Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
File:                     jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json)
Hash identifier:          ORKC+CYVnusboUXvIdlb8DNBo2KxSBT+H2xERX5crcY=
Subject key identifier:   BD:3A:0D:84:C6:7A:56:C9:2D:03:3C:98:3C:09:82:3C:31:CC:E0:17
Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77
Certificate issuer:       /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
Manifest number:          0209
Signing time:             Wed 25 Mar 2026 02:21:42 +0000
Manifest this update:     Wed 25 Mar 2026 02:21:41 +0000
Manifest next update:     Wed 01 Apr 2026 02:21:41 +0000
Files and hashes:         1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: myXJPG8AJXeXfBtRzH2G7D4AiU4SrcatSC+S4ofViUc=)
                          2: 27623F48040711F193DC81CA173D8C67.roa (hash: 4UQuwImlHbzxK5xAml0mOBA2CK1r1LRApTKclWV+/nY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl
                          rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
        Validity
            Not Before: Mar 25 02:21:41 2026 GMT
            Not After : Apr  1 02:21:41 2026 GMT
        Subject: CN=69c346b6-a69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:3f:8a:f1:e4:f2:49:03:7a:8e:9c:c4:7a:
                    13:4e:e5:ec:12:2c:6d:9a:6f:81:18:a0:19:ff:7c:
                    ad:1f:94:6b:fc:44:ba:5f:27:a6:9f:f2:7e:12:1b:
                    84:29:e8:31:6e:43:fc:32:ef:41:07:f0:67:c6:6e:
                    79:f3:4f:ac:34:17:58:f6:d0:dc:95:44:8f:c6:06:
                    61:91:56:8c:3e:83:72:4e:9c:65:2b:7d:e0:3f:58:
                    84:c6:4c:37:76:d4:d7:c4:31:86:0b:21:8a:dd:d9:
                    a2:6e:39:d0:56:b6:c2:b7:23:23:60:d0:16:5b:eb:
                    e2:c9:7e:28:d1:03:7f:48:cf:eb:b4:c7:44:a9:0a:
                    9c:dc:1a:f5:8d:4f:19:29:12:2d:2b:72:3f:75:c5:
                    76:08:11:69:7a:d5:5f:c4:e7:bf:73:a8:bf:9e:ae:
                    6b:d3:d9:6f:13:fa:39:5d:0c:b5:a4:d9:87:f2:ff:
                    6c:ec:e3:e0:d0:7a:34:e2:93:ac:87:6e:2d:9b:7e:
                    90:e8:b8:12:0f:b4:58:02:fc:84:e2:c9:3b:4e:a6:
                    b5:a3:ae:c4:48:57:31:bd:e2:87:a5:7c:3c:7d:8e:
                    23:0b:17:b8:bf:c7:14:54:a9:2b:4d:a8:14:58:c9:
                    8b:a7:97:27:a7:41:22:14:a1:e1:8c:dd:85:f5:29:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3A:0D:84:C6:7A:56:C9:2D:03:3C:98:3C:09:82:3C:31:CC:E0:17
            X509v3 Authority Key Identifier:
                keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:95:1a:8b:8f:96:55:1f:ca:1d:f6:99:0a:e5:f4:b0:77:0b:
         cf:f0:68:f1:5e:6c:4d:b7:92:41:25:2d:22:e1:b0:73:69:51:
         d5:4e:c6:82:61:60:05:04:12:27:3e:db:ff:63:a3:5f:3d:d0:
         fe:f5:7f:39:0f:31:1e:95:2d:74:b2:8b:a1:56:cb:f7:9c:8e:
         e9:ac:c9:cb:9d:28:8d:3d:72:dd:2a:ac:67:79:c4:23:a5:04:
         60:32:18:1b:af:73:60:e5:8b:43:9e:e8:2d:da:b9:22:3e:eb:
         60:0a:1e:51:9c:9f:f7:2c:a5:cd:ae:4c:c6:1b:f0:d2:a2:ce:
         dc:64:25:0d:be:86:4a:1d:f5:12:36:8d:39:27:88:e1:c0:b7:
         c3:65:64:bc:ac:d0:3f:2b:6c:32:02:31:7f:f5:99:58:26:de:
         e3:5b:b2:0b:65:e0:51:11:22:37:1d:51:0c:68:60:2d:df:0e:
         f3:ca:53:1b:60:31:6f:ff:59:44:78:82:a9:ef:4d:ef:1b:08:
         2d:5c:33:94:98:a6:e4:b9:c3:94:ca:f6:08:b6:73:8e:a5:73:
         a5:9d:6e:bb:cd:53:1e:01:d9:b3:49:02:9b:2b:c8:78:a6:04:
         45:d6:eb:e5:8a:51:c8:b9:fc:bf:a5:c1:ae:37:1e:51:6f:10:
         a7:f8:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:17 2026 by rpki-client