Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
File:                     jqjmtSCNaoLUqRJIaXYVovYuYKM.mft (raw, json)
Hash identifier:          a47wkj5Ev1ufeROZruLav/h7cwffTrsGYup26hGpwCE=
Subject key identifier:   A9:FC:BF:3C:22:0D:F6:02:B5:6A:C1:64:00:66:9F:BC:6B:87:5D:9A
Authority key identifier: 8E:A8:E6:B5:20:8D:6A:82:D4:A9:12:48:69:76:15:A2:F6:2E:60:A3
Certificate issuer:       /CN=A91B01B9/serialNumber=8EA8E6B5208D6A82D4A91248697615A2F62E60A3
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
Manifest number:          0D
Signing time:             Wed 25 Mar 2026 08:17:15 +0000
Manifest this update:     Wed 25 Mar 2026 08:17:14 +0000
Manifest next update:     Wed 01 Apr 2026 08:17:14 +0000
Files and hashes:         1: jqjmtSCNaoLUqRJIaXYVovYuYKM.crl (hash: GCIsPknIix02zJINe+UqjYrNRcFV3/BadejpQ7h0SWs=)
                          2: 60F91A0E178C11F1B48EB6C42A3D8C67.roa (hash: ysI0a32i7ANwMhshWNRKJcGsl62vILkKHC3H9zk5aNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.crl
                          rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01B9, serialNumber=8EA8E6B5208D6A82D4A91248697615A2F62E60A3
        Validity
            Not Before: Mar 25 08:17:14 2026 GMT
            Not After : Apr  1 08:17:14 2026 GMT
        Subject: CN=69c39a0b-6175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:e5:25:9e:c6:c6:3e:b3:c3:b7:09:9b:80:
                    47:58:6d:dd:f6:57:90:6e:15:c3:52:0a:44:ae:aa:
                    a7:58:a9:23:81:06:50:a9:70:57:64:1a:1a:2d:65:
                    ae:0c:05:87:73:5b:75:e4:c3:b7:35:9b:85:64:04:
                    48:9c:9e:c4:df:72:33:2c:c3:40:18:e7:99:b8:56:
                    e5:bb:67:c7:d9:02:a4:ee:07:df:96:89:70:ad:0c:
                    b9:a7:93:c5:6c:cd:e9:c6:77:6b:c5:ac:e9:95:d4:
                    7c:af:7e:85:48:9a:1f:c4:4c:ad:19:48:af:a4:81:
                    6f:ac:c4:b3:0e:cd:95:f8:18:94:28:f6:7a:68:4b:
                    0c:8e:8b:7c:37:1a:01:ab:89:a5:9a:2e:25:da:f6:
                    97:1c:b5:64:5f:f4:fd:cb:fb:28:49:2c:e5:7d:f5:
                    f1:7f:74:b8:46:ee:a3:73:3f:51:95:34:3a:bd:7f:
                    e4:cc:ec:50:e6:44:3d:5f:5e:74:90:fa:0b:27:5b:
                    24:62:f3:90:4f:2a:26:28:ce:f2:71:91:41:0c:36:
                    41:c3:3d:17:e9:42:96:0f:f4:1c:f1:d3:61:81:c3:
                    3d:2e:85:c7:db:bc:4f:da:75:d5:de:f5:81:79:09:
                    17:37:08:bd:86:db:1f:9c:ab:a5:fe:c5:7e:d7:4a:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FC:BF:3C:22:0D:F6:02:B5:6A:C1:64:00:66:9F:BC:6B:87:5D:9A
            X509v3 Authority Key Identifier:
