Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft
File:                     jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json)
Hash identifier:          vdZaDPKfNPwxyKr3iG/ghs0Fzp5dCIb9z/WMPbyNrWY=
Subject key identifier:   8C:1C:45:D1:74:79:56:F4:15:73:49:48:3D:BB:9D:90:43:B2:CD:9B
Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6
Certificate issuer:       /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6
Certificate serial:       02E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft
Manifest number:          02E1
Signing time:             Wed 25 Mar 2026 00:58:48 +0000
Manifest this update:     Wed 25 Mar 2026 00:58:47 +0000
Manifest next update:     Wed 01 Apr 2026 00:58:47 +0000
Files and hashes:         1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: /QAqeH/a3sZQaYOsWO/3jTfzGMrDe7Y8KiOpvt8NMcY=)
                          2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: R54akjGxTnzxhQ5eWup+gnTX3b1EgVjuqEvhFW0utCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl
                          rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6
        Validity
            Not Before: Mar 25 00:58:47 2026 GMT
            Not After : Apr  1 00:58:47 2026 GMT
        Subject: CN=69c33348-e7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:a7:9b:9d:e0:fe:ec:6b:c2:91:b3:f7:6d:
                    dd:fe:dc:55:04:c6:e3:c7:fe:c0:07:a1:b6:f4:c1:
                    5a:c9:6e:4b:3a:d5:4b:cf:17:58:98:46:dd:52:9b:
                    9c:2f:7a:10:a1:77:c4:f9:55:78:0f:cf:5d:e5:ac:
                    13:f9:e1:4a:e2:fc:5e:a1:ad:82:ad:54:31:05:c4:
                    c3:80:5b:ce:91:30:52:dd:94:92:6c:f0:77:f0:ca:
                    9d:ef:5d:93:32:88:a1:25:c1:1d:4c:4e:8c:91:13:
                    89:5a:8d:fc:c5:db:dc:e3:c9:a7:58:bc:c5:9c:ce:
                    0b:31:4c:21:47:a9:a6:bc:b2:fc:52:0d:20:ad:e1:
                    87:30:2f:8a:d8:6c:f1:b2:64:05:58:f3:9e:55:51:
                    74:52:93:23:39:ff:c7:fd:bf:4d:0e:64:aa:84:b7:
                    f7:2a:1c:fd:f1:ed:c2:be:42:12:fe:25:49:9e:b5:
                    35:4a:10:5f:0e:65:f6:53:99:3e:67:0f:2b:a5:eb:
                    c9:2a:fc:66:1b:98:81:86:51:3f:63:9b:d8:f8:5b:
                    56:a6:ec:ff:53:d6:cd:aa:bf:eb:05:d6:ab:85:1c:
                    62:4f:04:5f:e6:f8:3f:1b:7d:e0:85:16:94:68:b7:
                    5a:97:33:63:da:4a:75:f3:f2:73:c0:45:f8:cd:db:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1C:45:D1:74:79:56:F4:15:73:49:48:3D:BB:9D:90:43:B2:CD:9B
            X509v3 Authority Key Identifier:
                keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:65:ef:33:c9:91:6e:e7:58:e4:02:27:a7:58:63:96:56:f0:
         fc:99:37:ca:8d:bf:a7:4c:3f:50:09:e2:7e:07:69:1a:62:c4:
         4f:31:51:68:26:46:8b:d6:12:99:70:7f:96:8d:ad:64:d2:bf:
         16:85:0f:cf:b8:6c:10:01:dd:ee:e9:35:fc:1c:fd:8f:62:b3:
         e5:d9:a0:a9:e9:45:24:f1:32:d3:fd:fd:31:1d:15:dd:20:3b:
         1e:92:ed:0c:22:2f:1a:82:e2:bd:bd:04:6b:d2:8d:3d:d9:59:
         b9:d2:0c:32:13:82:05:82:29:c5:5e:f6:33:5c:d6:c3:b3:4d:
         04:95:d5:b1:6a:95:84:ad:a2:25:8b:61:36:d2:e0:bc:89:dd:
         1d:54:8c:c9:8c:8f:ab:42:f4:49:6b:53:6c:2c:51:9e:14:18:
         f4:46:bc:d6:2d:3e:07:55:47:26:48:6e:36:18:7f:09:29:dc:
         82:af:4a:f3:eb:73:66:95:ca:98:b2:e9:5d:40:16:93:39:80:
         e5:27:be:7b:c4:b5:1a:be:b2:fa:a7:91:07:1c:3f:d9:4c:1c:
         ca:58:0b:12:e1:54:66:72:0b:5a:cb:bb:38:7d:db:2d:e9:cd:
         1b:fe:5c:ff:56:fd:ed:9f:19:16:c1:1f:6c:dd:77:47:9a:12:
         6f:57:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:22 2026 by rpki-client