Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
File:                     jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json)
Hash identifier:          5jikgbZTfhwTTjmPdmFiFDGUdjnjBw3f/tQ3V2JJ6u8=
Subject key identifier:   93:71:04:B1:A3:C0:C3:C1:88:76:AC:B2:C8:4A:5D:1A:FA:D6:0D:3A
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Certificate issuer:       /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
Manifest number:          017B
Signing time:             Wed 25 Mar 2026 03:55:38 +0000
Manifest this update:     Wed 25 Mar 2026 03:55:37 +0000
Manifest next update:     Wed 01 Apr 2026 03:55:37 +0000
Files and hashes:         1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: ydaBhA0lB8T2wBm/iFCSIb2brTI5+/B/dDMsgK1PFqk=)
                          2: 6F09FF784B3111F0AED6945EC4F9AE02.roa (hash: 9h9Wk9aH9jFwNi1AyO/YADoC/2y5/5H+OC8YAZoQcg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
                          rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
        Validity
            Not Before: Mar 25 03:55:37 2026 GMT
            Not After : Apr  1 03:55:37 2026 GMT
        Subject: CN=69c35cba-da36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:91:f0:0f:50:a9:5d:e1:ae:d5:e1:d5:1c:
                    b8:a0:3a:da:ea:e3:c9:16:73:4e:e9:1f:62:86:86:
                    60:06:90:55:93:03:8d:f2:45:a8:58:2f:18:df:99:
                    c4:3a:46:1b:9b:75:89:a8:05:7a:ad:38:59:45:1e:
                    40:41:c0:68:53:53:b1:ac:9c:60:eb:76:62:45:6c:
                    47:46:83:1f:f9:8d:50:ca:02:2b:20:b5:33:37:83:
                    c3:1d:12:58:7d:1f:bf:81:b1:5a:cb:ce:19:04:ac:
                    d8:e2:d6:77:7e:2d:97:4a:e6:8e:54:ce:c0:97:77:
                    d6:eb:80:91:18:77:0a:d4:36:7a:e3:73:b1:0b:91:
                    4b:ee:47:27:4f:5c:19:fa:ce:c3:18:2e:3d:c6:fe:
                    75:6a:d9:57:6e:15:6d:10:93:41:03:e4:98:db:39:
                    01:44:02:e9:d6:cb:16:81:0f:67:f7:5a:04:ec:96:
                    90:31:ba:d6:b1:33:4a:a7:3b:0b:fb:d4:f7:fc:13:
                    c8:7c:c2:dd:12:ff:08:6e:12:fa:cd:78:79:86:f6:
                    b9:df:48:e0:b1:37:d7:8e:81:8f:fe:61:98:d0:4f:
                    6e:0e:ca:cf:c3:65:91:78:a6:27:f0:97:20:2a:49:
                    92:6c:8a:46:7d:4d:84:17:a1:41:5c:87:01:26:0d:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:71:04:B1:A3:C0:C3:C1:88:76:AC:B2:C8:4A:5D:1A:FA:D6:0D:3A
            X509v3 Authority Key Identifier:
                keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b2:9b:14:45:fe:7e:d1:0b:50:b3:93:e4:20:87:52:e9:83:
         79:04:51:03:a8:2d:c5:a9:ce:29:ae:aa:fe:89:99:94:06:b4:
         f2:75:ea:5c:eb:8d:a1:b6:37:be:ed:36:2c:af:04:15:c4:f2:
         5c:84:bd:6f:58:8d:ba:44:e8:12:af:99:17:a9:53:9c:1e:57:
         25:30:7a:ff:b8:36:bc:f8:73:cc:84:cb:4b:1e:7f:12:06:3c:
         2f:ce:81:d4:8c:8c:62:52:a5:c8:fc:b0:ce:aa:f5:dc:24:f0:
         34:9a:74:75:fd:f1:31:75:8c:b7:74:8b:7c:fb:47:82:17:07:
         f7:6d:f1:be:62:57:74:d6:43:42:d2:c5:e0:23:bd:dd:ba:06:
         e2:7b:e6:9a:02:dd:c4:6a:a5:00:fb:d9:26:ee:99:9e:37:5c:
         5a:3a:84:61:93:48:85:9a:cc:44:ac:80:5e:a0:13:0b:ec:c0:
         90:8a:87:6c:00:38:60:4c:ed:50:1d:6a:0a:78:23:0a:08:64:
         aa:11:18:9c:8e:cf:74:92:59:cf:63:47:97:57:5a:b8:f7:37:
         7e:de:2f:55:be:ba:f2:1f:67:49:76:4a:56:94:16:42:a9:19:
         83:da:b1:74:fe:0a:83:44:3d:bc:f9:49:10:e5:d6:b5:b7:db:
         e7:57:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:59 2026 by rpki-client