Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File:                     JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier:          yAkBUoMzj32q/LRkJj4AVOLFpxPKwvmn8MeHmxl6RIg=
Subject key identifier:   ED:7D:E8:31:6E:B3:28:3C:23:6D:6D:85:42:6D:9F:EF:9D:63:85:46
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer:       /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial:       1DD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number:          1DBF
Signing time:             Tue 24 Mar 2026 16:01:49 +0000
Manifest this update:     Tue 24 Mar 2026 16:01:48 +0000
Manifest next update:     Tue 31 Mar 2026 16:01:48 +0000
Files and hashes:         1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: aQVtv2Fo6gfqYiuPLEuVh3f3MSn4vbjs6S3kEv7D20I=)
                          2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
                          rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7632 (0x1dd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
        Validity
            Not Before: Mar 24 16:01:48 2026 GMT
            Not After : Mar 31 16:01:48 2026 GMT
        Subject: CN=69c2b56d-9497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:43:69:3d:f7:86:86:fd:c5:b3:99:39:d9:2c:
                    ff:b5:c9:73:0d:82:48:b9:88:00:1f:4b:ea:19:30:
                    a9:58:64:93:4d:f0:66:66:9b:ff:1a:66:fd:e2:41:
                    33:f1:da:51:f1:e7:b4:7a:cc:c8:36:84:47:d3:26:
                    71:ea:d8:13:8d:f6:cb:75:1b:fc:7a:db:c9:33:3b:
                    87:e6:ae:63:c6:94:4f:0d:31:a7:b7:68:8b:77:7d:
                    97:d1:b6:c4:56:7b:3b:ee:42:a4:93:56:89:80:9d:
                    95:f8:ed:db:94:57:55:d5:de:4e:07:24:db:10:46:
                    27:a0:51:c6:1d:10:f3:cc:0b:30:2d:5a:1b:19:76:
                    37:a0:56:26:6f:f7:c8:1c:80:eb:57:6a:ba:ba:c0:
                    9b:9a:2f:b4:69:cb:74:6c:a1:1a:ff:dd:3b:86:3e:
                    43:06:b0:d3:94:12:45:96:43:8b:fc:6b:24:47:cc:
                    64:5f:62:1d:63:f3:7a:71:af:0f:3c:93:cd:23:4e:
                    34:20:55:df:12:fb:ae:ff:b7:88:4f:ab:34:52:f3:
                    70:b3:57:db:2d:b1:be:68:78:30:08:24:1a:53:4f:
                    83:49:6d:5e:b8:8b:f5:c0:d6:e9:cd:da:d4:60:f6:
                    ec:87:95:8c:14:a0:15:87:56:95:5e:94:56:b6:d4:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:E8:31:6E:B3:28:3C:23:6D:6D:85:42:6D:9F:EF:9D:63:85:46
            X509v3 Authority Key Identifier:
                keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c3:80:7c:c0:e1:69:fa:35:ff:85:b8:fc:73:41:cf:4b:8b:
         4b:97:b5:da:28:e2:c3:aa:d1:bd:f7:dc:4c:2e:fc:61:dd:63:
         02:a0:af:37:12:62:8d:32:20:37:6d:e0:01:55:a4:2b:76:01:
         bf:b9:6a:75:26:11:0c:4e:40:38:61:ec:21:c4:09:2f:b7:0f:
         fa:06:6a:1e:05:99:dd:62:f7:ab:ee:c8:9d:18:dc:e3:b4:f0:
         24:e9:0d:95:50:5a:f4:87:70:34:37:59:9e:de:85:41:4a:6c:
         a3:d7:09:39:40:b8:1c:62:21:ec:ef:f3:b0:30:d0:58:dc:da:
         d2:86:26:d0:20:31:ff:24:d1:f3:e3:20:cd:8d:00:7b:0d:e7:
         ae:be:92:cb:83:94:9b:8a:76:d9:c2:62:11:4d:22:fc:65:ce:
         b9:91:ff:5f:a3:79:31:20:40:88:0a:73:17:0e:91:62:0f:ca:
         f9:45:89:8b:53:83:ee:0f:54:df:8e:e2:49:32:b1:64:0f:bc:
         0e:2f:af:aa:76:50:a9:1b:e9:ee:c9:90:fd:62:a8:0b:15:ac:
         aa:b4:95:1d:1c:cc:a8:34:7b:98:a0:fe:8d:41:e4:6d:07:a0:
         47:7b:89:37:b1:df:18:ce:77:3c:d3:01:6a:e4:b0:fb:b6:64:
         a8:1f:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:32 2026 by rpki-client