Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
File:                     JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json)
Hash identifier:          LichS3ubZLOuPwG8yqVP23T/z4QuqF3mmskJAhXzXbU=
Subject key identifier:   5D:F3:8C:76:66:B3:85:F3:E8:5F:25:15:19:C1:DA:57:54:65:E8:91
Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07
Certificate issuer:       /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707
Certificate serial:       0317
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
Manifest number:          0312
Signing time:             Wed 25 Mar 2026 00:49:24 +0000
Manifest this update:     Wed 25 Mar 2026 00:49:24 +0000
Manifest next update:     Wed 01 Apr 2026 00:49:24 +0000
Files and hashes:         1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: xCSXsP2W1IJpRijcIge2QpgkdK/v+K+CJhF5esjVAZk=)
                          2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: NTAu1POY/0focVHyecBa518pFNBNoc4kf83eDxIep6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl
                          rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF37, serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707
        Validity
            Not Before: Mar 25 00:49:24 2026 GMT
            Not After : Apr  1 00:49:24 2026 GMT
        Subject: CN=69c33114-7e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:0d:0c:dd:36:f3:12:b7:fd:82:84:18:ab:
                    85:6d:9e:6d:4d:b1:7b:19:fe:c4:d1:67:30:e6:f4:
                    98:a5:cf:b9:c7:1b:81:b3:bf:8c:6b:95:4f:c1:2c:
                    c5:c7:0d:38:d3:87:b5:75:5f:31:0d:6f:97:86:a9:
                    e5:69:84:31:bb:e0:e9:00:a7:b8:eb:5b:ec:f8:ca:
                    81:9f:c5:89:0a:19:e0:57:0c:8d:7e:31:dd:8f:cc:
                    de:50:54:88:7b:29:50:d0:39:4d:9e:bb:ab:e4:bd:
                    50:1a:23:68:8b:6f:4a:86:90:e0:dc:92:1b:d5:96:
                    cd:51:b9:ed:c0:8e:e5:fc:be:86:ba:9b:01:c0:f0:
                    09:9c:98:fb:6c:9f:2b:80:59:55:38:30:c8:cc:30:
                    fc:04:99:bf:71:5d:7c:f1:4a:e3:5b:0a:67:2d:19:
                    89:a8:e1:c9:1f:b5:a5:dc:fc:f1:cc:17:7c:78:ea:
                    87:2c:18:7b:68:ce:17:25:e6:33:ee:01:dc:af:8a:
                    53:0e:5a:d1:2a:4a:98:f7:fd:8f:0d:e1:f0:1c:5a:
                    c6:aa:0d:e0:49:f6:f8:a3:f1:42:7f:1b:3e:f2:5f:
                    e2:d8:b0:d9:30:6b:9c:be:aa:26:ba:dd:0c:b0:f5:
                    62:2f:56:6d:e6:c1:07:9d:39:fd:e9:f6:80:86:54:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F3:8C:76:66:B3:85:F3:E8:5F:25:15:19:C1:DA:57:54:65:E8:91
            X509v3 Authority Key Identifier:
                keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:42:48:f2:4a:30:34:87:cd:99:1a:c1:0c:c1:4f:5a:1e:3a:
         e5:f4:33:99:1f:ad:82:29:79:10:0c:f3:3b:e3:1e:bf:09:5e:
         92:18:22:76:82:de:4a:c9:33:d8:87:30:6d:bf:13:22:84:99:
         2c:10:5a:85:af:cd:91:8c:6b:88:48:a4:33:ef:74:f7:0a:42:
         c4:6c:a1:ee:f7:61:57:cf:5e:c4:7b:c2:c3:b5:20:c2:48:d3:
         12:fe:5c:6d:28:03:6f:00:6e:bb:8b:bc:6c:8d:44:4e:8c:5e:
         dc:d6:8c:2d:aa:5f:2f:d7:4a:40:1d:65:c4:a0:4b:ad:ea:c5:
         6b:a0:b2:d1:34:00:f3:f5:c8:6a:7f:03:90:44:42:4f:73:f6:
         7b:2d:f6:ab:b1:5f:c3:52:8c:7c:6b:75:3b:e5:60:9e:da:e2:
         50:ba:71:cb:7f:8e:8d:30:07:e1:03:b6:28:bf:32:3d:e9:9b:
         dc:e6:5f:1d:6e:89:78:bb:1a:87:e7:02:3a:4e:46:08:a8:6b:
         2d:04:21:0b:8a:a0:e7:da:2a:e5:34:b3:90:9a:d2:a1:10:76:
         34:3e:f8:93:2e:28:72:75:82:0f:87:cc:42:de:c8:f9:9a:ff:
         f6:ad:26:99:5a:1d:40:d9:c2:e5:41:b3:1f:4d:ef:50:49:69:
         fa:b7:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:15 2026 by rpki-client