Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
File:                     jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json)
Hash identifier:          ggj/15mx+z2LiL0u6PIBzGtW4NbkBKpzC9CZkM6jRKM=
Subject key identifier:   C9:69:73:FC:B0:EF:66:3D:49:8C:9E:39:4E:A9:48:09:E7:24:99:A3
Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21
Certificate issuer:       /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
Manifest number:          FD
Signing time:             Sun 05 Apr 2026 05:35:56 +0000
Manifest this update:     Sun 05 Apr 2026 05:35:56 +0000
Manifest next update:     Sun 12 Apr 2026 05:35:56 +0000
Files and hashes:         1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: 5l9bsB/rfxT0K48J4N+RsP9g7UXOewXbpzQJvwJ7VU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
        Validity
            Not Before: Apr  5 05:35:56 2026 GMT
            Not After : Apr 12 05:35:56 2026 GMT
        Subject: CN=69d1f4bc-cd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:23:b4:90:a2:bc:f6:59:75:16:4b:1f:75:
                    d1:0b:f4:de:17:93:67:28:87:f1:70:c8:da:ba:e8:
                    bb:88:d0:b9:51:c6:92:fc:11:fb:fd:73:fe:a0:44:
                    1e:37:5b:ce:49:6d:2e:95:d0:73:b6:49:8a:36:c8:
                    2a:d9:96:dd:8b:27:3e:98:99:43:13:22:64:bf:1d:
                    2b:72:86:10:e8:8b:98:3d:da:e5:90:6f:0c:43:16:
                    85:a3:20:d5:ea:c5:15:fa:42:23:ff:f2:90:f1:09:
                    a9:2d:27:85:0f:74:a7:1f:d4:42:ad:49:20:d3:9f:
                    0a:96:93:0e:70:e5:81:31:d4:a5:83:3f:7d:17:1a:
                    64:45:93:cf:97:78:34:1a:48:b7:97:68:e7:39:03:
                    86:09:c2:4e:7d:bd:de:20:d0:9b:cf:7e:0b:88:34:
                    9d:e4:84:c8:c4:43:1b:09:81:bf:03:0b:30:ff:85:
                    5a:d9:b2:02:37:37:13:36:74:a3:d5:88:d8:50:eb:
                    c0:a3:f6:49:34:ac:2d:d1:17:18:1f:c1:b4:c1:09:
                    08:2b:ea:76:5a:bd:52:55:12:98:ee:ba:18:a3:3d:
                    f0:b2:9a:59:21:70:a1:39:95:84:b3:f4:ec:81:f3:
                    a9:00:92:cc:cc:6f:68:4e:2f:a6:b1:83:2a:67:99:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:73:FC:B0:EF:66:3D:49:8C:9E:39:4E:A9:48:09:E7:24:99:A3
            X509v3 Authority Key Identifier:
                keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:90:56:ae:5c:17:d8:0d:74:51:c1:e9:e8:94:ca:f2:e3:9e:
         ac:d9:bb:65:ac:a8:e8:3a:8c:53:2f:ab:4c:40:f4:40:0a:26:
         2b:95:e4:b1:84:b4:73:e3:c4:fb:b5:56:1f:af:e1:5e:a1:0d:
         4c:c0:a2:65:93:5b:8f:26:e3:3f:b3:a6:8c:b9:00:36:0a:2f:
         90:ad:02:d0:cb:dd:b2:8c:7b:23:e9:b8:ed:ce:48:3b:32:f8:
         ed:a4:ac:d7:25:5f:65:d2:71:bc:f5:75:08:21:a2:61:2d:8d:
         cc:e4:d5:45:14:98:6a:df:8e:81:8b:df:e2:cb:e0:79:f7:4f:
         64:6e:2a:88:f6:d0:af:66:52:75:58:14:00:9c:7b:03:1c:fd:
         43:bd:71:0c:6b:e1:ab:c2:1e:df:8b:93:6d:b9:b6:38:d9:84:
         05:57:f9:e6:d2:a2:fb:ca:df:ff:ae:3e:df:79:74:3b:1b:ab:
         55:8e:d5:68:d1:d9:67:39:5c:4c:a2:af:e3:3a:e1:59:14:3b:
         a1:25:8a:93:ce:fe:56:bd:ec:5a:43:42:d0:db:8f:a3:42:74:
         51:18:da:7c:32:ca:cd:68:28:d5:03:16:2f:8d:a2:17:0d:f8:
         2c:6c:8d:f3:54:40:c0:bc:67:c2:b9:f7:cc:ad:79:11:dc:7f:
         06:e9:24:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYzNjMxMTAvBgNVBAUTKDhFMUNDMURCRkFCRDQwQjY0MTRDMjNFM0RGRDg5MTQ1
NTI3REYzMjEwHhcNMjYwNDA1MDUzNTU2WhcNMjYwNDEyMDUzNTU2WjAYMRYwFAYD
VQQDEw02OWQxZjRiYy1jZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqEjtJCivPZZdRZLH3XRC/TeF5NnKIfxcMjauui7iNC5UcaS/BH7/XP+oEQe
N1vOSW0uldBztkmKNsgq2Zbdiyc+mJlDEyJkvx0rcoYQ6IuYPdrlkG8MQxaFoyDV
6sUV+kIj//KQ8QmpLSeFD3SnH9RCrUkg058KlpMOcOWBMdSlgz99FxpkRZPPl3g0
Gki3l2jnOQOGCcJOfb3eINCbz34LiDSd5ITIxEMbCYG/Awsw/4Va2bICNzcTNnSj
1YjYUOvAo/ZJNKwt0RcYH8G0wQkIK+p2Wr1SVRKY7roYoz3wsppZIXChOZWEs/Ts
gfOpAJLMzG9oTi+msYMqZ5mjeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlpc/yw
72Y9SYyeOU6pSAnnJJmjMB8GA1UdIwQYMBaAFI4cwdv6vUC2QUwj49/YkUVSffMh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CRDg2M0Q3MkFG
QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFMWkJUQ1BqMzlpUlJWSjk4
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjM2My9CRDg2M0Q3MkFGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFM
WkJUQ1BqMzlpUlJWSjk4eUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiZBWrlwX2A10UcHp6JTK8uOerNm7Zayo6DqMUy+rTED0QAomK5XksYS0c+PE
+7VWH6/hXqENTMCiZZNbjybjP7OmjLkANgovkK0C0Mvdsox7I+m47c5IOzL47aSs
1yVfZdJxvPV1CCGiYS2NzOTVRRSYat+OgYvf4svgefdPZG4qiPbQr2ZSdVgUAJx7
Axz9Q71xDGvhq8Ie34uTbbm2ONmEBVf55tKi+8rf/64+33l0OxurVY7VaNHZZzlc
TKKv4zrhWRQ7oSWKk87+Vr3sWkNC0NuPo0J0URjafDLKzWgo1QMWL42iFw34LGyN
81RAwLxnwrn3zK15Edx/Bukknw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:17 2026 by rpki-client