Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
File:                     jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json)
Hash identifier:          uRI1AoTqy3DBtU1A4toATGUAlx89Qb6j/TwF5JM6dTU=
Subject key identifier:   23:BF:43:38:FA:AC:D4:9C:76:C7:55:7E:63:94:EE:77:E5:F9:C9:5C
Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
Certificate issuer:       /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
Manifest number:          025B
Signing time:             Wed 25 Mar 2026 01:39:17 +0000
Manifest this update:     Wed 25 Mar 2026 01:39:16 +0000
Manifest next update:     Wed 01 Apr 2026 01:39:16 +0000
Files and hashes:         1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: jU5cU32O8DYpzUsNNWnYI13NUelGL9yqnGizHFKa0co=)
                          2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: OwTmdvXh/fVgIelq52MoT3QNfZLp7zkcbYsPTc6P3yc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
                          rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
        Validity
            Not Before: Mar 25 01:39:16 2026 GMT
            Not After : Apr  1 01:39:16 2026 GMT
        Subject: CN=69c33cc4-be17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:ef:e3:fa:a0:d8:f0:c9:3b:1a:e6:4a:aa:
                    75:97:a2:62:0e:c1:5a:e0:44:e6:fb:bd:c1:a9:bd:
                    62:09:71:08:9a:6a:41:3f:c2:de:cf:c7:42:54:ff:
                    28:d5:e2:85:06:c9:e0:c0:5d:12:c9:ad:3d:3e:91:
                    8f:13:e3:eb:6a:3d:48:f2:90:06:2f:de:82:ae:3e:
                    4e:d1:7f:63:6a:58:92:1e:fc:ac:80:3d:ce:60:dc:
                    45:1e:18:5c:3a:d4:14:5c:0c:42:d2:c8:cd:31:57:
                    59:9b:e0:88:00:ac:91:71:05:f7:10:e2:f1:5b:6f:
                    c4:97:46:23:e5:30:95:78:8e:46:d4:6c:31:94:be:
                    15:96:f2:9a:f2:bc:e1:1c:35:81:b7:1a:61:41:26:
                    f5:50:ac:1d:8b:bc:8f:af:5e:70:66:6c:97:42:cd:
                    0d:8b:04:00:be:77:a9:f0:56:89:4d:2b:7a:35:23:
                    d1:a2:e3:69:6e:1d:3b:a8:9f:6c:7e:43:b6:36:5d:
                    54:6f:46:d4:79:e8:39:90:10:a2:77:b1:15:f5:07:
                    43:c0:50:32:27:17:8f:42:71:43:00:c3:82:d2:c7:
                    ec:a1:4e:bb:06:69:a1:98:be:89:ab:b3:72:f3:aa:
                    62:0e:7c:f6:d2:63:c3:99:4e:e0:33:e1:7e:08:1a:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BF:43:38:FA:AC:D4:9C:76:C7:55:7E:63:94:EE:77:E5:F9:C9:5C
            X509v3 Authority Key Identifier:
                keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a2:01:a4:db:e8:6e:a1:45:fd:17:0a:20:e5:41:05:d1:bd:
         2e:1e:e0:27:93:f9:fc:ae:ca:45:8d:7e:e1:e2:e5:82:77:a8:
         1d:7e:44:e4:2e:65:fc:b9:ae:3c:32:46:5a:71:f9:71:ce:e9:
         7a:b8:9f:36:0e:70:fd:7d:05:11:3e:54:66:1c:1f:04:1c:ad:
         28:f3:0b:0b:24:c6:f1:ff:98:54:f6:92:d2:df:f8:0c:95:7a:
         67:7f:cc:2e:c8:89:c5:40:b2:a8:e5:bd:41:eb:97:4a:d7:6e:
         09:7a:53:5b:53:dc:18:91:95:a2:a6:ec:6c:e3:b0:a4:83:7d:
         1e:d0:0f:98:73:af:4b:cf:96:d6:0f:3d:15:7d:eb:11:c1:3d:
         a9:37:01:62:c4:f3:f2:86:e5:ce:d6:bf:0a:6a:43:50:65:0b:
         a1:e7:b8:7c:e1:14:d4:20:ca:2a:8c:22:dc:b7:1c:c8:7b:ef:
         7a:e9:6c:f3:94:79:e9:85:a8:95:53:0e:ee:b9:8d:fc:47:8c:
         8e:d0:5e:0a:3c:3e:b7:e6:72:b9:92:65:94:ea:4e:69:cf:58:
         eb:e1:42:47:03:08:4a:c6:1d:00:39:71:d5:9a:2b:4c:86:6c:
         fe:02:0a:05:39:d5:12:05:ae:b4:79:78:59:52:de:52:23:f0:
         15:14:70:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC
QjE3NEVCMDgwHhcNMjYwMzI1MDEzOTE2WhcNMjYwNDAxMDEzOTE2WjAYMRYwFAYD
VQQDEw02OWMzM2NjNC1iZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjEzv4/qg2PDJOxrmSqp1l6JiDsFa4ETm+73Bqb1iCXEImmpBP8Lez8dCVP8o
1eKFBsngwF0Sya09PpGPE+Praj1I8pAGL96Crj5O0X9jaliSHvysgD3OYNxFHhhc
OtQUXAxC0sjNMVdZm+CIAKyRcQX3EOLxW2/El0Yj5TCVeI5G1GwxlL4VlvKa8rzh
HDWBtxphQSb1UKwdi7yPr15wZmyXQs0NiwQAvnep8FaJTSt6NSPRouNpbh07qJ9s
fkO2Nl1Ub0bUeeg5kBCid7EV9QdDwFAyJxePQnFDAMOC0sfsoU67BmmhmL6Jq7Ny
86piDnz20mPDmU7gM+F+CBrSwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCO/Qzj6
rNScdsdVfmOU7nfl+clcMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw
QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN
aERidFU4QTBQT3E3RjA2d2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKaIBpNvobqFF/RcKIOVBBdG9Lh7gJ5P5/K7KRY1+4eLlgneoHX5E5C5l/Lmu
PDJGWnH5cc7perifNg5w/X0FET5UZhwfBBytKPMLCyTG8f+YVPaS0t/4DJV6Z3/M
LsiJxUCyqOW9QeuXStduCXpTW1PcGJGVoqbsbOOwpIN9HtAPmHOvS8+W1g89FX3r
EcE9qTcBYsTz8oblzta/CmpDUGULoee4fOEU1CDKKowi3LccyHvveuls85R56YWo
lVMO7rmN/EeMjtBeCjw+t+ZyuZJllOpOac9Y6+FCRwMISsYdADlx1ZorTIZs/gIK
BTnVEgWutHl4WVLeUiPwFRRwBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:37 2026 by rpki-client