Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft
File:                     jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json)
Hash identifier:          X2HbRz9czze0gs90CSEmmK4vras9xtTLmbgkHnW5VFQ=
Subject key identifier:   D4:31:DE:14:18:A7:1E:78:1B:85:57:01:92:8B:AA:D3:D0:39:3C:2F
Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0
Certificate issuer:       /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft
Manifest number:          021B
Signing time:             Wed 25 Mar 2026 02:12:40 +0000
Manifest this update:     Wed 25 Mar 2026 02:12:39 +0000
Manifest next update:     Wed 01 Apr 2026 02:12:39 +0000
Files and hashes:         1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: hVsgPALupBj9J3Xo0hjs4fNXW0DEq/Q1yodfTA64SsU=)
                          2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: 5BTUk5FCMRH9uOYl6DgcqkVKLHs4oQwojpwGn/9Iqqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl
                          rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA0C1, serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0
        Validity
            Not Before: Mar 25 02:12:39 2026 GMT
            Not After : Apr  1 02:12:39 2026 GMT
        Subject: CN=69c34498-9c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:95:29:e3:64:22:a2:6a:85:76:ae:c5:00:
                    0c:3a:2d:54:cb:dd:fc:75:5a:bf:5f:6a:87:aa:35:
                    cd:55:4e:fe:98:56:8a:3a:4f:2a:cc:5c:c4:69:39:
                    fa:79:d0:53:a6:02:31:09:5d:5e:49:d6:ce:f5:d0:
                    db:ea:04:40:90:96:d7:28:4e:46:9d:83:af:a5:5f:
                    a6:ce:fd:cc:f6:4f:fa:74:8e:59:a6:e8:05:40:37:
                    e8:f8:b8:8e:aa:e8:72:ea:b5:d6:9b:20:da:cc:53:
                    9c:98:ca:c8:a2:f0:f5:fb:16:7b:92:85:cf:5a:ab:
                    91:06:c5:28:ae:f6:ae:af:96:d2:a8:2d:b7:20:03:
                    1e:ba:c6:9a:ab:1e:60:07:f9:e6:19:5e:27:b8:99:
                    09:26:1f:ea:9f:85:0b:2d:b7:04:5c:60:a8:2c:d6:
                    af:90:81:66:44:00:f7:2b:49:bb:54:cb:4a:4d:de:
                    fc:37:6c:28:d0:43:8a:a7:30:73:aa:93:da:92:1e:
                    2d:ea:f7:39:8e:ea:b3:5f:0f:80:f5:0b:4c:4c:2c:
                    88:52:bb:6f:7e:44:54:18:29:f1:78:ba:a6:23:d2:
                    80:4b:2a:34:75:fe:c5:ab:29:7a:42:d2:e0:af:a6:
                    15:28:f9:1c:94:8e:88:34:a6:60:25:6b:5c:af:6a:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:31:DE:14:18:A7:1E:78:1B:85:57:01:92:8B:AA:D3:D0:39:3C:2F
            X509v3 Authority Key Identifier:
                keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:11:72:9e:ca:96:67:7c:bb:95:65:16:43:7a:b0:dc:da:9f:
         8d:14:46:a7:79:d8:de:e8:9a:9f:64:7f:2e:58:9a:e3:72:cd:
         3a:40:3f:fc:30:98:05:32:e7:cb:b3:8a:0a:b4:cf:44:33:b9:
         03:31:51:88:1e:af:67:6c:f4:62:74:68:bd:e8:01:5b:4b:80:
         67:5e:42:9f:8a:07:2e:f0:d5:a2:c1:0c:c4:a8:81:22:0e:78:
         ef:86:39:a7:fc:19:0e:70:87:19:62:93:95:0e:95:8b:08:59:
         56:c2:9b:7b:ac:ba:e9:bf:60:c9:d0:9f:2d:a9:24:37:0b:c0:
         ca:a1:3b:b6:92:e1:ed:c9:90:c7:7b:9a:44:95:5d:2f:d2:41:
         81:d1:44:ef:32:ea:b0:3f:ee:c4:48:0f:59:15:da:61:ae:b1:
         ea:42:23:06:9c:0c:a5:b3:ab:a6:ec:9a:48:8b:be:c1:5a:f9:
         17:d8:0c:91:8a:5b:53:68:d1:26:32:91:00:a4:3f:72:9f:89:
         64:2c:01:bf:91:fd:b0:0f:08:5e:19:ff:32:a7:e6:98:8c:69:
         9f:57:5f:e7:11:d3:fe:72:bc:7b:81:78:37:71:7d:66:be:cd:
         91:c1:86:4c:b8:56:6a:8d:46:15:8b:ac:56:92:20:23:56:f3:
         a4:30:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:42 2026 by rpki-client