Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
File:                     kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json)
Hash identifier:          qSOLxq+zv+zfAm/5ueo7FqS3mlv6FNf42gAoHeOmtP0=
Subject key identifier:   6D:2A:16:C9:48:19:56:C9:7C:C0:FC:F7:41:0C:BC:2F:12:89:A5:8C
Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
Certificate issuer:       /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
Manifest number:          8F
Signing time:             Wed 25 Mar 2026 06:44:40 +0000
Manifest this update:     Wed 25 Mar 2026 06:44:39 +0000
Manifest next update:     Wed 01 Apr 2026 06:44:39 +0000
Files and hashes:         1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: vYH7DKsaU2TN7VYcM33NDopJhAN0yUIpFjlKnBovM3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
                          rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
        Validity
            Not Before: Mar 25 06:44:39 2026 GMT
            Not After : Apr  1 06:44:39 2026 GMT
        Subject: CN=69c38458-0fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:e2:0c:d3:14:53:ca:67:72:9f:9a:ff:af:
                    59:8f:f2:4b:6f:8c:bf:86:5b:5f:5e:1c:86:56:da:
                    21:9e:1e:1e:92:65:d9:07:67:ef:a9:74:a1:43:5a:
                    f7:cf:62:45:09:ac:de:d0:04:ae:4b:80:d3:c5:41:
                    dc:62:2a:b9:8f:5a:04:02:d4:65:e7:dd:92:a1:dd:
                    fa:a1:98:f9:78:79:61:5d:6d:02:0b:2a:90:45:18:
                    65:53:2f:71:71:69:91:9b:e4:f2:22:3b:d0:f2:7f:
                    bf:5c:5d:fa:2e:9a:24:5e:14:32:38:49:ee:e1:bf:
                    76:33:92:b9:ed:e2:68:f0:e1:dd:2d:8a:dc:49:4a:
                    e1:1d:d2:3a:3d:f5:e6:f9:dc:b0:d9:83:2e:59:86:
                    3c:fc:e4:a4:53:7c:d4:21:c0:46:1a:b7:73:0b:de:
                    a0:61:d4:5b:89:07:64:51:06:28:e6:55:04:c2:8c:
                    c5:bf:41:4a:ec:01:9b:1b:d1:27:49:e7:b6:67:2b:
                    45:c8:bf:a6:87:b7:36:f9:b5:61:f5:05:74:f2:c6:
                    bc:30:16:06:8c:19:a9:98:66:5b:53:35:dd:41:51:
                    f1:82:89:b4:07:25:78:13:de:42:b2:48:f8:4b:61:
                    88:9a:a1:f2:ef:49:d1:9f:3f:f3:86:61:d0:c6:c8:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2A:16:C9:48:19:56:C9:7C:C0:FC:F7:41:0C:BC:2F:12:89:A5:8C
            X509v3 Authority Key Identifier:
                keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:53:18:4f:d5:5d:4b:fb:e4:b4:dd:3e:b0:68:a6:d1:c9:07:
         9d:f9:60:cf:33:39:08:62:86:61:0e:19:cf:eb:a4:3d:02:8e:
         b8:62:64:ca:a6:1f:79:b4:ff:e3:dd:a3:8e:93:47:24:94:56:
         e8:3c:bc:62:53:9b:35:5a:66:4f:d6:bf:f4:0b:81:8f:1c:5e:
         fb:26:e0:f1:ab:b3:bd:5c:79:51:14:46:50:ae:53:c5:76:58:
         f5:77:0c:0e:1f:32:4c:38:c5:94:af:70:a4:d3:02:7f:92:4c:
         2a:32:bf:7e:8e:4d:0a:62:da:86:59:e6:78:d6:53:e9:3f:ab:
         87:18:47:29:81:1a:30:88:1b:ea:d7:8a:23:5f:74:a8:2c:71:
         66:0a:b0:54:ae:fc:44:78:c5:99:2e:c9:db:0d:a1:d9:34:b6:
         a3:b4:36:a4:cc:25:70:65:06:a1:69:9c:3b:bd:0d:cb:36:0f:
         b3:19:df:ae:c8:a7:89:7a:41:50:f8:ce:07:6f:f0:0d:bb:17:
         80:0a:bc:11:2b:3e:8e:4e:42:c6:1b:97:63:00:1a:03:89:f4:
         cb:4b:ae:18:8e:1f:9f:8d:8a:a9:02:8c:bc:2a:a5:a6:5d:44:
         08:17:17:33:d1:7c:20:cb:12:0c:d5:59:75:64:8c:a3:2a:2a:
         02:ab:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:39 2026 by rpki-client