Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
File:                     JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json)
Hash identifier:          BY1j2MLqLtVw8IDos73yvrEBpJ6m0pGPwWWCN1Pbvak=
Subject key identifier:   94:6C:4F:F1:21:5C:93:71:DE:E5:F3:AC:50:BD:F1:B6:34:0C:D6:B4
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Certificate issuer:       /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial:       079E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
Manifest number:          077A
Signing time:             Thu 12 Mar 2026 21:18:35 +0000
Manifest this update:     Thu 12 Mar 2026 21:18:34 +0000
Manifest next update:     Thu 19 Mar 2026 21:18:34 +0000
Files and hashes:         1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: fph+wagAcM8P+4V+Fjy5Ctlj9b/9YNaBtuSYPKpm6OM=)
                          2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: OlUYHfxgsq3VvSrhhkQb6Q/TDtAt7UfH0OhxtkAQu0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
                          rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
        Validity
            Not Before: Mar 12 21:18:34 2026 GMT
            Not After : Mar 19 21:18:34 2026 GMT
        Subject: CN=69b32dab-2ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:03:e9:22:a5:c9:f6:04:71:84:f4:c6:2d:
                    39:cc:9b:ec:49:0e:ac:c1:10:97:f7:bf:2a:aa:c4:
                    7a:90:24:94:c6:89:4a:14:2a:7e:b2:22:96:9d:16:
                    0a:1b:d9:1e:b6:2a:16:94:87:75:b6:3f:6a:5e:47:
                    5c:0a:b3:83:df:a9:3d:2d:08:1c:ae:cb:03:3f:25:
                    12:90:e0:f4:e2:63:e8:5f:ac:96:34:9d:b1:8e:3e:
                    74:c0:1f:4c:a7:6f:87:96:5f:3b:70:08:a0:15:02:
                    a6:70:d9:84:0c:63:3e:72:54:0d:76:6a:97:eb:4f:
                    91:7d:3d:b2:76:23:90:9b:df:04:fe:c6:ae:1f:cd:
                    6e:72:d0:d6:1d:54:85:38:b4:0e:59:1c:b6:a3:d4:
                    67:bd:31:ae:ec:e8:7f:88:ce:6b:a5:ad:44:93:50:
                    7d:75:43:a4:08:86:6c:f4:18:90:bc:ce:36:57:1d:
                    41:6f:c5:2b:3d:84:33:38:9a:d7:88:16:5d:fb:83:
                    6d:7e:67:84:22:d0:7b:a8:06:97:f0:ac:09:ae:f6:
                    c1:71:40:e2:90:97:63:12:90:65:d4:5a:59:aa:04:
                    0a:2c:3c:66:b4:f5:df:f1:62:7b:11:48:50:5d:b2:
                    20:1a:09:e0:12:9a:a8:00:1f:cc:f4:c9:cf:84:c2:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:4F:F1:21:5C:93:71:DE:E5:F3:AC:50:BD:F1:B6:34:0C:D6:B4
            X509v3 Authority Key Identifier:
                keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:20:6f:75:17:29:b7:99:6d:41:74:e7:df:fa:19:81:c5:
         0b:36:66:68:ea:82:78:a4:79:df:64:f7:ca:2a:24:ad:89:5c:
         df:a7:02:5b:12:fe:c1:60:40:aa:66:ff:50:92:a1:74:ba:0d:
         0c:20:bf:ab:81:09:42:47:22:a1:4a:95:87:ba:1e:f6:f1:10:
         cf:4a:e7:e7:d0:38:65:c3:52:0d:b6:2d:cd:e6:20:91:45:d9:
         a1:f9:89:a8:c0:6b:6a:f9:23:78:ac:a5:ad:b3:aa:f8:f4:3c:
         59:24:22:80:b8:a6:f9:3e:71:00:c6:8f:d3:be:1d:3c:bc:f6:
         ce:a9:38:56:be:88:0c:03:7f:b2:99:88:84:76:c8:2e:2b:49:
         1c:49:91:96:84:00:b0:e5:6d:cc:91:f8:3e:77:8a:46:d3:a2:
         8e:6c:18:25:3d:6a:37:e5:0a:e2:ee:cb:f5:0b:31:3d:fc:cf:
         c9:95:53:25:9f:19:3d:b4:af:3f:19:7c:5d:4b:5e:65:7b:a5:
         20:da:0e:ae:3c:00:f8:3e:cf:c5:9d:51:d6:c7:03:36:0d:09:
         c4:e7:d9:de:3e:ad:34:82:52:9b:d4:07:32:84:c4:07:4c:8a:
         65:3e:50:56:73:5c:98:9a:1f:2e:55:59:63:95:ad:54:35:73:
         a4:96:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:35:55 2026 by rpki-client