Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
File:                     JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json)
Hash identifier:          BxBxvDsIvP3QKoaCKaAUsb44Zn2hOVxflAHUVlK/JgE=
Subject key identifier:   E0:29:50:DB:4D:3A:50:58:D4:1E:8E:45:11:73:37:26:EF:76:24:71
Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Certificate issuer:       /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
Manifest number:          79
Signing time:             Fri 27 Mar 2026 07:20:04 +0000
Manifest this update:     Fri 27 Mar 2026 07:20:04 +0000
Manifest next update:     Fri 03 Apr 2026 07:20:04 +0000
Files and hashes:         1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: VnlIIMJ/nnlsLO0YIvFP93ptn43P+KPU8jtg1ey9iK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
        Validity
            Not Before: Mar 27 07:20:04 2026 GMT
            Not After : Apr  3 07:20:04 2026 GMT
        Subject: CN=69c62fa4-6d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:17:98:12:44:6e:24:2e:84:92:c7:2f:6d:
                    62:6d:b3:4c:51:43:08:49:52:ad:79:c0:a6:35:81:
                    dc:95:19:e8:b8:ef:60:c4:72:37:ae:b9:80:d8:63:
                    f0:21:e3:e8:f3:c3:9a:e4:ed:9b:75:dc:fa:e2:5b:
                    0d:c9:19:ff:a5:19:86:10:09:7f:02:25:fe:55:cf:
                    c7:a8:88:46:d0:1b:26:5a:92:5b:1f:59:3d:04:fe:
                    a7:b7:7b:10:47:19:c0:47:76:0a:ca:69:68:0f:a7:
                    b0:38:0f:59:e9:01:c2:e2:d1:24:a7:f6:1c:3b:af:
                    9d:54:48:ee:cf:b8:fb:00:6e:42:28:d1:2d:ce:1c:
                    67:04:05:e1:6b:b8:f1:74:e9:00:a4:2e:76:9d:60:
                    be:b4:75:d6:7b:d9:58:75:88:f1:ac:27:36:81:36:
                    a1:3a:67:1b:6d:a3:b3:98:f1:a8:73:42:07:f8:e8:
                    74:27:48:b1:2f:6d:03:e9:40:57:7b:fe:97:7f:12:
                    6c:a1:f3:32:e5:91:6b:28:ff:2f:2f:aa:ab:02:1f:
                    1a:91:8a:bc:d7:09:44:7d:e1:55:09:2c:ee:48:e1:
                    67:e8:5a:13:58:8a:ce:81:40:6c:ec:c8:ba:99:9d:
                    aa:1c:75:c0:d8:68:74:9f:cd:1c:e2:cd:6c:1d:a9:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:29:50:DB:4D:3A:50:58:D4:1E:8E:45:11:73:37:26:EF:76:24:71
            X509v3 Authority Key Identifier:
                keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:cc:89:ac:83:f7:9f:2c:13:5b:d6:7a:41:2a:82:2f:c2:38:
         6b:f2:e4:0d:ac:e8:e3:18:d6:e0:0d:52:02:75:d4:7d:f8:9b:
         01:7b:6e:25:e1:3d:db:1a:af:6c:ea:c2:ce:d9:d9:4f:45:60:
         77:b5:ef:cb:fb:e7:f5:34:2c:6f:c6:e5:63:2a:ab:8b:8f:56:
         68:1c:a0:b4:44:64:c3:63:cf:49:90:3a:b5:b5:ac:81:36:6a:
         4c:16:59:a9:02:74:ef:c6:d7:9a:c2:bb:09:a0:2c:b6:72:66:
         be:4b:08:ce:2f:9c:fb:2f:d5:38:29:c4:b8:0e:d7:82:ee:8d:
         70:1d:71:90:98:2e:94:08:50:51:9d:5c:58:4f:46:57:78:3e:
         c0:7b:0c:4e:17:ea:96:0b:73:17:71:dc:1c:02:63:79:e9:0b:
         aa:fb:8c:39:d9:e1:dc:ae:23:56:ae:d9:0f:65:9c:af:8b:09:
         bc:76:c9:7b:80:88:08:cc:42:7d:a4:32:43:81:c3:53:bc:f8:
         0a:8c:e3:00:d0:b0:5b:6e:0b:0d:1a:2e:bc:38:9b:7a:fc:10:
         60:e5:85:df:5e:4e:ae:39:1f:39:f3:bd:93:85:04:af:a9:a5:
         60:7e:d7:82:7f:ce:8d:0e:77:35:b6:b7:0f:2c:81:d9:84:35:
         85:7b:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:11 2026 by rpki-client