Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
File:                     j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json)
Hash identifier:          io/vZZb/ChYT8G+ikRO7JdVmYuQ6qN6kETca9i89SuQ=
Subject key identifier:   06:98:8D:3B:03:82:B5:41:58:4C:05:32:C7:D3:87:F1:FE:35:D3:1A
Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
Certificate issuer:       /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
Manifest number:          0338
Signing time:             Sun 29 Mar 2026 00:57:33 +0000
Manifest this update:     Sun 29 Mar 2026 00:57:33 +0000
Manifest next update:     Sun 05 Apr 2026 00:57:33 +0000
Files and hashes:         1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: 8eXHFXSGu4VpMFhNldn5YIvIHS+cpC4uwzKffYXpXlM=)
                          2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: IaCEDFgWsu0fOu5wbRu+aiuKfmRdek8u7/fO0bD+YLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
                          rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 00:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
        Validity
            Not Before: Mar 29 00:57:33 2026 GMT
            Not After : Apr  5 00:57:33 2026 GMT
        Subject: CN=69c878fd-61be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:b7:e7:a9:28:6a:db:f7:40:e2:a3:a2:b4:
                    69:ca:e2:f0:37:84:6e:79:47:76:96:25:46:10:bb:
                    a3:34:69:1f:59:79:13:5b:15:65:51:f8:c6:23:ce:
                    fe:60:91:dd:a1:b4:46:43:57:15:d0:3b:b3:7f:e8:
                    83:c3:34:55:30:68:4d:50:cf:ee:9f:5d:c0:be:57:
                    d0:eb:d5:4b:dc:86:21:03:f2:1b:fb:d0:88:37:af:
                    6b:fb:f5:ad:60:96:9d:f8:97:31:c1:e3:28:7c:3f:
                    ed:a1:fb:b7:05:8d:d7:f3:21:88:0b:96:e0:c5:43:
                    66:75:87:8b:9f:45:c0:82:49:66:9a:48:ef:31:a3:
                    ae:cb:66:66:fc:5f:22:3f:78:cc:3a:48:ac:80:7a:
                    eb:e5:19:c3:78:47:91:a6:ee:8c:24:3a:26:4e:d3:
                    d9:db:e7:ee:8e:f3:46:32:2f:f8:91:91:b8:13:a2:
                    9d:ad:ee:3a:d8:62:00:03:51:ae:7b:f8:5b:39:ad:
                    8e:37:a1:89:9a:7e:a4:9b:5e:4b:21:a6:5a:97:e4:
                    b0:22:3f:49:ab:c4:2a:e4:16:8d:5e:3d:00:29:b5:
                    ae:7c:d8:02:2e:88:ce:12:19:13:ed:c0:2d:81:68:
                    52:db:4c:68:98:1c:9b:68:13:a9:86:69:50:d4:72:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:98:8D:3B:03:82:B5:41:58:4C:05:32:C7:D3:87:F1:FE:35:D3:1A
            X509v3 Authority Key Identifier:
                keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d3:7a:9d:8a:d9:4e:62:86:84:4a:8b:c2:ab:19:11:72:5a:
         a6:21:50:e3:d3:fa:e1:c3:1a:e2:8e:85:b5:9b:46:26:6c:0a:
         aa:72:1f:eb:2d:32:ae:4c:02:82:42:dc:97:f8:e1:c8:a0:86:
         a2:8b:2f:4e:bb:26:5d:76:2b:7d:a1:e3:8a:e4:af:01:19:31:
         45:b3:13:6c:3e:e7:fc:7f:9c:e0:f7:e6:78:f7:28:c9:ef:28:
         95:88:6c:29:61:13:24:3f:14:1d:6f:7f:c2:bd:48:77:b5:15:
         7b:97:75:0d:b2:c4:e6:42:59:37:dc:7a:a0:58:bd:96:c4:ef:
         9f:e9:ed:d1:37:80:3e:9b:44:6d:da:ff:59:38:65:5d:05:db:
         9f:1f:dc:01:b2:cf:5a:d0:f1:3e:e8:47:ac:89:43:d2:67:bc:
         0c:18:c8:c9:02:5b:c1:db:5f:41:f1:30:18:20:fd:76:1f:df:
         aa:ae:1b:05:51:3c:cf:8c:f3:ca:00:93:ca:dd:d0:62:06:b4:
         13:c2:84:1b:54:ab:6d:a5:3b:f9:89:2a:b9:e2:50:38:55:50:
         f9:2e:66:9d:13:6b:64:13:12:e1:38:08:b7:75:dc:83:72:8f:
         9c:fa:a2:89:b1:f9:98:cc:0d:45:f4:eb:c5:49:82:e7:6f:11:
         67:8b:70:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:48 2026 by rpki-client