Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
File:                     jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json)
Hash identifier:          o5E1SZNCoS3WL2RFd9jX3CIpXGK84JKxVWtAI4mOys8=
Subject key identifier:   AA:6B:9F:DE:80:C9:10:7E:6E:F2:10:86:CA:51:CD:DD:E1:EC:96:EB
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0B55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
Manifest number:          0AE2
Signing time:             Tue 10 Mar 2026 19:12:34 +0000
Manifest this update:     Tue 10 Mar 2026 19:12:34 +0000
Manifest next update:     Tue 17 Mar 2026 19:12:34 +0000
Files and hashes:         1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: 4Cjr6gSL3Gxb2zRqatPNy0kLsDf8lhYhVEo1dEQqGsI=)
                          2: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: NMa7UpL5w1Txgsqxfm+5UqMg/zQgfsv4FmRfVL5Sn+c=)
                          3: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: A7d/aeiJtUu4K+fswUeowBZEDmHgn1F1Svvc5b1xWTc=)
                          4: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: KY96V7nPX5oq3FzsE82d+7qiOhZ/q030YiLdCFM2iGI=)
                          5: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 7FNm1lP1Pe3hdsBxuVhe1eOrgDF7OuaVieb5lKlg9LI=)
                          6: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: b9jxPZOZDnRvzE7CGYRtx0ipIG0fk5b1zujNyCQ0yI0=)
                          7: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=)
                          8: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=)
                          9: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: HwFnU0dCqCQrz33mSD+K9rw/y8Y1TbFJLnxiPnPYqwc=)
                          10: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=)
                          11: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: Al2kZd3bm7sIrq8HRQFPgDS+45qqXFnhmN7j5M3C30g=)
                          12: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 19:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Mar 10 19:12:34 2026 GMT
            Not After : Mar 17 19:12:34 2026 GMT
        Subject: CN=69b06d22-3c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:45:80:f4:37:e6:2a:52:c2:99:b5:cb:46:
                    d5:6c:cd:d9:b5:fc:64:97:d9:c4:be:17:a8:29:cc:
                    87:77:54:75:fb:41:e5:6f:e3:14:9c:6d:55:8b:4d:
                    a6:88:eb:02:a2:0d:cc:04:57:f2:cd:2f:26:f3:3d:
                    fd:2f:71:62:e9:4f:86:67:2a:a6:f7:16:36:b5:f6:
                    aa:df:cc:3b:0d:49:f3:a2:9c:da:94:80:b9:bf:68:
                    14:cf:6b:4a:85:1a:70:79:85:7a:7c:d8:c2:56:29:
                    57:4f:85:c1:e9:8d:d0:ec:0f:ea:e5:b6:2c:54:4c:
                    e0:94:10:e7:ad:03:e0:09:d0:e1:90:87:6a:bf:17:
                    2b:7f:28:21:f5:b7:a0:ff:0d:dd:fe:c5:e7:29:fc:
                    bf:0f:69:de:bc:87:15:e0:6a:57:c5:51:b3:07:93:
                    fa:05:38:38:c9:af:d4:a4:56:c6:61:4f:d3:f0:df:
                    50:1e:51:8e:1f:b2:94:29:c5:85:f1:91:78:a8:b5:
                    b7:28:31:7d:18:03:bd:0d:8c:26:fd:33:8b:ad:a9:
                    f4:97:ad:16:51:1b:cc:0f:49:83:56:0c:54:21:66:
                    3b:9f:f0:99:fa:8d:9c:eb:29:38:2d:dc:f0:89:df:
                    c1:e2:96:c4:69:e4:36:16:82:c2:ce:65:e5:e4:2a:
                    45:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:9F:DE:80:C9:10:7E:6E:F2:10:86:CA:51:CD:DD:E1:EC:96:EB
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:e0:18:b4:4b:4c:1f:ec:5e:f4:67:c7:67:b4:34:2e:45:
         2e:3c:38:35:b4:3b:f0:5d:c8:ab:f8:e7:df:a2:0b:58:76:b8:
         b1:15:7b:b6:9c:e0:fd:bd:5a:f1:c9:9c:5e:c1:bc:a3:18:72:
         96:2c:cf:9a:a5:65:0d:06:f2:5a:86:17:87:23:a1:c8:30:51:
         29:cb:28:62:c2:f6:c9:91:8d:36:17:34:ca:a0:13:92:d6:0b:
         2b:81:45:7b:f4:79:0c:61:0f:07:47:ba:59:94:4a:d8:3a:53:
         06:de:19:99:e6:fd:c4:cc:ca:f7:ed:4b:5f:07:59:7e:d7:2a:
         ac:a6:8e:46:b1:d1:74:bc:92:64:2a:a0:89:88:1f:0e:09:3e:
         ab:b9:8a:66:25:ab:36:ff:ea:27:45:ae:7d:3c:69:3b:46:6c:
         1a:d4:24:f1:3d:4c:0b:90:a3:d3:2e:99:9a:68:c4:0e:38:e0:
         ff:75:df:d7:1e:60:f2:de:07:79:47:e2:9a:83:e1:84:f1:81:
         d1:76:62:d0:9c:1e:26:cf:56:27:32:d8:16:fa:ed:39:d0:8f:
         18:61:cd:97:11:52:a0:db:78:7d:01:ac:1c:83:a7:ac:d9:e4:
         a3:f8:58:73:ef:28:4d:01:5b:80:52:4c:74:a8:0d:12:0c:0b:
         09:e5:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 15:12:06 2026 by rpki-client