Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
File:                     JojUjjQhkrX9qNttrWLMFch1A_o.mft (raw, json)
Hash identifier:          l74OGgMgi2R+XG4c8QAVZyJFJSePzZcV1kNWtIV+tWg=
Subject key identifier:   09:16:E6:BF:CE:37:D3:B0:A5:01:65:E1:1F:78:A7:B3:F9:89:F7:4E
Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA
Certificate issuer:       /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
Certificate serial:       16E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
Manifest number:          16CD
Signing time:             Tue 24 Mar 2026 16:33:43 +0000
Manifest this update:     Tue 24 Mar 2026 16:33:42 +0000
Manifest next update:     Tue 31 Mar 2026 16:33:42 +0000
Files and hashes:         1: JojUjjQhkrX9qNttrWLMFch1A_o.crl (hash: FKeq3r3gttkwgenpu8Be0XUliE68iOjpONszusgJHT0=)
                          2: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (hash: J5IwXqeQPT+ieCiG4+/ZaMKcQBJLgNCp/5huQ6vysRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5859 (0x16e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE68, serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
        Validity
            Not Before: Mar 24 16:33:42 2026 GMT
            Not After : Mar 31 16:33:42 2026 GMT
        Subject: CN=69c2bce7-49fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:d3:b8:bf:ac:3e:30:25:a6:e7:a8:d6:3f:
                    91:b5:35:af:0a:3d:d3:78:6e:4b:f4:b8:ef:ea:63:
                    93:1c:2e:32:f7:d6:a7:eb:f2:55:6a:22:47:3a:e4:
                    b1:c0:9b:61:2e:fd:f6:6b:0e:7b:a1:d9:0a:81:18:
                    51:41:cb:d9:cd:b3:9a:ec:3d:9c:b1:21:e2:d4:f6:
                    25:f9:76:e7:e9:09:f2:53:b9:3f:ed:8c:09:2d:60:
                    f4:6e:2d:72:69:3a:c1:7e:68:0f:42:fb:ca:85:ce:
                    cc:1d:3b:94:ea:e8:c0:a1:5f:c2:63:00:6f:8d:00:
                    85:e7:38:80:30:6c:9e:d9:42:9e:bd:1d:0d:84:54:
                    2c:75:aa:68:d2:0a:2b:9c:02:a0:2f:4e:1b:96:6e:
                    ee:72:9c:71:89:62:43:9e:7a:1c:4c:76:d7:df:a7:
                    5f:27:a2:a3:cd:e2:af:a3:a5:15:e0:dc:13:a1:19:
                    78:51:bf:12:7d:8b:ab:68:4c:72:21:7c:c1:35:02:
                    f6:6b:b9:5a:b3:47:28:a2:07:a8:bf:e2:42:e8:f9:
                    0a:3b:34:e7:9f:1b:e9:3e:a4:99:60:e7:0f:d2:5f:
                    4c:80:d0:61:06:2a:34:9d:f9:82:71:cc:57:a4:a4:
                    5c:b3:af:60:2a:06:3e:53:1e:93:81:b8:83:c2:c4:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:E6:BF:CE:37:D3:B0:A5:01:65:E1:1F:78:A7:B3:F9:89:F7:4E
            X509v3 Authority Key Identifier:
                keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:95:7d:2b:46:24:04:b3:c5:d1:ea:4e:be:33:77:cb:8c:eb:
         57:f7:80:5a:e2:34:62:1f:47:c6:ec:81:ea:b4:f6:13:1a:7c:
         aa:c0:51:f2:38:48:01:1e:68:78:e9:2f:cc:e5:03:2b:00:e2:
         3b:b5:9e:73:50:08:02:ae:70:28:02:45:9c:e1:1c:7b:3f:f9:
         78:d3:43:62:4c:38:30:66:39:7b:b4:29:4b:c2:a4:c9:b5:b7:
         48:d0:44:5c:4a:39:df:e5:b1:9d:90:f9:ac:a9:6f:3a:d6:3b:
         9b:da:0d:c4:e3:65:86:e3:a2:21:75:f3:7a:5b:0b:d7:28:44:
         1d:7f:4f:fc:63:28:5a:c9:dd:3e:87:92:7c:9f:9b:ff:46:50:
         31:34:de:37:19:45:7e:21:79:d8:ce:6b:1d:d1:5b:f6:59:ef:
         3d:c8:dc:7b:fc:28:8d:71:2d:5d:a6:1e:5b:69:7e:4d:df:ca:
         5a:48:b7:8a:fa:7b:e9:06:08:5f:57:84:d7:24:43:97:a2:ee:
         39:9f:f4:cc:61:ed:9c:9a:3c:16:4d:21:92:65:bc:cc:51:98:
         9a:50:9c:08:fa:f0:2f:76:29:fe:9c:bc:1b:74:8b:45:17:a3:
         1d:55:1a:09:27:df:2c:ac:44:78:c5:02:0f:3e:19:85:62:3d:
         df:41:b1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:03 2026 by rpki-client