Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
File:                     JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json)
Hash identifier:          pcJYUydaiMqIgbOkdCv3U4OMUqktIjChulgPTNI2K04=
Subject key identifier:   BD:84:B7:10:6C:0B:35:C7:76:08:EB:0D:B1:7B:60:56:E9:AA:A5:BC
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Certificate issuer:       /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial:       03CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
Manifest number:          0396
Signing time:             Wed 11 Mar 2026 00:18:15 +0000
Manifest this update:     Wed 11 Mar 2026 00:18:15 +0000
Manifest next update:     Wed 18 Mar 2026 00:18:15 +0000
Files and hashes:         1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: 2KVfdx/jQLHutgmVcdmXJPilgvzWXtCfGvwrAuJ4Gxs=)
                          2: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: dm8mDFnd4sCdbaaWXZW8U1YjOybI/gS2GoTG/04b7RU=)
                          3: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: Zqbu2gM/p3JYhF6RtHC7pKoD7WRxqkmXieIo4G2MPsk=)
                          4: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: /6u2hpGyEghKewxxLTUeu3WPPeW2saAns4fvfdrjrvM=)
                          5: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: to9oWLtUCPR2IV81QwsKxDWKhq1Sm4j3pB/lwtY1Upg=)
                          6: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: VpW/GGNQZtOaPEiTSAjONhHFcZtykmd+bhy/dKuCDgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
                          rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
        Validity
            Not Before: Mar 11 00:18:15 2026 GMT
            Not After : Mar 18 00:18:15 2026 GMT
        Subject: CN=69b0b4c7-3ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:e6:32:37:b3:70:1d:a0:dd:78:be:c3:09:
                    32:c8:b9:16:a2:b5:8d:83:c5:cc:d2:f3:51:4f:14:
                    09:e2:ad:8b:f9:bf:34:69:f8:ab:ad:69:fc:3c:f7:
                    b1:bf:2b:e4:92:98:33:96:e6:04:73:0f:f9:ef:c1:
                    4d:02:97:22:c5:8e:bf:ab:7d:fe:84:29:89:07:32:
                    d2:4a:de:38:69:ec:3d:b4:d5:cb:b5:46:f4:c1:81:
                    07:f8:1f:d6:ef:fe:21:80:16:c4:da:a8:b9:0d:cf:
                    52:2f:6e:64:57:df:6e:34:45:86:93:27:71:a0:41:
                    d9:8c:12:90:54:83:14:ea:f4:38:d1:3a:66:e7:84:
                    e8:74:00:2e:5a:0b:91:f4:bf:c1:f6:85:21:0f:60:
                    46:89:10:14:97:00:3c:40:9f:38:02:48:a8:2b:82:
                    cf:ea:a4:54:b4:1d:63:1b:c9:b0:0d:40:73:71:20:
                    6e:c8:fb:88:df:6e:e9:d5:a9:34:e2:04:fb:bb:a8:
                    79:25:08:ce:e6:e5:a8:42:4c:31:43:8d:01:f3:ea:
                    b7:30:ee:77:fc:f2:63:91:a5:c6:3f:a1:de:cd:54:
                    3b:40:e0:a8:a7:e8:8f:04:32:fe:82:78:af:10:09:
                    25:0b:19:20:fc:70:54:aa:75:a5:1f:05:d9:47:87:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:84:B7:10:6C:0B:35:C7:76:08:EB:0D:B1:7B:60:56:E9:AA:A5:BC
            X509v3 Authority Key Identifier:
                keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:c4:b9:30:05:6d:8c:20:b8:b0:c0:6b:d7:97:92:11:48:
         da:2f:55:c6:35:cb:cd:6f:48:7d:cf:aa:9e:8e:ad:7f:46:70:
         36:23:d7:0d:9f:0f:fd:51:ff:49:24:bb:60:56:ae:4e:d8:31:
         28:da:f8:68:6f:5b:4f:40:e4:6f:92:ad:fd:7b:52:9f:f8:38:
         5d:56:8a:0c:7f:26:31:9d:ab:e8:ac:2d:b7:cb:65:b1:40:e6:
         94:4a:e8:8a:8c:20:49:55:16:d2:50:a8:a9:81:0f:e5:87:5d:
         ad:bd:8d:1a:a8:34:65:56:6f:92:31:81:5b:e0:df:1f:c7:0a:
         75:61:d8:0b:14:c5:16:01:ed:a4:3d:99:42:79:ab:51:2a:b0:
         ba:b3:03:f6:29:48:d7:ae:2b:dc:a3:18:70:00:23:1d:1f:88:
         00:19:24:86:db:12:69:83:53:b9:39:39:22:27:97:04:25:d8:
         f9:3b:aa:b5:84:d3:90:c8:79:b8:af:5e:8d:d1:b0:43:5f:17:
         de:8c:28:f9:5c:38:c5:ef:15:18:d3:c0:06:8e:eb:78:13:9e:
         3d:bc:74:5c:78:9a:49:0a:6a:71:0f:80:3d:e8:c8:2e:9e:9d:
         0e:79:04:67:ff:59:e4:a2:45:4e:ec:f0:b2:a9:7a:8c:c9:e2:
         6c:56:22:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC
MUNENzlGNkIwHhcNMjYwMzExMDAxODE1WhcNMjYwMzE4MDAxODE1WjAYMRYwFAYD
VQQDEw02OWIwYjRjNy0zYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwb3mMjezcB2g3Xi+wwkyyLkWorWNg8XM0vNRTxQJ4q2L+b80afirrWn8PPex
vyvkkpgzluYEcw/578FNApcixY6/q33+hCmJBzLSSt44aew9tNXLtUb0wYEH+B/W
7/4hgBbE2qi5Dc9SL25kV99uNEWGkydxoEHZjBKQVIMU6vQ40Tpm54TodAAuWguR
9L/B9oUhD2BGiRAUlwA8QJ84AkioK4LP6qRUtB1jG8mwDUBzcSBuyPuI327p1ak0
4gT7u6h5JQjO5uWoQkwxQ40B8+q3MO53/PJjkaXGP6HezVQ7QOCop+iPBDL+gniv
EAklCxkg/HBUqnWlHwXZR4fHYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2EtxBs
CzXHdgjrDbF7YFbpqqW8MB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw
REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu
MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS
STVtcjM1eWNxeFN4elhuMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkODEuTAFbYwguLDAa9eXkhFI2i9VxjXLzW9Ifc+qno6tf0ZwNiPXDZ8P/VH/
SSS7YFauTtgxKNr4aG9bT0Dkb5Kt/XtSn/g4XVaKDH8mMZ2r6Kwtt8tlsUDmlEro
iowgSVUW0lCoqYEP5Yddrb2NGqg0ZVZvkjGBW+DfH8cKdWHYCxTFFgHtpD2ZQnmr
USqwurMD9ilI164r3KMYcAAjHR+IABkkhtsSaYNTuTk5IieXBCXY+TuqtYTTkMh5
uK9ejdGwQ18X3owo+Vw4xe8VGNPABo7reBOePbx0XHiaSQpqcQ+APejILp6dDnkE
Z/9Z5KJFTuzwsql6jMnibFYiTw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:07 2026 by rpki-client