Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
File:                     jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json)
Hash identifier:          4hg2ND86nTNyIC2CD6r+6vnxpUsUwt7XvrW++lIz138=
Subject key identifier:   06:8A:79:B5:B1:A9:5E:41:5E:39:1F:7A:E7:51:E2:17:64:9A:60:4F
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Certificate issuer:       /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial:       0A04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
Manifest number:          09E0
Signing time:             Tue 24 Mar 2026 19:43:05 +0000
Manifest this update:     Tue 24 Mar 2026 19:43:05 +0000
Manifest next update:     Tue 31 Mar 2026 19:43:05 +0000
Files and hashes:         1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: WHJY+28GEasphDA2qTn+/K32S4K1jW/XPjQnFBSoKvI=)
                          2: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: GS8FiTHe76tR+EGLanHlCxxJBZXlT9b5WZ9G9Dgo+Hw=)
                          3: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: 2pQj/v9t+kcNupt0rKz67XKQ+odZb10F7T6m8zIHzIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2564 (0xa04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
        Validity
            Not Before: Mar 24 19:43:05 2026 GMT
            Not After : Mar 31 19:43:05 2026 GMT
        Subject: CN=69c2e949-11a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:fd:44:77:0b:47:23:50:c3:84:43:56:30:
                    fc:55:f9:9a:36:ce:c1:db:e6:31:12:15:d5:a9:c8:
                    19:a3:1e:42:d3:31:56:64:ff:5e:a1:a3:10:bf:11:
                    d1:65:11:61:c1:8c:b9:82:5f:50:f0:67:66:1e:da:
                    e7:76:f9:d0:6b:cd:11:d8:cf:03:63:5b:50:06:74:
                    56:14:bc:a5:65:ee:3a:dd:35:a7:f1:a3:68:90:c0:
                    37:07:39:35:5c:3d:08:dc:e7:18:6b:a5:9e:75:3f:
                    bd:eb:15:55:6d:9b:da:7d:cc:79:63:5e:c6:d4:6a:
                    e8:15:19:93:d5:cd:7e:63:d6:f9:fb:d2:60:0e:5a:
                    7f:a6:51:58:97:9b:a7:05:5c:8c:83:16:b0:99:a5:
                    0d:33:a5:18:36:f1:bf:44:c8:99:e7:5f:0a:36:70:
                    57:21:32:7a:43:fb:e7:f3:1c:ad:f4:23:7e:b4:42:
                    0c:00:5f:64:00:7a:54:c2:38:93:86:69:e1:d7:c0:
                    a3:e2:92:30:dd:f6:0f:c4:73:04:3e:71:f1:c5:75:
                    c4:56:00:69:f2:09:7d:8a:cb:9e:8d:17:76:32:80:
                    2a:50:ef:a0:1d:be:1d:92:db:6e:63:e2:62:68:34:
                    06:f9:2a:8f:51:cb:c1:ff:dc:93:7f:3c:1e:91:69:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8A:79:B5:B1:A9:5E:41:5E:39:1F:7A:E7:51:E2:17:64:9A:60:4F
            X509v3 Authority Key Identifier:
                keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:39:02:32:20:4a:e4:14:81:8c:4d:e8:44:e5:5c:ed:6c:82:
         76:e9:29:5d:34:29:58:91:58:ac:eb:62:02:e0:b9:9e:32:92:
         aa:b2:21:d9:92:bf:48:23:94:96:ac:3e:8a:ee:8f:6c:77:8c:
         10:4c:03:cc:fd:b6:bf:bc:45:22:c7:24:dd:e7:e8:d7:ae:a2:
         25:81:be:74:86:23:c2:42:95:b2:c9:7a:38:f6:1d:11:17:8d:
         23:91:f8:44:af:a3:8b:45:2e:e0:a5:d6:26:04:ec:05:24:8c:
         44:f1:5f:e1:0f:9f:de:23:7a:65:46:34:63:56:2c:67:03:a8:
         a5:f6:97:0e:13:e5:aa:a8:50:76:c0:46:b8:74:23:c1:41:a9:
         8c:94:18:e0:ae:be:f4:ac:e9:38:01:d6:b9:ed:6a:ea:48:b2:
         86:d1:32:ff:96:3d:57:4b:c1:b0:c3:d7:3b:8a:9a:d8:c7:7b:
         06:71:52:58:86:95:39:3c:a9:76:f1:a9:4b:f2:71:7e:73:53:
         de:e2:03:a5:99:e8:be:c6:e6:29:9c:a4:ed:6b:53:f6:1e:86:
         f3:f8:40:25:dc:86:25:75:c3:25:f5:12:56:58:ad:4d:4e:5f:
         f2:a4:12:84:09:8b:8b:d5:d5:18:be:d7:6a:92:c8:d4:63:6a:
         04:d1:ec:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:21 2026 by rpki-client