Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
File:                     lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json)
Hash identifier:          idhJlAzCKIjqFiNZyrG7xW2pdpqq5oinUm1qLv5G/rg=
Subject key identifier:   E5:C3:8F:75:45:93:F9:18:6E:1E:E1:B1:F3:4D:18:10:65:85:26:9B
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Certificate issuer:       /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
Manifest number:          C0
Signing time:             Wed 25 Mar 2026 06:16:35 +0000
Manifest this update:     Wed 25 Mar 2026 06:16:35 +0000
Manifest next update:     Wed 01 Apr 2026 06:16:35 +0000
Files and hashes:         1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: g7iij6OuCLtsEyqtl88ReUWBsQpaAP/SW3ahV2EWohs=)
                          2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: vDtAe0YTSyL7kgoQAACefENkKxeqw/YNxKaiQNIECVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
        Validity
            Not Before: Mar 25 06:16:35 2026 GMT
            Not After : Apr  1 06:16:35 2026 GMT
        Subject: CN=69c37dc3-ddbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:4a:ab:ec:15:5b:70:c3:35:90:40:05:47:
                    1e:aa:b0:77:5a:d2:ec:07:bf:df:98:d5:94:2f:73:
                    2b:87:b3:d2:21:ed:3f:85:2e:f6:98:c9:32:cb:34:
                    c6:44:87:af:62:a8:48:ea:5f:f3:6a:2b:7a:ba:e3:
                    9c:79:0b:99:73:78:4e:a2:f1:f5:73:a8:7c:57:5d:
                    a1:ec:b4:9e:2b:ae:5b:09:12:ad:48:5a:8d:6d:13:
                    d7:cf:3b:d5:03:17:33:d5:13:57:37:73:90:b0:41:
                    f2:74:34:dc:70:e8:13:bc:e7:e1:43:b7:d9:8c:35:
                    38:a3:04:b7:d9:40:2f:bd:6d:b2:e4:40:87:40:74:
                    38:8c:9c:53:62:2a:c6:8b:a6:56:40:2f:2b:a9:0c:
                    e4:45:b7:ae:14:86:22:79:99:40:17:66:46:80:bc:
                    e8:30:33:3e:01:88:79:65:1b:6f:ff:8e:25:04:42:
                    d1:a7:5f:8a:81:20:c1:dd:02:36:5c:98:a2:70:17:
                    c4:8c:d2:08:d3:81:96:28:d9:6e:8c:30:1a:95:9b:
                    81:d7:5b:b9:7b:ae:7e:61:73:50:0d:f3:13:d8:3a:
                    72:5b:00:1c:98:28:9d:a1:c6:dc:af:cc:24:b3:80:
                    fe:1f:06:c0:90:45:f0:96:6c:47:76:21:8b:30:e0:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C3:8F:75:45:93:F9:18:6E:1E:E1:B1:F3:4D:18:10:65:85:26:9B
            X509v3 Authority Key Identifier:
                keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:98:3d:b4:46:24:99:7c:e1:83:0f:d8:80:98:7a:f1:8e:2d:
         15:d5:4c:67:8b:b2:1a:85:66:7f:32:85:8f:b4:a9:d6:60:de:
         a7:4f:d2:07:f5:9f:23:32:c4:12:fc:92:80:e1:27:ca:f7:c9:
         49:5c:ed:1d:29:af:97:a9:19:90:a9:94:6e:8b:f1:07:f3:b2:
         48:0b:5a:77:b8:fd:9a:11:0d:8e:c6:3e:aa:d6:3c:12:74:eb:
         db:3a:8c:20:72:1a:6b:a4:55:c6:6c:09:1b:49:77:c4:15:dc:
         1d:c9:36:60:87:33:a4:b8:eb:58:f8:89:1a:bb:a0:7e:8e:0c:
         25:60:ff:68:fb:61:13:f0:33:05:cf:53:5d:14:87:f8:31:64:
         08:4b:be:a7:f7:d4:1c:8f:d5:91:8d:64:8c:25:c6:2d:f7:e4:
         4d:8f:19:2d:3b:8c:f6:a3:24:eb:57:b7:2f:05:97:d5:ac:5a:
         ed:fa:b1:b8:01:d7:54:20:00:bf:49:68:b2:97:5e:7c:3d:d4:
         13:e2:35:f0:31:36:be:59:b4:1e:fe:ba:63:08:6b:92:bd:c9:
         5c:40:f6:06:ab:c0:81:92:e5:4f:fc:6a:c5:23:c6:ab:f6:f6:
         5b:a0:03:46:30:13:ed:64:49:fd:8d:f5:58:e8:2a:d1:0a:12:
         0c:e0:e2:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNCNUYxMTAvBgNVBAUTKDk0OTZCMUZDNjA2MzY0NDM3MjM5OENFQTMzOEI4MjI0
MjU5MTc1Q0IwHhcNMjYwMzI1MDYxNjM1WhcNMjYwNDAxMDYxNjM1WjAYMRYwFAYD
VQQDEw02OWMzN2RjMy1kZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLdKq+wVW3DDNZBABUceqrB3WtLsB7/fmNWUL3Mrh7PSIe0/hS72mMkyyzTG
RIevYqhI6l/zait6uuOceQuZc3hOovH1c6h8V12h7LSeK65bCRKtSFqNbRPXzzvV
Axcz1RNXN3OQsEHydDTccOgTvOfhQ7fZjDU4owS32UAvvW2y5ECHQHQ4jJxTYirG
i6ZWQC8rqQzkRbeuFIYieZlAF2ZGgLzoMDM+AYh5ZRtv/44lBELRp1+KgSDB3QI2
XJiicBfEjNII04GWKNlujDAalZuB11u5e65+YXNQDfMT2DpyWwAcmCidocbcr8wk
s4D+HwbAkEXwlmxHdiGLMODlQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXDj3VF
k/kYbh7hsfNNGBBlhSabMB8GA1UdIwQYMBaAFJSWsfxgY2RDcjmM6jOLgiQlkXXL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CQTAwQzUxNDEz
NjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpFTnlPWXpxTTR1Q0pDV1Jk
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0I1Ri9CQTAwQzUxNDEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpF
TnlPWXpxTTR1Q0pDV1JkY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASZg9tEYkmXzhgw/YgJh68Y4tFdVMZ4uyGoVmfzKFj7Sp1mDep0/SB/WfIzLE
EvySgOEnyvfJSVztHSmvl6kZkKmUbovxB/OySAtad7j9mhENjsY+qtY8EnTr2zqM
IHIaa6RVxmwJG0l3xBXcHck2YIczpLjrWPiJGrugfo4MJWD/aPthE/AzBc9TXRSH
+DFkCEu+p/fUHI/VkY1kjCXGLffkTY8ZLTuM9qMk61e3LwWX1axa7fqxuAHXVCAA
v0lospdefD3UE+I18DE2vlm0Hv66Ywhrkr3JXED2BqvAgZLlT/xqxSPGq/b2W6AD
RjAT7WRJ/Y31WOgq0QoSDODiNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:18 2026 by rpki-client