Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
File:                     jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json)
Hash identifier:          iJzRWjTzVgRAKkGmIozUICON/QvDhJOUqYPApXGioGw=
Subject key identifier:   FD:9E:56:53:BC:D7:22:67:DF:06:29:5D:D5:C6:1A:A8:35:E5:AF:68
Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19
Certificate issuer:       /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
Manifest number:          01B1
Signing time:             Wed 25 Mar 2026 03:22:14 +0000
Manifest this update:     Wed 25 Mar 2026 03:22:14 +0000
Manifest next update:     Wed 01 Apr 2026 03:22:14 +0000
Files and hashes:         1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: uNDXJ13bcmffGdrpJ7uAsd6D02qgiL69kFMYS9PBdNI=)
                          2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: CUeuH72R6wMEqHdQYRhjXClzCmFmQxPMkyhfcP/mgQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl
                          rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19
        Validity
            Not Before: Mar 25 03:22:14 2026 GMT
            Not After : Apr  1 03:22:14 2026 GMT
        Subject: CN=69c354e6-da58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:f3:af:1e:36:b2:b8:75:09:f1:58:1b:99:
                    b2:94:db:9e:10:8d:12:aa:20:50:11:60:e6:6b:86:
                    8c:c8:49:59:68:99:20:bc:9b:5b:3a:3d:2e:6f:2b:
                    b3:15:32:16:f8:41:6d:ec:a7:8e:78:1b:75:5c:07:
                    2b:8d:63:d5:78:7e:01:ab:fb:2b:a3:73:f4:7c:e4:
                    e0:92:46:2c:58:21:ba:71:1d:90:db:0c:ad:50:fa:
                    5d:c2:e6:55:c5:6e:a2:13:c8:f9:6f:be:ab:e3:40:
                    a7:70:92:35:a6:6d:62:4f:be:28:af:2a:1e:86:f2:
                    ee:94:3c:d2:e6:b0:c0:67:64:5e:24:ef:23:5b:06:
                    31:ea:56:cd:b1:fd:b8:8e:78:52:bd:8b:a7:56:5d:
                    19:e5:e9:1a:c2:33:c0:4c:b9:89:3c:20:7c:dd:24:
                    6d:6f:70:7a:aa:7b:1a:b1:2f:ff:c2:82:ed:b7:a7:
                    de:3f:17:77:5b:d3:21:e2:bf:b1:b2:00:0a:c3:51:
                    19:23:4a:d3:d2:0d:e6:db:12:a5:ec:a2:83:d4:3c:
                    45:21:a9:09:ad:62:ea:d7:b3:d1:a2:40:bb:41:9c:
                    9d:a9:be:55:c0:87:65:f2:eb:ff:72:f1:7b:f9:20:
                    57:07:86:7f:99:3a:38:d5:ab:52:f1:d9:7c:af:fd:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:56:53:BC:D7:22:67:DF:06:29:5D:D5:C6:1A:A8:35:E5:AF:68
            X509v3 Authority Key Identifier:
                keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:8a:84:c8:f2:d3:a3:cd:b0:c0:3f:c2:22:94:7f:f7:75:
         ba:1c:66:89:50:d1:ad:6b:03:fc:a0:83:88:11:ef:4a:27:70:
         4e:8a:2f:62:97:6f:d6:0e:cd:9e:4b:bf:a6:53:39:3a:8e:83:
         04:ac:26:7d:d1:e7:21:ce:69:f6:4c:fe:38:57:2b:c0:68:f4:
         38:74:9d:30:8e:bc:68:42:e7:27:56:eb:f8:f8:93:7a:23:fc:
         2d:c0:37:c5:27:eb:75:9e:0c:e8:3e:b8:54:7a:2c:08:3b:6f:
         a3:6f:75:6e:1d:c2:f6:59:15:89:4c:0f:6a:06:ad:84:fd:eb:
         5b:9f:2c:16:52:c0:11:fb:b2:09:80:e6:99:36:30:b4:d1:00:
         53:5f:8c:f5:31:9a:65:c3:9d:d7:c8:4e:4a:b2:39:12:ab:51:
         b5:c4:ea:d7:0c:5e:11:2c:c1:9c:63:92:11:d9:2b:a4:76:d6:
         5b:bd:cb:45:6a:34:02:c9:83:45:19:24:f0:78:05:be:98:3d:
         14:cd:16:50:aa:47:40:e1:c9:e1:4e:b2:a5:50:fc:5c:4c:8e:
         31:ca:fe:82:f4:d2:68:bf:ca:f0:fb:99:ff:33:5b:ec:2a:ef:
         61:97:a5:e1:88:d4:1b:32:33:c5:cd:58:26:34:7a:8e:99:bf:
         69:e8:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:09 2026 by rpki-client