Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
File:                     Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json)
Hash identifier:          tnNpDgiodfBl8iXfGMWAQ7xHcHyCPhotDb3UEmL+7g4=
Subject key identifier:   95:A7:50:9A:20:8F:6B:55:1C:5A:23:2C:7D:AC:86:21:F5:CB:B2:71
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Certificate issuer:       /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial:       056B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
Manifest number:          055D
Signing time:             Thu 26 Mar 2026 23:10:10 +0000
Manifest this update:     Thu 26 Mar 2026 23:10:09 +0000
Manifest next update:     Thu 02 Apr 2026 23:10:09 +0000
Files and hashes:         1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: 1XJ20mfE7y0ZPhLpL+VkIrQd2mF0lYWp+bLCbjqe4Zk=)
                          2: C5713632828611EC83D75A3DC4F9AE02.roa (hash: TzSLplKK/HJS9afWmcTODUx8ULZ9/J0l/ynIkBKB7MM=)
                          3: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: tZDhIMTLHb3NbSs7t7zGCwhDrXMR5MLwG/mByKSsB2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
        Validity
            Not Before: Mar 26 23:10:09 2026 GMT
            Not After : Apr  2 23:10:09 2026 GMT
        Subject: CN=69c5bcd2-5d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:ae:93:ce:db:3d:d6:cd:16:d9:d7:9e:86:
                    80:12:86:16:e3:2d:f5:40:4d:60:c2:52:83:17:b8:
                    1f:e9:87:4f:d2:59:8e:95:af:99:f2:1a:7d:e7:e9:
                    a6:ce:de:2f:57:c7:63:c9:18:30:a0:df:4b:49:e8:
                    1c:c3:1f:7b:7f:49:dc:91:d0:09:bf:55:83:d3:6e:
                    08:ad:57:a2:a8:87:46:82:23:29:44:1a:77:5f:0f:
                    e4:8e:40:69:f4:f9:81:24:14:36:c4:9d:45:bf:65:
                    86:54:a7:45:c2:fb:aa:92:69:a9:05:04:8e:ee:ef:
                    ad:0d:51:36:68:f4:5d:47:ca:1a:ac:3c:8c:ac:ed:
                    52:9c:70:18:37:ee:b7:ad:38:d9:54:f1:57:2d:17:
                    30:7c:be:be:70:f9:e0:35:f8:64:a4:4a:39:88:77:
                    5e:16:0e:44:b2:14:f0:ca:44:de:16:dc:9c:18:63:
                    95:da:cf:5e:e7:b4:13:cc:d0:36:90:24:76:f3:df:
                    65:4f:d2:4a:29:94:e6:d2:71:5c:b5:10:f8:98:fa:
                    d2:94:e4:bc:95:fd:4d:14:9e:c8:41:1c:f5:3c:86:
                    74:5f:02:e5:ee:a3:73:f6:89:2c:df:ee:7f:f9:99:
                    cf:27:a6:86:b8:29:56:bc:cc:17:c5:02:1e:e5:2a:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A7:50:9A:20:8F:6B:55:1C:5A:23:2C:7D:AC:86:21:F5:CB:B2:71
            X509v3 Authority Key Identifier:
                keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:32:8b:b1:b3:f5:b6:b1:76:5d:50:29:be:18:15:1a:89:
         55:6e:7b:a4:e1:d4:41:03:90:ec:1b:b0:c9:1d:01:29:d4:34:
         7a:60:ca:10:bd:9e:c8:96:24:6b:f4:e4:d0:e9:24:b9:e1:11:
         69:3b:83:3a:41:67:76:bd:0d:84:d3:ef:5f:c5:71:94:a2:37:
         e5:a8:ff:30:bc:f8:ad:20:63:41:98:78:bd:a6:cf:18:47:07:
         e7:33:92:4e:66:1d:04:49:b2:4e:9b:63:c1:78:b2:3e:50:9b:
         1c:e3:7a:45:48:ca:7e:5a:f0:69:12:46:4c:fd:92:b6:06:9f:
         01:80:99:d4:13:d3:7c:b6:e5:fe:55:c7:77:8a:ce:50:db:3a:
         fc:5c:56:04:aa:f4:b6:90:cf:88:7f:68:a8:71:64:85:ad:6e:
         e5:48:71:48:de:75:a0:4a:78:af:e6:40:7e:5a:bc:e0:8b:5c:
         cb:ca:cd:fc:49:42:7d:17:73:59:50:fc:e1:f3:87:63:1f:02:
         78:b9:54:0c:36:8e:be:35:20:db:0f:58:84:01:50:37:79:1e:
         32:d0:a3:a4:53:07:66:44:31:b9:b8:2d:46:12:bc:06:29:ba:
         ff:bb:3d:29:5f:67:56:68:e2:aa:b6:5c:b1:f9:39:b4:dd:72:
         69:5e:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:09 2026 by rpki-client