Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File:                     jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier:          ncfTXYpabzE2QY16TBlX5UmvH3OWarYWj1I167ZAmWk=
Subject key identifier:   8F:72:6D:26:E3:14:41:3C:A4:DB:D5:B7:43:7A:3C:BF:7B:E9:E3:9D
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer:       /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial:       0B3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number:          0B33
Signing time:             Tue 24 Mar 2026 19:04:54 +0000
Manifest this update:     Tue 24 Mar 2026 19:04:53 +0000
Manifest next update:     Tue 31 Mar 2026 19:04:53 +0000
Files and hashes:         1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: Oobjt1JUzY8AqjL5zjb533ZmDgkeyE6Zq+HHYeNJPgw=)
                          2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: aXpgZXW8Cnbr8t1kmvAwuXjiQ6a1hBE+IDI1VsUVDFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2876 (0xb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
        Validity
            Not Before: Mar 24 19:04:53 2026 GMT
            Not After : Mar 31 19:04:53 2026 GMT
        Subject: CN=69c2e056-4fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:cb:fc:92:35:4f:4b:d3:54:dd:a2:ef:c9:
                    1c:df:6f:cb:42:d0:a7:ca:ad:3e:6d:79:a2:67:17:
                    88:c3:eb:f0:b6:2d:17:e8:67:b5:3f:9f:dd:a7:8e:
                    3e:86:86:be:2a:bc:11:e4:93:eb:a0:f4:20:80:2a:
                    6e:fe:24:c1:e8:7a:03:4e:58:84:20:0d:25:fc:e2:
                    b7:4d:05:87:1f:5a:6a:8b:18:fe:4b:61:ff:dc:93:
                    df:16:cc:7f:71:e0:c9:fd:a0:14:91:2f:c2:11:47:
                    39:90:7f:16:1b:cc:b3:a2:2c:52:2e:64:f0:b6:93:
                    d9:4d:20:bf:1a:7d:f4:7c:ec:d6:b5:f8:05:ee:6f:
                    9d:75:20:7c:57:c0:69:b7:4b:3e:50:ef:fe:a0:cf:
                    b1:67:fc:ed:7f:a1:a5:84:4f:cf:5a:dc:3f:f5:e8:
                    f6:ba:cd:31:bb:8c:2e:70:66:69:0f:7d:7d:6c:ea:
                    90:08:32:c6:ed:ae:30:48:70:77:82:e3:33:d6:bb:
                    c7:78:0a:b1:b7:7e:99:02:4a:c8:33:7b:5e:63:32:
                    7b:fd:94:f7:5f:7d:1c:94:f0:94:15:dc:53:90:8f:
                    f4:4d:cf:c2:2b:3b:a3:a8:1a:02:67:88:e1:61:4b:
                    1f:71:2b:d6:82:7b:68:bb:d4:cd:56:29:54:c7:bd:
                    84:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:72:6D:26:E3:14:41:3C:A4:DB:D5:B7:43:7A:3C:BF:7B:E9:E3:9D
            X509v3 Authority Key Identifier:
                keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:25:1e:62:44:9c:54:ba:20:35:1f:c3:f2:88:44:ce:03:6b:
         01:0e:84:d0:8f:10:23:9b:37:3e:d0:0e:e1:7a:13:62:62:ca:
         a8:9d:4d:03:95:b8:c4:72:32:37:56:5a:72:5b:3a:ad:7b:bf:
         1b:d2:2a:af:89:00:d3:12:38:58:61:4a:a8:c8:98:f6:e6:1c:
         9f:ba:ce:30:0d:8d:36:a5:14:b9:b3:fe:ea:1f:ae:65:37:64:
         1b:df:94:89:1d:64:b9:ab:f4:1d:61:35:0f:2b:78:0b:19:ed:
         68:f8:39:9d:46:64:af:d1:4b:5c:c5:bf:b2:a3:b3:64:f3:a6:
         c7:25:b7:50:66:0e:dd:1f:8c:89:5b:6a:79:c6:c0:46:a3:ee:
         d0:1f:bd:b3:e7:96:99:14:6c:49:34:e0:74:54:6a:92:e5:86:
         25:f7:0a:54:c3:4d:c9:d9:b7:ca:81:c2:4a:a5:04:f1:5a:6a:
         df:ff:d2:6f:0d:a7:82:2f:dd:a1:09:c4:1f:a6:61:27:5f:a9:
         00:90:39:8a:92:59:c7:28:80:0e:b9:a6:cb:ce:e1:a5:71:2e:
         d4:1f:0f:23:53:4d:06:6d:7f:7b:72:fe:6e:ec:52:38:db:ae:
         54:22:76:ff:86:4d:70:37:fa:89:4a:97:ca:39:8e:20:9d:87:
         d6:75:e9:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB
NkZBODA0RTEwHhcNMjYwMzI0MTkwNDUzWhcNMjYwMzMxMTkwNDUzWjAYMRYwFAYD
VQQDEw02OWMyZTA1Ni00ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7vL/JI1T0vTVN2i78kc32/LQtCnyq0+bXmiZxeIw+vwti0X6Ge1P5/dp44+
hoa+KrwR5JProPQggCpu/iTB6HoDTliEIA0l/OK3TQWHH1pqixj+S2H/3JPfFsx/
ceDJ/aAUkS/CEUc5kH8WG8yzoixSLmTwtpPZTSC/Gn30fOzWtfgF7m+ddSB8V8Bp
t0s+UO/+oM+xZ/ztf6GlhE/PWtw/9ej2us0xu4wucGZpD319bOqQCDLG7a4wSHB3
guMz1rvHeAqxt36ZAkrIM3teYzJ7/ZT3X30clPCUFdxTkI/0Tc/CKzujqBoCZ4jh
YUsfcSvWgntou9TNVilUx72EBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9ybSbj
FEE8pNvVt0N6PL976eOdMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4
NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI
Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEyUeYkScVLogNR/D8ohEzgNrAQ6E0I8QI5s3PtAO4XoTYmLKqJ1NA5W4xHIy
N1Zacls6rXu/G9Iqr4kA0xI4WGFKqMiY9uYcn7rOMA2NNqUUubP+6h+uZTdkG9+U
iR1kuav0HWE1Dyt4CxntaPg5nUZkr9FLXMW/sqOzZPOmxyW3UGYO3R+MiVtqecbA
RqPu0B+9s+eWmRRsSTTgdFRqkuWGJfcKVMNNydm3yoHCSqUE8Vpq3//Sbw2ngi/d
oQnEH6ZhJ1+pAJA5ipJZxyiADrmmy87hpXEu1B8PI1NNBm1/e3L+buxSONuuVCJ2
/4ZNcDf6iUqXyjmOIJ2H1nXpYQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:44 2026 by rpki-client