Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
File:                     JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json)
Hash identifier:          xxBGDeKHOfDquQkCYDDtRaXUorL0Y3qF4Hv/mCTepdo=
Subject key identifier:   49:68:7F:56:8B:28:B0:57:EC:6B:4A:93:B8:13:D7:75:AE:F0:7D:7E
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Certificate issuer:       /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
Manifest number:          01D5
Signing time:             Wed 25 Mar 2026 02:52:36 +0000
Manifest this update:     Wed 25 Mar 2026 02:52:35 +0000
Manifest next update:     Wed 01 Apr 2026 02:52:35 +0000
Files and hashes:         1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: WvL5j/tJLucnBca0rDIyDbMlCXKM7NUPR9uzMwKhj9A=)
                          2: 06BD1FD4D76F11F0A9A4AAFE78D3641D.roa (hash: k0sV/nnMTcQ+QZMYrJ6bGT81fOOkNRl5QVlsLUS2Ohc=)
                          3: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: iN39+EnjVXuf/m4HO8/ulEYF1izhl5IiYm+rBDnwUN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
                          rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
        Validity
            Not Before: Mar 25 02:52:35 2026 GMT
            Not After : Apr  1 02:52:35 2026 GMT
        Subject: CN=69c34df4-1a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:1d:3a:09:76:eb:9b:7b:a3:77:e6:56:63:
                    8c:54:82:cc:d7:06:0a:ec:46:13:30:1d:f5:1a:a9:
                    dc:f8:e3:b0:3e:ef:5d:5e:91:2f:d2:41:79:8c:07:
                    c8:4f:a7:8d:e4:4e:3c:9e:7c:e1:4e:78:87:3c:52:
                    6f:fe:bc:e7:a9:57:3a:f3:a2:99:cd:42:c8:5a:a2:
                    f6:f3:8c:7a:e5:9b:01:77:88:fc:bb:d1:dc:2b:88:
                    c6:6e:67:fd:c3:32:39:eb:07:6a:80:63:c8:ff:2b:
                    68:2b:5f:ac:23:7b:32:98:a7:9a:23:01:2c:f6:bf:
                    8e:09:cf:9f:af:7d:eb:13:d3:2b:8c:6b:35:df:16:
                    d9:e9:a9:4e:86:16:b1:fb:f3:d1:19:00:fe:64:ac:
                    b6:98:3d:31:2a:23:65:51:bd:55:ed:86:51:8e:62:
                    85:3e:84:b6:49:7f:38:0b:2b:d9:bf:19:cc:83:e9:
                    cb:25:c3:62:4d:d3:a5:0a:67:93:bf:46:f5:08:34:
                    24:f6:a0:17:da:63:ec:39:a9:93:c0:c8:9a:e0:bb:
                    24:65:5f:05:6d:d9:db:42:66:b3:16:34:79:31:0a:
                    1e:65:37:61:b4:fd:e3:4c:e2:24:99:fc:f1:c9:c1:
                    e4:8d:84:71:8d:57:5b:9f:7a:5a:96:0b:0c:82:25:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:68:7F:56:8B:28:B0:57:EC:6B:4A:93:B8:13:D7:75:AE:F0:7D:7E
            X509v3 Authority Key Identifier:
                keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:89:ee:91:ef:99:53:18:fc:88:41:46:12:ad:ff:d1:47:52:
         a0:b3:8e:90:69:53:17:4b:85:7c:8a:3b:9b:2b:b4:c5:a8:40:
         21:af:35:75:1d:76:3f:64:fb:87:54:5c:d9:8b:d7:65:50:ae:
         d9:f4:e6:9f:86:9a:1a:b2:c4:52:5b:a4:07:b4:a8:a1:2f:4f:
         78:26:2e:82:8e:ff:70:8a:6e:d5:45:1c:40:b2:f4:af:7b:ba:
         bd:88:5e:67:52:94:3e:a4:9c:62:c4:76:3a:9c:6d:72:72:61:
         03:9a:3a:b5:15:e4:35:25:27:ad:a5:a8:e2:da:69:77:a0:06:
         8e:76:14:30:ae:90:d6:76:b9:3d:f5:56:c5:52:59:51:f3:df:
         47:e7:83:e7:34:5c:28:78:c7:0d:71:2a:e0:03:3c:21:5f:58:
         d5:5d:3f:a9:b4:76:d3:4a:56:0c:dd:7e:8c:18:96:7c:e8:4a:
         5f:7b:67:a8:11:a3:a2:29:01:47:b0:36:49:94:82:78:6d:b3:
         b4:55:4b:33:da:5c:68:12:fd:cb:83:d7:62:87:3c:fb:9e:73:
         2a:99:38:b6:ca:26:e0:26:75:66:ff:99:fa:41:92:8f:6d:db:
         6f:0c:a1:49:45:79:c4:23:44:ec:62:cf:de:bf:59:94:dc:c0:
         ad:bb:b5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:00 2026 by rpki-client