                keyid:8E:A8:E6:B5:20:8D:6A:82:D4:A9:12:48:69:76:15:A2:F6:2E:60:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jqjmtSCNaoLUqRJIaXYVovYuYKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01B9/3AA980F8178911F18A4FACC2293D8C67/jqjmtSCNaoLUqRJIaXYVovYuYKM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:b1:02:16:f5:90:12:45:d7:4d:b8:d6:32:32:f1:8e:2a:
         51:f6:82:15:4e:47:0b:51:d0:7a:b6:d8:37:e2:70:e8:6d:b8:
         f5:53:b5:d7:0f:60:3b:09:bc:4e:7f:d8:5a:3b:48:68:20:e6:
         3d:68:e3:3a:9f:dd:5a:36:de:cb:92:ca:fe:71:93:56:fe:1f:
         96:20:cd:ac:8a:50:06:be:49:3b:52:18:8e:a6:f9:c2:64:f5:
         7f:53:36:ad:de:04:2e:c8:73:0f:13:c6:f5:f2:26:b3:b8:f0:
         e7:3a:0b:8b:fa:84:00:29:24:04:24:a6:21:92:b4:5f:88:4f:
         4a:72:a5:e5:5b:e5:e4:9f:87:22:26:c1:63:09:8a:1f:65:ac:
         95:2e:49:fb:da:39:15:ed:fb:c8:46:68:c4:28:f3:dc:bc:28:
         0b:d1:4e:47:3f:ba:e1:9f:ac:5c:d9:d4:04:9b:7e:c5:f2:6a:
         ff:95:e5:86:f7:9d:82:58:27:32:42:3a:73:b7:e2:09:50:4a:
         7b:76:9c:9b:7f:c4:75:c6:3e:41:78:67:58:b2:fd:1a:21:8c:
         cb:27:e6:dc:1b:3a:54:d3:06:d0:7e:fb:96:93:59:bc:a3:37:
         15:93:1e:e2:9c:a7:e8:00:9e:81:b6:d2:e0:93:99:61:ae:2e:
         9d:ba:29:04
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MDFCOTExMC8GA1UEBRMoOEVBOEU2QjUyMDhENkE4MkQ0QTkxMjQ4Njk3NjE1QTJG
NjJFNjBBMzAeFw0yNjAzMjUwODE3MTRaFw0yNjA0MDEwODE3MTRaMBgxFjAUBgNV
BAMTDTY5YzM5YTBiLTYxNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4m+UlnsbGPrPDtwmbgEdYbd32V5BuFcNSCkSuqqdYqSOBBlCpcFdkGhotZa4M
BYdzW3Xkw7c1m4VkBEicnsTfcjMsw0AY55m4VuW7Z8fZAqTuB9+WiXCtDLmnk8Vs
zenGd2vFrOmV1HyvfoVImh/ETK0ZSK+kgW+sxLMOzZX4GJQo9npoSwyOi3w3GgGr
iaWaLiXa9pcctWRf9P3L+yhJLOV99fF/dLhG7qNzP1GVNDq9f+TM7FDmRD1fXnSQ
+gsnWyRi85BPKiYozvJxkUEMNkHDPRfpQpYP9Bzx02GBwz0uhcfbvE/addXe9YF5
CRc3CL2G2x+cq6X+xX7XSqYhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqfy/PCIN
9gK1asFkAGafvGuHXZowHwYDVR0jBBgwFoAUjqjmtSCNaoLUqRJIaXYVovYuYKMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMUI5LzNBQTk4MEY4MTc4
OTExRjE4QTRGQUNDMjI5M0Q4QzY3L2pxam10U0NOYW9MVXFSSklhWFlWb3ZZdVlL
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvanFqbXRTQ05hb0xVcVJKSWFYWVZvdll1WUtNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw
MUI5LzNBQTk4MEY4MTc4OTExRjE4QTRGQUNDMjI5M0Q4QzY3L2pxam10U0NOYW9M
VXFSSklhWFlWb3ZZdVlLTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA147ECFvWQEkXXTbjWMjLxjipR9oIVTkcLUdB6ttg34nDobbj1U7XXD2A7CbxO
f9haO0hoIOY9aOM6n91aNt7Lksr+cZNW/h+WIM2silAGvkk7UhiOpvnCZPV/Uzat
3gQuyHMPE8b18iazuPDnOguL+oQAKSQEJKYhkrRfiE9KcqXlW+Xkn4ciJsFjCYof
ZayVLkn72jkV7fvIRmjEKPPcvCgL0U5HP7rhn6xc2dQEm37F8mr/leWG952CWCcy
Qjpzt+IJUEp7dpybf8R1xj5BeGdYsv0aIYzLJ+bcGzpU0wbQfvuWk1m8ozcVkx7i
nKfoAJ6BttLgk5lhri6duikE
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:20 2026 by rpki-client