Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
File:                     JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json)
Hash identifier:          rSL8qe5LtKA7rLN7eJNR7aB52wVPei4tn1vLlacFhtw=
Subject key identifier:   24:93:22:08:4C:BA:D8:2A:1B:69:FC:7C:AC:C9:63:65:29:EA:F1:DE
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Certificate issuer:       /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
Manifest number:          0121
Signing time:             Sun 05 Apr 2026 05:09:23 +0000
Manifest this update:     Sun 05 Apr 2026 05:09:22 +0000
Manifest next update:     Sun 12 Apr 2026 05:09:22 +0000
Files and hashes:         1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: mvx2kY/3SpU+uIW93wvao9vTxjKz9oXdfQYvebnBsyQ=)
                          2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: 78pzJRXaRm3fQkBLjyTxy90+rj4rHH8KLAcWeieilsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
        Validity
            Not Before: Apr  5 05:09:22 2026 GMT
            Not After : Apr 12 05:09:22 2026 GMT
        Subject: CN=69d1ee83-d6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:12:20:4d:57:6a:87:bd:e5:de:c2:53:45:c5:
                    55:ee:ec:c1:18:09:e1:dc:4c:43:6c:a6:2b:95:57:
                    12:11:68:71:d7:a2:cf:eb:1a:1b:47:fd:c9:29:4c:
                    46:fa:1c:2c:b1:4a:f4:a6:16:46:98:fd:bb:18:3a:
                    88:fa:e7:de:51:12:a7:db:ad:28:68:bd:ef:ff:ae:
                    92:4a:d6:e7:02:88:59:3a:99:18:4b:b8:2c:55:88:
                    dd:3a:4d:35:7e:3d:27:63:06:89:8c:b3:2c:35:70:
                    96:11:7c:df:d2:eb:75:64:61:a3:fd:d4:f2:ae:05:
                    c2:e9:81:3e:dc:37:7b:ae:48:30:08:02:0e:83:e4:
                    3a:47:b8:17:c4:1a:c2:1f:06:e2:88:db:86:9b:12:
                    00:26:94:de:8a:a3:bf:27:75:26:a6:55:22:4e:b1:
                    75:d6:a6:a6:63:82:13:11:c7:41:23:cf:94:66:10:
                    1a:38:77:46:e6:20:31:ae:10:1b:4c:9f:66:cd:11:
                    9d:dd:a3:2d:f3:8f:76:57:61:1e:d4:ab:27:74:90:
                    ae:13:18:9c:4c:f9:ce:99:1d:09:22:f2:66:65:ce:
                    49:a1:55:26:9c:0e:91:e2:74:0d:8f:ff:6c:91:af:
                    fc:14:c7:f5:33:a3:e8:eb:18:fe:59:d4:e8:a4:31:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:22:08:4C:BA:D8:2A:1B:69:FC:7C:AC:C9:63:65:29:EA:F1:DE
            X509v3 Authority Key Identifier:
                keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:02:3a:5a:0c:49:d9:d7:2f:8d:d8:34:56:e3:6d:14:e4:
         be:e5:6b:6d:70:66:ac:27:68:7b:82:51:6f:c9:d9:dd:c8:82:
         07:80:07:09:9f:0f:2f:9a:5c:95:d2:c7:ce:37:1d:47:50:d8:
         6d:42:7b:9c:d5:c1:9e:16:a3:24:df:80:39:6d:f4:75:f2:86:
         e9:50:47:0d:d2:0d:94:92:65:d1:ae:d9:6c:21:db:89:eb:b1:
         cd:ef:e2:6d:a5:2a:0a:e5:8d:e1:3d:d5:7f:11:fb:5b:cd:5c:
         32:2e:27:9e:e3:6b:c7:c4:af:33:81:df:b5:b3:23:f5:46:10:
         8f:8f:8a:d5:94:c0:84:08:d1:25:ca:25:21:73:dd:72:22:96:
         00:61:c0:3e:3b:45:2b:df:9e:b0:a5:2d:2a:68:6d:c1:54:e5:
         57:d9:6b:03:03:52:69:7e:86:35:65:e2:55:3e:8c:af:9f:5d:
         47:ff:de:9e:83:bd:55:af:3e:85:75:2b:13:ab:49:03:aa:2e:
         47:9b:d0:d1:88:bd:42:88:9f:fe:d6:38:ef:e7:99:a8:f4:76:
         fb:58:a9:29:c3:92:2e:a1:38:bf:f6:60:d5:ab:e6:27:dd:52:
         d6:38:63:4b:a1:1f:5c:3c:6f:5d:e8:14:6b:90:d9:4b:36:ea:
         01:72:48:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBMDUxMTAvBgNVBAUTKDI1QTBCOEIwQzEwNDE1RkQ0MDZEQjIwMzIzNjY1OUM1
RjE2M0FFNDMwHhcNMjYwNDA1MDUwOTIyWhcNMjYwNDEyMDUwOTIyWjAYMRYwFAYD
VQQDEw02OWQxZWU4My1kNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6xIgTVdqh73l3sJTRcVV7uzBGAnh3ExDbKYrlVcSEWhx16LP6xobR/3JKUxG
+hwssUr0phZGmP27GDqI+ufeURKn260oaL3v/66SStbnAohZOpkYS7gsVYjdOk01
fj0nYwaJjLMsNXCWEXzf0ut1ZGGj/dTyrgXC6YE+3Dd7rkgwCAIOg+Q6R7gXxBrC
HwbiiNuGmxIAJpTeiqO/J3UmplUiTrF11qamY4ITEcdBI8+UZhAaOHdG5iAxrhAb
TJ9mzRGd3aMt8492V2Ee1KsndJCuExicTPnOmR0JIvJmZc5JoVUmnA6R4nQNj/9s
ka/8FMf1M6Po6xj+WdTopDHS9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSTIghM
utgqG2n8fKzJY2Up6vHeMB8GA1UdIwQYMBaAFCWguLDBBBX9QG2yAyNmWcXxY65D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EQTVEMUQ2MjdD
OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZmMUFiYklESTJaWnhmRmpy
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZm
MUFiYklESTJaWnhmRmpya00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApO0COloMSdnXL43YNFbjbRTkvuVrbXBmrCdoe4JRb8nZ3ciCB4AHCZ8PL5pc
ldLHzjcdR1DYbUJ7nNXBnhajJN+AOW30dfKG6VBHDdINlJJl0a7ZbCHbieuxze/i
baUqCuWN4T3VfxH7W81cMi4nnuNrx8SvM4HftbMj9UYQj4+K1ZTAhAjRJcolIXPd
ciKWAGHAPjtFK9+esKUtKmhtwVTlV9lrAwNSaX6GNWXiVT6Mr59dR//enoO9Va8+
hXUrE6tJA6ouR5vQ0Yi9Qoif/tY47+eZqPR2+1ipKcOSLqE4v/Zg1avmJ91S1jhj
S6EfXDxvXegUa5DZSzbqAXJI9A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:16 2026 by rpki-client