Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
File:                     jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json)
Hash identifier:          6ES8lJm98kKVi3OAlI98inFm5VILOftWj4Vuetq3ynI=
Subject key identifier:   FD:A6:11:45:A7:BD:83:F0:6A:40:71:17:14:6E:AC:95:83:6B:F3:58
Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
Certificate issuer:       /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Certificate serial:       0758
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
Manifest number:          074F
Signing time:             Thu 26 Mar 2026 21:35:12 +0000
Manifest this update:     Thu 26 Mar 2026 21:35:12 +0000
Manifest next update:     Thu 02 Apr 2026 21:35:12 +0000
Files and hashes:         1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: KgTS4+TRMZJtC8WJAKKv6hOnG2TzSdzmx/A94SPv+PU=)
                          2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: CwtpD5SrkNUASFRZ1Rxs4UubmcWUkIc2SHd9sVV4JjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
                          rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
        Validity
            Not Before: Mar 26 21:35:12 2026 GMT
            Not After : Apr  2 21:35:12 2026 GMT
        Subject: CN=69c5a690-d14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:88:1f:57:c7:fb:01:e4:75:92:37:70:72:9b:
                    b7:86:42:5c:2d:2f:3b:39:7d:0c:78:fd:94:8e:fd:
                    f3:c7:0f:82:d8:87:31:00:3f:f6:35:6c:d0:69:4e:
                    27:bb:e9:dd:3f:e2:df:70:74:bf:2e:01:5d:17:26:
                    71:d3:1f:af:1f:ad:c5:8c:02:44:ba:70:cb:c7:99:
                    d8:f9:d5:2d:67:ac:d2:2a:8c:d0:1e:16:ed:bc:dd:
                    d7:84:5b:fb:b1:14:4c:d6:28:72:08:2f:50:d2:a9:
                    c3:98:56:08:f0:9f:1a:cb:a9:a7:68:ad:e0:f7:69:
                    e2:d2:bc:ec:ac:b3:4b:52:db:09:d6:a4:9e:28:b9:
                    6d:4a:06:0e:56:5d:d3:7f:c1:f0:e1:46:6c:ce:81:
                    37:fe:cc:0e:92:2c:94:2b:4b:ff:1a:4b:89:13:b3:
                    33:b5:62:bb:0e:5c:b4:d1:41:9b:78:4e:a1:59:a0:
                    a9:81:ce:fa:f3:4f:bc:4e:96:40:7a:67:72:42:36:
                    83:5b:e0:54:fc:6b:16:9f:0c:8a:ec:09:80:fc:e0:
                    04:94:34:e6:32:10:a9:81:3b:05:69:7b:09:74:3d:
                    1b:26:a7:c1:d6:25:b6:6b:83:86:14:bb:8a:2d:d9:
                    d5:89:98:25:4a:6a:ad:bc:18:0e:a4:6a:d1:05:76:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A6:11:45:A7:BD:83:F0:6A:40:71:17:14:6E:AC:95:83:6B:F3:58
            X509v3 Authority Key Identifier:
                keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:3d:50:4d:90:f1:05:49:f2:2e:21:31:dc:2e:d1:17:26:
         93:d3:87:77:f9:c7:39:39:56:7f:be:b4:c6:12:c4:07:0f:08:
         36:72:82:9a:0c:ae:7d:78:54:02:fd:1f:cb:9e:a0:3a:6c:f7:
         ac:6d:49:40:1d:0b:62:2a:bd:34:9c:f8:aa:a5:26:58:43:e0:
         1d:01:ef:46:bf:ac:8b:05:be:ce:0c:f8:50:8e:f5:06:f4:e2:
         f0:93:68:31:a9:9f:6e:46:cb:df:ba:26:26:94:71:ce:cf:93:
         d0:7c:75:4c:a7:7d:5e:20:5f:8b:6a:6e:1d:03:9e:f8:47:e5:
         b9:3e:19:35:8b:b2:c4:c0:25:e4:fb:83:c4:af:13:9c:67:ca:
         72:0f:b7:3f:d0:4d:22:73:0b:dc:68:ef:96:9a:92:df:16:06:
         95:21:d0:f0:d2:5b:81:0d:f5:d5:77:91:0c:6b:9b:3f:3b:ce:
         24:a0:e1:10:db:51:24:ab:53:a7:fc:c0:b5:2b:8b:da:85:96:
         c3:3a:56:ae:3a:47:e8:ee:c9:57:0e:10:a1:f1:7d:c7:2c:72:
         a1:5a:6c:99:df:83:12:aa:16:e8:5a:ec:6a:c4:38:a5:a2:d7:
         43:86:c0:45:f4:83:88:36:a0:4a:5b:98:45:e6:30:f5:44:ae:
         61:b7:13:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC
QUNBQzQ4NTYwHhcNMjYwMzI2MjEzNTEyWhcNMjYwNDAyMjEzNTEyWjAYMRYwFAYD
VQQDEw02OWM1YTY5MC1kMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ogfV8f7AeR1kjdwcpu3hkJcLS87OX0MeP2Ujv3zxw+C2IcxAD/2NWzQaU4n
u+ndP+LfcHS/LgFdFyZx0x+vH63FjAJEunDLx5nY+dUtZ6zSKozQHhbtvN3XhFv7
sRRM1ihyCC9Q0qnDmFYI8J8ay6mnaK3g92ni0rzsrLNLUtsJ1qSeKLltSgYOVl3T
f8Hw4UZszoE3/swOkiyUK0v/GkuJE7MztWK7Dly00UGbeE6hWaCpgc7680+8TpZA
emdyQjaDW+BU/GsWnwyK7AmA/OAElDTmMhCpgTsFaXsJdD0bJqfB1iW2a4OGFLuK
LdnViZglSmqtvBgOpGrRBXYV/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2mEUWn
vYPwakBxFxRurJWDa/NYMB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0
NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT
RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3
dUVTWWdmbzFBVEc2eXNTRlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc2s9UE2Q8QVJ8i4hMdwu0Rcmk9OHd/nHOTlWf760xhLEBw8INnKCmgyufXhU
Av0fy56gOmz3rG1JQB0LYiq9NJz4qqUmWEPgHQHvRr+siwW+zgz4UI71BvTi8JNo
MamfbkbL37omJpRxzs+T0Hx1TKd9XiBfi2puHQOe+EfluT4ZNYuyxMAl5PuDxK8T
nGfKcg+3P9BNInML3GjvlpqS3xYGlSHQ8NJbgQ311XeRDGubPzvOJKDhENtRJKtT
p/zAtSuL2oWWwzpWrjpH6O7JVw4QofF9xyxyoVpsmd+DEqoW6FrsasQ4paLXQ4bA
RfSDiDagSluYReYw9USuYbcTiQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:08 2026 by rpki-client