Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
File:                     jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json)
Hash identifier:          i22vcjMBpexNVkO2wwVwbfwpQEZ0D7Yungqkz1d053o=
Subject key identifier:   AC:D4:23:2C:E7:FA:20:67:A8:0C:55:CF:5A:54:57:A6:A5:91:15:1D
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Certificate issuer:       /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
Manifest number:          029A
Signing time:             Wed 25 Mar 2026 01:11:33 +0000
Manifest this update:     Wed 25 Mar 2026 01:11:33 +0000
Manifest next update:     Wed 01 Apr 2026 01:11:33 +0000
Files and hashes:         1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: PpHw5z6++JCcH0wUD98mZjrr5ltSQdy+2FoWbE+RXHE=)
                          2: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: 3q66unEtiXx6jKcOQRNMynBbEHvMb38v7KWWr1AaGpQ=)
                          3: 99E52804462E11ED90035452C4F9AE02.roa (hash: qcEi6yFXe14vxwDIXMsWeAcEI41V5KEYbNBlQcRMfIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
                          rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
        Validity
            Not Before: Mar 25 01:11:33 2026 GMT
            Not After : Apr  1 01:11:33 2026 GMT
        Subject: CN=69c33645-22c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:7b:3e:28:09:55:94:1a:6b:3c:84:48:90:
                    f0:d7:b2:ea:ab:d7:4c:83:1e:f3:d6:02:cd:3a:90:
                    e2:f1:66:4f:c9:57:0f:98:7d:fb:77:14:c3:f3:38:
                    de:56:61:00:bd:db:1a:1a:a7:d8:bc:28:07:f3:a8:
                    3d:2c:b3:9e:14:b8:54:de:ae:d8:cd:d7:f4:3e:a7:
                    cd:ec:79:e5:23:74:ba:3c:bc:d4:9a:d5:f2:8a:1a:
                    9b:a4:bf:ae:7f:e0:e8:b1:40:a8:4b:ab:b2:0a:11:
                    ae:83:91:71:e3:f0:9e:76:f0:ae:a5:68:df:ec:9a:
                    2b:50:9f:49:45:38:c1:c0:c3:2a:b3:08:3c:70:cb:
                    51:67:43:bb:db:27:ee:0c:cc:e6:a2:ea:ab:b0:1c:
                    7e:76:d4:91:e1:66:65:fd:c7:ca:13:49:6d:b1:b5:
                    df:bd:2b:d0:2f:45:6f:d4:2e:1e:16:42:17:56:02:
                    42:41:be:c2:7e:41:56:0a:5f:ef:41:55:0d:7e:3d:
                    d8:1a:8b:53:67:90:bd:71:96:4b:31:f6:14:02:a4:
                    56:35:5b:87:e8:52:17:71:f0:7e:4b:09:29:67:d2:
                    18:6e:3f:70:93:4e:0b:c9:b1:d7:96:08:0e:8b:4d:
                    20:3f:0c:45:71:7c:77:b7:59:9f:45:7e:4a:8b:ee:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D4:23:2C:E7:FA:20:67:A8:0C:55:CF:5A:54:57:A6:A5:91:15:1D
            X509v3 Authority Key Identifier:
                keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1c:63:fb:a5:0d:cf:7f:2b:d9:dc:aa:14:23:ae:47:3b:02:
         b8:9f:fd:50:cd:5a:c1:06:a8:c5:36:3e:c3:59:09:d7:73:26:
         32:76:e0:8a:5e:70:01:f3:e6:47:ed:aa:e1:9c:91:e7:14:af:
         07:dc:3a:7d:21:92:6e:72:23:bb:91:9c:7b:81:8f:1f:4b:18:
         c6:85:a5:35:ce:05:ed:93:89:b8:fb:77:08:50:79:85:0d:70:
         db:9a:a1:bc:6d:c2:bf:99:36:0c:6c:35:ca:69:25:40:6c:5b:
         ad:86:44:ef:2c:c1:26:f4:43:78:cc:b5:f9:3d:c6:7d:4d:8b:
         36:6d:f6:30:e0:c2:60:c2:47:c5:63:3e:56:3d:d5:22:33:aa:
         b1:ff:57:94:24:06:23:97:f5:9f:99:3a:4e:d8:9c:14:6b:b1:
         0a:c9:c0:db:97:7d:1d:6b:7a:37:b7:57:97:fd:2a:53:8c:61:
         7c:61:ee:6a:49:5e:fc:0a:f1:7c:c5:8d:8e:40:80:57:a4:29:
         05:59:fb:47:30:d0:97:f5:37:52:67:c6:ff:e1:19:c1:89:1d:
         60:cf:be:19:8c:97:ce:7e:a1:61:7a:a9:dc:3d:56:05:3c:27:
         ba:e4:98:d0:ad:f0:06:ee:84:29:ef:60:42:d9:3a:ee:9d:d5:
         b9:3b:03:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1
NjlFRUUzQ0UwHhcNMjYwMzI1MDExMTMzWhcNMjYwNDAxMDExMTMzWjAYMRYwFAYD
VQQDEw02OWMzMzY0NS0yMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtx7PigJVZQaazyESJDw17Lqq9dMgx7z1gLNOpDi8WZPyVcPmH37dxTD8zje
VmEAvdsaGqfYvCgH86g9LLOeFLhU3q7Yzdf0PqfN7HnlI3S6PLzUmtXyihqbpL+u
f+DosUCoS6uyChGug5Fx4/CedvCupWjf7JorUJ9JRTjBwMMqswg8cMtRZ0O72yfu
DMzmouqrsBx+dtSR4WZl/cfKE0ltsbXfvSvQL0Vv1C4eFkIXVgJCQb7CfkFWCl/v
QVUNfj3YGotTZ5C9cZZLMfYUAqRWNVuH6FIXcfB+SwkpZ9IYbj9wk04LybHXlggO
i00gPwxFcXx3t1mfRX5Ki+4HNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzUIyzn
+iBnqAxVz1pUV6alkRUdMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2
MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp
N1I2TWFEY0VkcFJXbnU0ODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVRxj+6UNz38r2dyqFCOuRzsCuJ/9UM1awQaoxTY+w1kJ13MmMnbgil5wAfPm
R+2q4ZyR5xSvB9w6fSGSbnIju5Gce4GPH0sYxoWlNc4F7ZOJuPt3CFB5hQ1w25qh
vG3Cv5k2DGw1ymklQGxbrYZE7yzBJvRDeMy1+T3GfU2LNm32MODCYMJHxWM+Vj3V
IjOqsf9XlCQGI5f1n5k6TticFGuxCsnA25d9HWt6N7dXl/0qU4xhfGHuakle/Arx
fMWNjkCAV6QpBVn7RzDQl/U3UmfG/+EZwYkdYM++GYyXzn6hYXqp3D1WBTwnuuSY
0K3wBu6EKe9gQtk67p3VuTsDzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:56 2026 by rpki-client