Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
File:                     9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json)
Hash identifier:          HiG16AHmitce2Y1sPhNr/5WwCyNtzN9dOUnYkvkOhhc=
Subject key identifier:   B0:F0:0D:16:64:9C:AE:2F:62:A7:7C:00:3D:64:2D:F4:99:68:2F:D0
Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
Certificate issuer:       /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
Manifest number:          12
Signing time:             Sat 07 Mar 2026 08:22:36 +0000
Manifest this update:     Sat 07 Mar 2026 08:22:35 +0000
Manifest next update:     Sat 14 Mar 2026 08:22:35 +0000
Files and hashes:         1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: g7nQnnpfCVKQFBxuVENThMMBP4qE+Pl5AuvLdrCloow=)
                          2: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=)
                          3: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
                          rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
        Validity
            Not Before: Mar  7 08:22:35 2026 GMT
            Not After : Mar 14 08:22:35 2026 GMT
        Subject: CN=69abe04c-964f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:ee:8e:39:0b:df:70:3b:d3:04:6c:e6:22:
                    fd:37:4d:db:f1:fe:f8:3b:d1:f7:0c:74:4f:5c:8a:
                    ed:51:bf:63:85:dd:f0:9e:75:80:71:e8:4d:ec:a1:
                    c5:72:03:47:57:7c:17:d3:6c:b5:5f:64:21:6b:0a:
                    6b:9d:5c:3e:eb:20:97:55:1a:a5:fe:44:b6:59:75:
                    69:c9:86:c2:b1:5d:75:08:64:f4:18:d4:a0:7f:95:
                    50:0c:f2:6a:f0:76:2e:7d:8b:9d:ef:b9:ed:a7:06:
                    98:98:34:79:01:49:af:4b:80:e0:72:f1:21:d5:35:
                    7c:0b:1e:b2:16:49:2f:e5:38:d0:8c:f2:fd:6b:01:
                    b3:b5:e4:1b:af:39:91:c8:34:f6:1b:3c:19:8f:ad:
                    f7:a9:6d:25:c9:85:61:50:14:8e:9e:73:3b:61:b1:
                    04:fa:7a:1c:e0:10:8e:e9:d2:91:7d:1a:8c:50:a6:
                    92:24:69:55:40:3a:24:4a:0c:b0:e1:66:66:0f:b5:
                    c3:25:38:7f:19:31:ea:fc:6e:bd:47:d3:81:ba:66:
                    3f:95:a9:32:31:ea:84:66:d9:59:6e:ea:dd:ae:f7:
                    b9:fe:21:1c:ed:84:39:a5:84:e4:ea:ad:35:d5:a3:
                    4c:57:78:e8:c2:16:5e:22:96:42:51:a1:ef:82:cd:
                    2a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:0D:16:64:9C:AE:2F:62:A7:7C:00:3D:64:2D:F4:99:68:2F:D0
            X509v3 Authority Key Identifier:
                keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:ec:32:e5:8e:9b:a4:db:ae:06:7f:5e:be:72:ca:0f:ac:
         3d:80:8b:62:09:68:b1:2a:1a:db:de:27:2f:4e:6f:1c:22:01:
         c8:4d:f1:ba:13:b8:49:c0:0c:62:c9:bb:a2:63:a1:fa:83:b8:
         c1:1c:d1:c4:72:f8:a9:90:12:1d:45:78:dd:1d:91:5a:1d:bd:
         5a:19:be:67:c7:58:91:aa:c4:da:62:d9:0a:3d:ef:71:00:3d:
         49:17:0c:50:c2:37:85:6c:fa:58:bd:13:92:88:35:91:10:9c:
         50:90:0b:13:b6:18:9e:d7:6a:c5:42:2a:bf:de:f0:91:2d:2b:
         dd:e3:0a:31:c3:f4:e8:75:2c:5c:11:b9:e9:e2:55:ab:8d:ab:
         0d:ec:24:5a:94:6c:88:3b:2e:e4:67:de:59:df:aa:41:b1:e2:
         71:ba:99:77:98:f8:30:d8:dd:20:cc:4a:39:1a:1a:8e:f6:00:
         66:1c:ed:55:8a:fe:61:01:6b:14:b1:7c:03:56:d1:3b:04:86:
         f2:12:1f:1b:fc:7e:55:ff:05:4b:69:4f:97:75:26:bb:1a:18:
         01:20:cc:9c:38:a4:93:49:b6:7e:06:8b:b5:89:ec:99:ef:8d:
         9f:2f:cc:3d:b8:2a:44:7f:41:e8:94:15:1b:45:d0:c0:39:41:
         9d:ab:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:32:32 2026 by rpki-client