Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File:                     JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier:          R5DGTkhFel6LyX9nQDlBAh055fhMBM8iXyI/N7hPZtM=
Subject key identifier:   AD:9A:85:A6:A3:32:C8:75:DE:CF:B9:31:E0:D2:E5:C4:04:18:26:F6
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer:       /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number:          97
Signing time:             Sun 05 Apr 2026 06:46:55 +0000
Manifest this update:     Sun 05 Apr 2026 06:46:55 +0000
Manifest next update:     Sun 12 Apr 2026 06:46:55 +0000
Files and hashes:         1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: YXYy8R8Y4hxHP9khcUDG1yYyaXTHNZuUgyxbMmyW390=)
                          2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: qCaE67iInJHl1uaOXWUFk7HB/aS48j+fp1lC079yKZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
        Validity
            Not Before: Apr  5 06:46:55 2026 GMT
            Not After : Apr 12 06:46:55 2026 GMT
        Subject: CN=69d2055f-4223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:99:89:8c:5b:91:66:79:02:8a:69:c2:89:
                    f0:37:aa:e2:1c:92:b4:08:42:6b:88:96:a5:93:d9:
                    2b:e6:c5:a4:95:be:d3:23:27:94:f6:eb:25:c8:bf:
                    49:bb:2c:64:75:0a:52:03:c6:24:ee:81:f0:0f:41:
                    0c:de:ab:23:4d:f6:99:f6:80:3a:0f:f2:1e:b6:39:
                    36:d2:5b:32:f4:4d:b5:6b:fe:41:7c:e6:39:22:de:
                    4a:59:da:12:ba:8e:5f:1e:67:d9:06:49:e7:f5:09:
                    b7:96:64:f5:5e:2e:9a:61:ec:e2:69:30:9a:ad:b7:
                    3f:d6:97:c5:05:bd:ef:81:2e:e1:b3:16:45:a8:2f:
                    ff:c0:23:c2:8c:6e:cf:ed:e4:35:50:07:b8:ad:87:
                    fa:ed:df:c9:61:b1:25:eb:ba:83:9a:f6:c0:0c:7e:
                    87:ab:da:8c:37:7b:bd:01:8b:72:ee:ca:a8:18:f7:
                    b8:e8:8d:52:d9:d2:4a:52:e7:01:fa:05:8b:f4:36:
                    20:86:27:e3:fe:4e:fc:90:13:d8:37:42:6a:26:8b:
                    ef:22:01:27:04:ae:b7:cf:59:67:ed:1c:ff:81:6c:
                    88:53:17:14:49:2a:66:6a:79:69:eb:e3:aa:e9:b9:
                    fb:a3:43:49:c9:35:92:30:c3:2c:d1:a7:99:30:72:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9A:85:A6:A3:32:C8:75:DE:CF:B9:31:E0:D2:E5:C4:04:18:26:F6
            X509v3 Authority Key Identifier:
                keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:a1:34:3a:f3:04:80:ba:2e:43:cf:38:ee:1e:0d:49:f2:
         05:1e:79:f9:78:b6:89:74:3d:a5:02:93:7b:5f:b3:80:72:1d:
         f8:01:5a:d0:9d:3e:b9:23:35:bf:27:43:d2:c5:9c:51:92:34:
         90:df:3f:19:7f:e7:72:0b:67:c4:fd:07:60:9b:01:fd:c8:51:
         e3:17:80:09:4b:7c:6a:5e:a5:f8:56:2d:41:5b:94:b0:15:15:
         de:a7:f9:90:6c:bd:5e:25:b9:75:b6:b1:11:e2:58:9b:8c:e5:
         3b:02:74:34:53:12:40:0b:8a:8e:7f:cf:82:29:ef:34:db:f9:
         8f:96:3f:cb:b3:e4:73:05:1e:3f:1f:fd:77:4c:8b:24:0b:59:
         0f:a8:fa:41:30:4e:7d:57:62:12:9f:2f:9c:09:42:4a:f0:50:
         77:e8:5c:2a:af:c6:97:db:cf:1d:19:b5:c8:d5:dd:55:2f:b8:
         8a:0d:66:91:9f:6b:8d:66:d9:07:80:6c:b5:e2:9c:42:de:2c:
         f8:4f:8f:fc:8f:4a:92:03:52:92:19:db:02:62:22:41:21:7e:
         59:ec:a4:95:0e:de:57:a3:84:57:2a:46:cc:cf:e8:70:72:33:
         03:22:39:9e:3e:e1:c1:96:69:5b:95:bd:c4:87:c3:73:90:56:
         24:2c:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:33 2026 by rpki-client