Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
File:                     JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json)
Hash identifier:          2VBG3I23m57FoTIR7kf4O9JN+vzU8FZgBXtyc8fgcgs=
Subject key identifier:   8F:72:EC:AE:7D:E7:5A:F0:6A:71:C4:94:2D:10:5C:20:7B:46:91:CD
Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15
Certificate issuer:       /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
Manifest number:          07D1
Signing time:             Thu 26 Mar 2026 21:12:33 +0000
Manifest this update:     Thu 26 Mar 2026 21:12:32 +0000
Manifest next update:     Thu 02 Apr 2026 21:12:32 +0000
Files and hashes:         1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: W9/Z2kqlyADPXoJqd2wUiB6G55YZRabp1i7cBOUZdVY=)
                          2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: oIT8yyjoY4BKe1hUh+l+xOYZZJa9NDYiFaHXxYp/DBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl
                          rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
        Validity
            Not Before: Mar 26 21:12:32 2026 GMT
            Not After : Apr  2 21:12:32 2026 GMT
        Subject: CN=69c5a140-0e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:26:af:65:56:c6:63:7b:4a:4c:39:fd:87:
                    6a:c2:1c:ec:41:f8:76:c7:df:ad:cc:61:1f:e3:0f:
                    e6:96:85:5c:7e:1b:a3:28:32:70:b9:ca:2f:c1:d0:
                    98:36:ed:0a:20:4d:10:41:08:1a:1c:1e:f5:71:7d:
                    70:50:d0:91:ad:93:40:c0:a0:1b:c9:fc:66:15:41:
                    6b:e7:69:8c:77:93:4f:f0:b3:69:e7:d6:e6:56:20:
                    4f:d1:63:ce:dd:c0:9a:4b:41:53:f4:c1:52:ba:ee:
                    ca:4c:21:42:93:6a:a1:75:03:44:57:10:f5:24:ff:
                    38:a3:81:59:5e:4a:7a:e5:f4:33:92:29:f0:64:d5:
                    34:9f:59:73:cc:b5:fe:d6:50:6a:e7:fa:4a:f7:b0:
                    2c:e1:78:e9:0d:ce:b2:1d:7e:47:ba:7f:93:09:06:
                    61:9d:32:ff:eb:90:42:94:b8:52:eb:8e:3a:bc:03:
                    75:af:d6:2c:8f:b2:90:2a:9b:0e:2e:33:ce:fa:f7:
                    d2:0b:3e:2f:5c:a0:b0:1e:c0:19:71:bd:a3:56:d5:
                    a3:ed:bd:56:8c:20:0f:6c:0c:09:26:f0:83:cb:d6:
                    29:c7:8d:b9:b0:c3:bc:5f:53:87:03:7d:ea:92:32:
                    26:0e:7e:02:8c:ea:f5:22:95:70:6f:d9:89:93:4f:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:72:EC:AE:7D:E7:5A:F0:6A:71:C4:94:2D:10:5C:20:7B:46:91:CD
            X509v3 Authority Key Identifier:
                keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:01:0a:73:4e:86:f6:2d:89:97:e8:e0:15:54:ca:83:2e:
         be:31:0f:e5:fe:7a:d7:64:eb:7a:ed:0a:9b:10:29:37:4c:28:
         6a:09:8e:ce:53:aa:89:3a:c2:f6:1a:92:1b:06:b1:0f:24:a3:
         93:95:a8:68:da:31:b0:95:ec:73:69:6a:29:93:47:e0:80:fd:
         fb:68:d0:55:77:14:17:b2:0d:97:83:a5:c6:25:98:dc:4b:dc:
         84:f8:df:12:dc:6c:d2:f1:e8:3b:a4:b5:5b:4e:55:e4:a9:32:
         81:f2:0a:bd:c6:16:5e:e1:d8:6c:ad:b9:ce:35:19:81:20:0d:
         ea:85:12:bf:a7:b8:21:eb:37:da:9b:1b:ec:14:f1:3b:78:21:
         db:d3:aa:61:64:72:64:cb:48:1f:c7:8d:e3:6d:c0:2b:ab:b1:
         34:25:ab:a8:e5:d3:f2:a0:90:43:61:3b:28:b3:a4:a3:35:8d:
         fe:4a:f8:db:30:86:e8:51:76:ca:9d:1e:64:8d:bc:df:fe:04:
         44:d2:89:67:e4:a5:94:17:fa:60:72:03:af:28:c6:65:0f:fe:
         cc:41:c4:4f:92:b0:83:41:b3:69:1d:f1:cb:56:d7:36:01:24:
         7f:3b:2e:44:e8:0c:b6:35:8d:60:d8:f5:cc:1e:75:88:38:b2:
         cd:5f:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:08:44 2026 by rpki-client