Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
File:                     JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json)
Hash identifier:          EAWu1TyUI+QBs7FFXPLIN8xxwMryTsaTCCiVwHbTuLo=
Subject key identifier:   84:03:A2:0F:C0:85:D9:F7:61:5D:59:CD:3D:D7:D3:B7:47:A8:D3:C9
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Certificate issuer:       /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
Manifest number:          0215
Signing time:             Wed 25 Mar 2026 02:16:36 +0000
Manifest this update:     Wed 25 Mar 2026 02:16:35 +0000
Manifest next update:     Wed 01 Apr 2026 02:16:35 +0000
Files and hashes:         1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: Jd//YFINXtV0ZxiMlJ2XROPl7pjydCPUvMsqVcBvonE=)
                          2: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: oB5JBkNKyPLzP2gSGsWtUBpF7gy+qEDEj6Z9Is4zAyU=)
                          3: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: mVpGi+39/Ahcjv+ekq0PpEG9jvYwKXVC4QVppE2Htr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
                          rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
        Validity
            Not Before: Mar 25 02:16:35 2026 GMT
            Not After : Apr  1 02:16:35 2026 GMT
        Subject: CN=69c34584-218e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:31:23:5c:2e:56:76:25:af:a1:8c:3f:b3:
                    6d:23:97:b9:b1:cf:21:27:97:b8:4a:7b:d3:d9:0f:
                    f2:77:68:6c:0d:56:26:fc:82:be:1c:4b:73:8e:12:
                    1f:2c:74:84:0d:2e:b0:cd:0c:59:76:10:0a:a3:47:
                    fb:71:75:f1:3c:27:2e:18:54:a7:4d:d4:51:5c:2e:
                    b6:6b:5c:04:7d:d9:4b:ac:aa:9d:97:f7:8b:4b:07:
                    1e:82:11:d4:b9:e0:ed:7d:51:67:ee:50:13:a5:c8:
                    0e:0d:a4:a0:f9:ce:21:3b:a1:3e:a4:e9:74:39:3e:
                    b0:d6:da:7e:8a:38:7c:9e:76:4b:fc:19:8e:23:40:
                    1b:d3:bf:05:5a:da:a8:42:e2:f9:1a:3a:88:45:99:
                    5b:57:17:58:eb:a9:7b:c3:d0:05:64:b1:48:b0:a3:
                    85:04:00:5d:c5:c6:49:e4:94:ea:93:a5:cc:72:4c:
                    a1:42:21:94:a8:e2:86:27:d7:d1:bf:c1:6c:55:93:
                    d0:2b:5c:8e:c3:b8:04:cb:36:a3:1f:0f:98:61:3a:
                    ab:97:7a:28:e4:77:1d:e0:52:05:63:87:ae:69:42:
                    1f:70:7f:44:25:83:d4:53:60:ce:03:4d:1d:62:3a:
                    cd:a4:c0:7b:e6:4e:b3:e2:36:f4:b4:01:e3:d6:73:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:03:A2:0F:C0:85:D9:F7:61:5D:59:CD:3D:D7:D3:B7:47:A8:D3:C9
            X509v3 Authority Key Identifier:
                keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cd:69:ad:d8:7b:90:1b:46:bc:bd:c7:85:71:b2:7b:59:5d:
         80:28:82:b7:94:1d:6c:e2:7f:44:e8:d5:df:7c:3e:e7:c1:14:
         f3:eb:43:be:3c:0c:06:16:6c:c9:98:68:ca:f2:08:b1:08:55:
         7f:20:77:25:98:bd:b7:eb:e2:0c:b5:60:0d:ee:c3:ee:16:fa:
         c3:a8:43:2d:c6:f5:4d:c8:8c:67:97:7a:5e:45:01:a6:12:a5:
         67:e7:7c:39:74:b7:2d:c1:3d:68:77:17:87:fb:de:ff:d8:05:
         b5:36:d0:80:fc:6a:bc:f3:ff:02:f1:a8:85:39:f7:5d:b6:c2:
         e6:25:c6:75:46:b6:a0:94:8c:c4:2d:64:56:41:2f:a3:4f:27:
         00:5c:4c:f3:a6:3e:85:51:fa:a8:d4:3c:3a:09:34:0b:85:14:
         8c:e4:84:7e:00:84:bb:f0:f1:e5:8f:d6:ff:27:54:7d:91:4a:
         5e:8e:3c:6c:96:1f:3d:77:3a:af:1f:34:1b:f4:f8:d9:c8:9f:
         7b:17:85:e0:c5:6e:15:5e:12:fb:9b:ad:98:7d:6d:07:c2:57:
         4d:90:2f:54:18:e5:96:00:f4:4f:ad:b8:3f:93:bc:4e:da:1f:
         c6:71:18:fb:5d:32:1a:a3:18:f6:73:30:53:61:63:46:fd:7a:
         c5:8d:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:14:01 2026 by rpki-client