Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File:                     JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier:          1kDmmkGPLv2d5HgEUTZDbqhWXU5O8kjNqUSCdhmLmZs=
Subject key identifier:   5D:BE:5D:B2:B5:88:41:2F:43:CA:82:16:9A:F9:0D:2E:AD:BF:14:28
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer:       /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number:          91
Signing time:             Wed 25 Mar 2026 06:41:49 +0000
Manifest this update:     Wed 25 Mar 2026 06:41:48 +0000
Manifest next update:     Wed 01 Apr 2026 06:41:48 +0000
Files and hashes:         1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: 3LijuSvkRvdX1q5728GH3L7jG2Q4Rcfz+y5r3w0k8q8=)
                          2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: qCaE67iInJHl1uaOXWUFk7HB/aS48j+fp1lC079yKZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
        Validity
            Not Before: Mar 25 06:41:48 2026 GMT
            Not After : Apr  1 06:41:48 2026 GMT
        Subject: CN=69c383ad-5118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4c:3d:7b:99:8b:a6:5e:85:0d:51:0c:59:89:
                    68:9e:61:ec:e2:5b:f0:3d:65:df:2f:ac:94:bc:85:
                    ca:40:7b:b7:32:4c:f7:27:74:cf:25:cf:83:d0:1b:
                    53:90:46:9c:cb:e3:97:95:69:16:7c:49:9a:44:c6:
                    05:6e:ac:5f:47:42:e4:76:0b:df:e4:4e:48:07:98:
                    4e:89:8e:56:62:0a:0f:d8:56:e5:13:99:8e:b3:f9:
                    c9:79:6f:f2:a8:c2:7d:44:d1:00:b7:f7:6c:f7:dd:
                    a6:8f:85:36:1c:ae:06:51:e9:f4:82:09:54:68:23:
                    3e:ca:ef:14:81:3e:53:f2:21:28:63:ff:bf:16:a6:
                    d9:9e:8b:1a:76:e4:c8:4f:dd:3c:94:0a:c2:6e:6a:
                    1a:5e:5a:9d:82:69:97:3a:ee:e8:7e:95:74:72:d4:
                    86:16:92:c1:d8:3e:d8:a1:cc:96:c1:1d:97:5e:fe:
                    fb:bd:08:09:71:29:58:5d:9e:71:e0:d7:17:0f:ea:
                    5e:25:77:1b:83:b5:cf:ca:e0:31:7d:45:62:f6:ce:
                    02:c7:6b:6e:38:ef:7f:3a:5c:08:de:e1:58:5c:c2:
                    33:e0:88:6c:6a:c7:1e:47:09:7c:6f:d9:fa:a1:25:
                    b0:48:18:0b:11:05:90:0b:f1:5b:9c:fa:7c:7e:9f:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BE:5D:B2:B5:88:41:2F:43:CA:82:16:9A:F9:0D:2E:AD:BF:14:28
            X509v3 Authority Key Identifier:
                keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:d9:e7:78:b5:9d:46:5e:20:8a:10:17:38:7e:3e:e9:c4:
         b6:1a:31:bc:71:cf:bf:e0:23:bd:86:74:d6:dc:ce:63:33:05:
         02:b2:50:c2:e6:06:b0:01:2b:86:b6:04:39:cf:4f:e7:cc:0c:
         8d:bd:46:9f:ed:50:b6:09:6a:5b:7d:37:67:fc:b4:bc:15:29:
         79:a7:2b:3b:d5:f5:64:73:13:71:93:30:7f:7c:66:2b:89:5b:
         f3:f6:61:7f:a5:46:5d:8b:2c:19:ac:09:ec:5c:7d:d5:71:66:
         7f:44:fe:26:6a:0d:72:04:c9:8a:9a:02:d6:48:1f:8b:ce:11:
         ba:b5:d2:73:05:e4:ba:36:5a:11:e0:69:ec:00:23:b2:b6:a2:
         ac:35:ef:2f:3a:2a:12:ea:67:5b:b4:35:4c:50:59:94:7b:7b:
         91:fc:6f:de:c7:2c:c6:78:e8:be:db:9b:2c:4f:ea:06:5e:70:
         ff:7e:5e:e7:d0:62:fd:5f:b3:d6:b2:7e:a0:7b:76:f7:7a:d7:
         dd:9b:8d:6f:0c:0f:03:cc:43:2b:83:96:7c:d0:e9:d9:c4:ee:
         0a:eb:38:33:d9:80:e9:47:89:35:bf:6e:33:73:8d:65:c6:10:
         03:96:d7:d4:e7:2a:66:52:a8:4d:56:c9:05:df:32:b9:af:ca:
         11:cc:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:48:13 2026 by rpki-client