Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
File:                     jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json)
Hash identifier:          qDaafoPxzB/x7CgZipNzfuvpvEwARwOrN7fWFGL4dM4=
Subject key identifier:   20:E1:62:51:B7:FB:DA:0F:07:D9:48:39:77:33:5D:69:F2:A4:F3:46
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Certificate issuer:       /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
Manifest number:          01C4
Signing time:             Wed 25 Mar 2026 03:05:50 +0000
Manifest this update:     Wed 25 Mar 2026 03:05:50 +0000
Manifest next update:     Wed 01 Apr 2026 03:05:50 +0000
Files and hashes:         1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: zsJxtGY4gJhc4TWWBe4WZ+21+h00s/CCnQ9AImuwGWA=)
                          2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: llbPuYfZvWnanU5VkzJGalwBSydzb8W85O4AmnTtGd0=)
                          3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: tAhSuIyDSJRJty/LR3Gan+IY5BTumLjHWNcDHOkE0fI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
                          rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
        Validity
            Not Before: Mar 25 03:05:50 2026 GMT
            Not After : Apr  1 03:05:50 2026 GMT
        Subject: CN=69c3510e-e34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:70:65:3b:29:4c:f1:43:61:ae:9d:56:5d:
                    6e:8a:0a:42:7f:94:80:49:17:b9:f2:5b:9c:b4:a4:
                    f3:4a:ab:c7:07:95:d1:b0:85:d9:84:8f:26:6f:31:
                    3c:01:5f:15:6a:8c:77:02:8a:20:fb:0b:f3:9f:88:
                    ab:b9:c7:4b:4e:d2:22:22:db:1c:b6:31:9e:d7:9c:
                    bd:00:94:fa:ea:66:a5:93:92:03:f3:86:1b:14:f0:
                    65:8d:05:fb:86:28:2b:9a:70:a8:a2:25:40:20:c4:
                    7d:b2:6d:82:4b:2a:d3:f0:33:21:9a:b5:c3:fd:26:
                    20:00:ac:76:a4:23:8a:00:b2:e3:8c:00:af:88:22:
                    78:5c:74:a0:7b:7d:73:0d:99:ad:e2:54:fc:56:7c:
                    37:09:a9:f8:59:87:68:c0:3d:32:89:35:c5:f9:08:
                    57:86:2d:e9:bb:db:7a:59:23:f0:30:86:39:0e:48:
                    2c:e1:2b:54:2a:76:cd:ca:39:98:e6:65:7a:f2:be:
                    62:ef:f7:63:b3:2d:da:a4:d5:41:57:cb:c8:8a:d3:
                    9f:ba:30:71:fc:62:9f:d5:1e:fc:98:60:6c:fa:03:
                    98:8f:55:ea:52:b3:f6:de:4e:52:e7:b7:e7:14:86:
                    43:f2:24:cf:e7:e5:ff:00:fd:d3:34:ff:4e:24:43:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E1:62:51:B7:FB:DA:0F:07:D9:48:39:77:33:5D:69:F2:A4:F3:46
            X509v3 Authority Key Identifier:
                keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1a:af:b9:20:45:ce:58:7c:f9:45:15:13:96:5e:69:de:08:
         c4:03:1b:10:8e:cf:ac:06:0b:62:2c:9b:63:f4:f9:f6:16:59:
         f3:b9:fc:08:ec:84:bd:03:23:75:29:71:dc:cf:d7:3f:35:13:
         32:d9:ec:0d:b5:f3:d4:c5:8f:e3:be:e4:d8:5d:2d:4e:b6:a3:
         93:e7:7b:f7:fd:e2:5c:af:49:9a:ef:eb:89:47:e2:0b:5c:72:
         41:2c:e6:93:a5:42:ef:2e:be:34:41:6d:e2:d1:37:83:46:56:
         ac:38:2c:e1:9c:9d:f4:4c:2b:37:59:27:27:7e:0f:4e:1b:f7:
         d9:ba:11:31:50:55:4a:50:ee:9b:df:2c:6a:89:fe:f6:ee:0b:
         2a:6d:cc:d6:41:a8:95:27:90:b6:22:74:de:ca:e9:af:61:09:
         39:c4:ef:30:d3:7f:7d:3c:b2:2e:a6:2e:b9:57:ca:02:f5:56:
         71:c6:0c:d5:c6:e3:97:ce:2e:88:d2:99:79:cb:de:cb:46:e0:
         76:9c:9f:66:b3:fc:46:67:6a:18:96:fd:8b:3b:3a:60:39:91:
         8b:ac:c5:98:21:2a:59:37:59:80:8d:cb:a8:5b:ec:a0:9f:3d:
         1b:58:01:aa:b7:c1:69:a5:e5:c2:f1:af:97:4a:10:25:b9:d4:
         b1:8d:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:34 2026 by rpki-client