Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          mlh3WHPUchomhF59clJ+i3m5A3fjpJrz336xuJZcVKg=
Subject key identifier:   F1:1B:CC:9A:69:6C:58:C4:99:D5:8F:1D:23:6B:25:7E:5B:AC:2D:58
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0B3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0AFC
Signing time:             Tue 24 Mar 2026 19:12:25 +0000
Manifest this update:     Tue 24 Mar 2026 19:12:25 +0000
Manifest next update:     Tue 31 Mar 2026 19:12:25 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: I4aWlOrRG/cTwXAHHPAYJb0B5ASwNR/kV9JbFP3xJ3Q=)
                          2: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: pZZtHGFQRbt0wHLJTk6iKV6lnlHB4kiYZ8oDEDgL+Hw=)
                          3: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: j6vtGdsn58n5PFNIgokVa7egz01S/Wt3cjqK2/oPYCU=)
                          4: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Ks6wPXQrbbeCTTlosIDswm4J7H1L/F650F9YqKuuo/A=)
                          5: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: fvHEuQxM7QtSBpohLsHjlXFRVApMH4LnofLEq5KCpls=)
                          6: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: i+DeWSxP+SUrPsRvRk++UVMLgUpYl/0wKKoB8sZiS1A=)
                          7: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: 02OkEZdFmEpHGfisQA3gcJEbG2uFhlx+shvED8B5SFQ=)
                          8: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 9TteqD6INKZgRh3A2cwFyNm4pTulPoLeS0psHfIr0EU=)
                          9: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: iwYxtbph75PfLUWyrRQ1ZKsYXZDAuMWGHem1wlC1TsY=)
                          10: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: kLpSmWdSGg8Mg4g60+DwwIcGfuFqFbChFN5SNdpQQCc=)
                          11: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: yp48JDkpR5TQy5O1NVCB2GBTzUPaSfD8syejqe9qTmg=)
                          12: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: MJ4t9mNOzArFswvJlj8ONWt12fku2oXbHOQN2lvyrzo=)
                          13: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: 30Ay1Zbq76x+Zxtcn+jqASaeqsesqa1rZ5wxXWBIbpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2874 (0xb3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Mar 24 19:12:25 2026 GMT
            Not After : Mar 31 19:12:25 2026 GMT
        Subject: CN=69c2e219-05a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:a0:b3:fd:bc:51:5c:f7:11:10:b0:c4:8f:
                    3d:a8:2a:b9:6c:20:70:74:26:8c:00:ee:e9:26:53:
                    98:24:8f:6b:d0:fb:63:44:be:ef:65:3f:51:15:c2:
                    19:c1:1d:1e:ff:42:32:1d:e3:b1:a8:03:d3:2f:1a:
                    40:2d:f7:3e:7f:ed:59:9f:27:44:37:60:33:25:f6:
                    e9:20:9c:e4:67:05:20:ca:23:8c:07:66:32:9c:e7:
                    3b:62:2c:96:8c:ee:cf:4c:a5:0c:2d:a4:85:1d:b2:
                    65:b9:5b:d3:c4:e9:48:6a:ac:f2:8f:93:7b:af:09:
                    7d:2b:43:5a:f5:97:53:a1:84:e7:1a:b8:3b:9f:0a:
                    c7:ed:fc:12:ec:4d:b5:a9:50:2b:b5:4c:f2:1e:c5:
                    7d:8a:6e:3a:17:2c:91:20:fd:29:5a:92:a0:51:29:
                    fb:ec:f1:f6:f4:e2:f8:83:f5:11:f2:fc:57:52:c0:
                    44:6e:c9:66:19:6f:d5:34:ff:b5:3a:d1:35:96:6c:
                    0f:fc:50:9f:4f:16:c7:42:b3:ed:6e:aa:31:c6:f0:
                    af:92:99:53:3e:13:20:9d:b5:1a:c2:ba:37:a6:c2:
                    8a:a0:e1:a9:78:35:f7:f5:40:2b:68:14:87:68:a9:
                    0b:b2:f0:f4:58:99:0d:60:08:65:c6:03:0f:02:ac:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1B:CC:9A:69:6C:58:C4:99:D5:8F:1D:23:6B:25:7E:5B:AC:2D:58
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:b8:e7:71:04:01:c8:25:c8:7c:f1:0d:4c:50:5a:cc:41:
         db:2e:e7:16:1c:f9:57:0c:ad:5e:4c:38:b4:af:80:d1:7f:d9:
         44:ef:6a:5b:d5:6e:0b:ec:1e:2d:36:87:08:75:39:cb:36:22:
         3b:06:58:dc:57:3d:60:ef:e9:b2:87:01:b4:60:45:49:9f:08:
         ad:c6:a9:b6:be:ea:7f:f2:07:49:c7:39:5d:91:53:80:2d:36:
         2f:22:2c:20:b7:d1:95:78:de:43:31:16:5b:1a:61:e6:a7:56:
         d9:ca:d4:69:78:d6:62:11:71:1a:9d:00:59:78:b7:0a:11:a0:
         d6:8f:b7:bd:14:d8:f8:b4:a9:f4:d2:08:48:7c:d2:63:2f:43:
         24:84:bc:53:66:1c:08:81:f7:1b:57:54:15:6e:e0:56:ec:68:
         54:ad:69:e8:ef:18:0b:ff:a3:71:fb:6a:22:de:0e:4c:d4:92:
         7d:b5:9f:9d:17:b7:2d:8e:24:3b:7e:f0:16:08:19:77:ac:53:
         91:b5:87:70:7f:84:2f:4e:74:18:d0:1e:b9:00:99:30:cd:81:
         a0:85:79:4a:7b:9d:d4:8c:fd:b2:af:8e:81:8f:fb:e3:b1:11:
         2e:7d:01:f2:e3:95:09:0b:a1:b3:e5:9f:17:fe:85:08:9d:39:
         61:9a:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:20 2026 by rpki-client