Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
File:                     JRiNYKv1gleStK_K1bK06Xj6rjA.mft (raw, json)
Hash identifier:          rAodVXXKVgg7aZ0P+Q+jBhAfB90cSaOOPN5oNAadrmg=
Subject key identifier:   63:AF:CE:C2:23:DD:80:68:00:2A:14:6D:4F:00:6D:12:7D:00:35:F0
Authority key identifier: 25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30
Certificate issuer:       /CN=A91C61F3/serialNumber=25188D60ABF5825792B4AFCAD5B2B4E978FAAE30
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
Manifest number:          06
Signing time:             Wed 25 Mar 2026 08:21:51 +0000
Manifest this update:     Wed 25 Mar 2026 08:21:51 +0000
Manifest next update:     Wed 01 Apr 2026 08:21:51 +0000
Files and hashes:         1: JRiNYKv1gleStK_K1bK06Xj6rjA.crl (hash: q0XUKqdudbxsyvandyMLrzK4NlNYVybjqFJsBydCqvM=)
                          2: C22533B2219611F1B6D5F32F0F3D8C67.roa (hash: BYrUCJsV9Natx/11SEP3UvxSYY35sLFasGEJQEXzbKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.crl
                          rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C61F3, serialNumber=25188D60ABF5825792B4AFCAD5B2B4E978FAAE30
        Validity
            Not Before: Mar 25 08:21:51 2026 GMT
            Not After : Apr  1 08:21:51 2026 GMT
        Subject: CN=69c39b1f-175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7e:9b:05:86:53:1a:fa:b8:7d:9c:19:7b:28:
                    86:c5:c5:a0:52:13:01:cc:7e:3b:4e:a3:b2:97:95:
                    5a:ec:10:e8:cd:95:39:46:40:f3:08:56:8d:46:6c:
                    c6:79:d1:84:ee:40:24:99:6f:60:65:2d:4b:4b:e7:
                    1e:e8:a5:57:8f:29:6a:74:28:51:b0:1b:b4:e5:06:
                    5b:7a:aa:5f:7e:a5:db:a0:bd:07:81:5c:10:48:e3:
                    27:6a:f0:bf:fc:44:00:ba:84:2a:4f:26:14:03:ae:
                    b1:e1:5f:b1:ab:45:09:2e:12:b0:4b:cb:87:fc:e4:
                    69:b7:d1:b0:4c:6f:3c:7b:ec:d0:8d:88:6c:51:17:
                    74:e7:81:4b:c7:bd:27:ff:cd:fc:16:66:2e:41:cb:
                    8c:88:f6:9d:6d:d0:5e:c5:6f:cd:24:4d:2d:91:91:
                    25:f4:ad:93:f0:34:85:91:40:48:da:70:02:1b:2d:
                    f0:2d:47:9c:60:f5:69:92:d2:da:b8:bb:c4:a7:68:
                    cd:0f:c4:5a:e5:19:2d:6f:86:d4:11:b8:5e:b6:1a:
                    eb:48:53:85:37:23:ae:c9:f3:3a:aa:92:9e:ce:9a:
                    cf:6d:27:1f:0b:9f:ed:cd:c8:91:3c:97:3a:b6:04:
                    a0:7e:b9:78:37:52:d6:fc:d9:41:42:ea:40:a7:da:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:CE:C2:23:DD:80:68:00:2A:14:6D:4F:00:6D:12:7D:00:35:F0
            X509v3 Authority Key Identifier:
                keyid:25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8e:85:49:03:77:2d:7b:77:95:f0:db:ab:e9:4f:2f:32:59:
         60:b1:4f:23:1b:f3:bc:6b:7a:ac:9f:0c:37:97:68:5c:23:ff:
         b0:2e:3a:9b:b4:b6:47:9c:d5:33:21:52:85:1c:b7:0a:98:ef:
         c7:e2:7a:1e:30:c7:11:8f:f2:f6:e5:2e:72:42:ba:c7:b3:e7:
         21:7e:c2:c3:4c:1c:a9:72:bc:cd:95:e3:69:4e:b0:58:9a:3a:
         04:e2:5b:f5:f8:b5:80:3f:4e:a2:b7:00:d2:a4:69:ab:11:8b:
         5f:09:0a:b2:59:04:ce:b8:8f:77:23:14:1e:e5:2f:5f:77:85:
         65:d8:c8:d7:ac:e8:cb:d5:57:16:e8:04:ce:8d:e1:7b:a3:e9:
         6f:fb:51:b0:d4:9f:18:a2:b6:f1:53:fd:af:d3:ea:48:89:66:
         87:cc:08:14:eb:c7:62:90:ef:05:5e:3e:72:8c:0a:c8:aa:29:
         2b:5c:9a:f4:07:4c:66:73:6c:e6:24:99:81:34:69:4b:d4:f9:
         28:17:d7:5b:3b:33:3e:79:10:ab:63:3b:23:80:20:89:be:90:
         74:fa:44:5d:3f:ea:76:12:f2:22:f8:db:c5:6a:d8:b7:1a:74:
         51:e2:c2:92:24:ff:b7:c3:f9:bb:e8:f0:11:db:48:d8:ad:7a:
         f3:7a:a1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:38 2026 by rpki-client