a:2b:f1:83:
                    75:ee:ea:2a:6e:7a:63:cf:48:51:80:b2:87:0a:6b:
                    e1:06:19:59:c2:68:41:33:4c:bf:c6:d8:ca:f8:6a:
                    41:fb:e2:75:8d:6e:33:62:3e:62:36:b5:e4:aa:14:
                    02:69:5a:00:6e:90:4d:4c:4e:ce:03:dc:63:36:ca:
                    24:f4:79:53:3e:1b:15:11:6c:88:da:9f:34:f6:20:
                    8c:0c:dc:9f:51:34:2d:2c:db:b8:2a:0d:4a:60:4a:
                    4f:ca:a6:39:5e:26:b3:97:79:7c:e7:14:33:48:35:
                    3e:01:0a:07:af:90:7b:fb:13:bb:be:68:d3:ae:c1:
                    e1:a8:8f:65:14:8a:ce:6b:29:f1:3d:1c:d0:b1:74:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:43:7D:A3:6D:C9:47:0F:88:4C:E9:D3:48:DC:A3:2B:D8:B4:DB:D3
            X509v3 Authority Key Identifier:
                keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:71:73:8a:b4:74:36:eb:bd:e7:ed:d3:a5:67:c4:75:ec:95:
         0e:fb:1e:9a:24:2b:be:79:57:88:fb:39:48:5e:a1:41:2b:df:
         c1:78:bb:6c:6c:6d:61:ba:2f:51:df:26:ee:ca:e6:70:72:27:
         51:e5:ad:56:00:08:46:bd:f2:64:41:82:6b:fd:5d:f1:de:52:
         de:4b:f5:70:8d:cc:51:f3:31:ef:9c:3a:0b:ad:20:7d:67:af:
         20:75:dd:e8:6b:07:e1:68:32:48:a7:78:0b:17:bb:bc:15:29:
         9d:e4:16:75:c8:27:d7:9a:54:43:d0:87:6a:6c:1a:77:92:d6:
         69:9a:c8:96:0a:fd:c4:d3:f7:22:a9:41:9b:79:94:61:a2:be:
         27:06:a2:24:aa:9a:20:79:a5:aa:22:80:6e:1a:33:50:33:59:
         af:18:0c:75:b0:51:a0:66:52:a4:d9:0b:72:05:88:be:f9:de:
         08:c8:6b:da:2a:d1:5d:2c:52:48:ac:30:78:35:ee:d5:ab:1f:
         83:d5:07:f2:a9:89:af:ce:b9:b7:d3:5f:7a:7d:fb:f3:c3:39:
         9e:2b:44:44:ba:25:09:9b:8e:2e:c1:e0:99:1e:e5:3b:1e:15:
         e9:ce:88:2b:28:02:68:94:26:c5:7e:69:bd:60:b4:fa:f9:f6:
         77:f4:21:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:58 2026 by rpki-client