Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
File:                     jC90p60r0PXvsQZOS5CYbXbMF4U.mft (raw, json)
Hash identifier:          Vc2C23n6w1KgVUHSEcNBg/igjAfH26RFA6rbDcySpqQ=
Subject key identifier:   88:E2:81:13:4A:BC:DD:B9:2E:6D:6F:3E:7C:4F:46:1D:40:3B:6D:A1
Authority key identifier: 8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85
Certificate issuer:       /CN=A914EF21/serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785
Certificate serial:       05BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
Manifest number:          0778
Signing time:             Tue 24 Mar 2026 22:48:56 +0000
Manifest this update:     Tue 24 Mar 2026 22:48:55 +0000
Manifest next update:     Tue 31 Mar 2026 22:48:55 +0000
Files and hashes:         1: jC90p60r0PXvsQZOS5CYbXbMF4U.crl (hash: pp9TsD+bFviSePaNZWtV5HlF00ugKbKtQn8ALQA2zM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl
                          rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EF21, serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785
        Validity
            Not Before: Mar 24 22:48:55 2026 GMT
            Not After : Mar 31 22:48:55 2026 GMT
        Subject: CN=69c314d8-58d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:2b:b5:b1:d9:67:1c:55:f7:95:a5:14:60:
                    de:38:f8:77:e2:f8:47:80:b4:c2:8a:e0:a3:6c:fa:
                    e5:ec:3a:7d:53:98:ea:24:7e:b2:77:7c:36:d8:22:
                    96:e5:f6:57:c2:71:eb:53:86:9f:59:13:d7:7c:26:
                    e1:c7:4e:9e:d5:44:17:f8:1f:81:39:41:b6:6c:9c:
                    e9:37:7d:8e:1c:7b:99:8b:e4:d9:41:9f:f3:18:69:
                    00:c1:e4:63:d3:23:91:c1:c2:3a:ed:75:df:60:8f:
                    73:f3:94:e8:a0:16:72:a1:cb:d1:2a:52:f2:da:89:
                    12:28:a8:75:3b:9d:d9:cb:ac:6f:c1:13:35:2f:ed:
                    42:c4:6d:e0:d4:7a:4b:94:4d:56:f8:aa:5a:11:eb:
                    0f:ce:ee:89:5b:b2:ed:71:d0:e7:94:29:4e:c8:e0:
                    49:10:9a:a3:3e:e7:07:d1:44:09:15:3f:c4:ae:a5:
                    24:e9:29:3e:6c:02:57:d6:37:5f:b2:be:b0:c1:36:
                    e2:99:5e:c5:2e:3a:59:d4:8f:34:e5:b0:78:d7:1c:
                    9d:dd:ce:e3:f7:ac:fd:6a:27:09:04:66:b1:cb:b9:
                    f7:0e:ec:3b:76:28:4b:6b:3e:22:df:01:4b:d9:2b:
                    0d:c6:fb:5b:ac:04:9e:ba:20:a9:8f:f0:6c:1b:52:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E2:81:13:4A:BC:DD:B9:2E:6D:6F:3E:7C:4F:46:1D:40:3B:6D:A1
            X509v3 Authority Key Identifier:
                keyid:8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:31:e0:99:8b:5f:d5:12:e3:43:10:db:f6:e8:4d:aa:fc:8a:
         48:05:5b:91:fc:60:40:7f:85:69:03:5f:74:a9:c6:0e:8d:84:
         88:0d:4a:25:3f:7b:ca:10:9b:86:a0:f1:4b:77:58:0b:33:7d:
         7b:5a:8d:57:a9:ac:d8:b6:0e:1d:8d:8f:20:08:d0:77:e2:64:
         50:53:f7:d0:e4:eb:af:64:a9:2a:97:30:f3:09:94:a4:67:8b:
         3c:5d:aa:df:ed:e6:66:03:c9:74:48:87:f0:da:84:5c:f1:1a:
         f6:a5:91:4c:3c:6d:2f:70:64:cd:c5:28:86:9f:56:52:0c:62:
         38:7e:00:17:aa:7a:2c:98:3c:a3:85:86:d7:23:17:90:58:4a:
         02:f7:b2:c6:35:36:09:55:54:d5:ab:03:f6:79:91:a5:ee:c4:
         6f:46:a5:69:63:15:b6:73:c9:d4:1b:2f:c0:b4:a4:72:f5:f8:
         4c:fc:3e:ff:03:b0:6e:70:ca:74:20:71:25:f4:94:a2:c1:d4:
         ea:2c:7d:33:5e:6d:d8:cc:09:ba:af:96:62:46:87:22:b0:21:
         cd:25:42:33:98:1a:0b:61:35:4a:67:c3:82:93:05:f6:e3:b2:
         6d:51:16:05:e9:63:ed:bf:59:cc:94:46:38:60:98:52:e1:87:
         c5:9d:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:29 2026 by rpki-client