Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File:                     JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier:          t6L+uGZxfY9WgC/pJ7/dK7QiNBNF8QX1z3sViwaOKnM=
Subject key identifier:   94:26:2E:64:E2:DE:6B:A4:8D:9A:65:4E:90:53:88:62:11:01:6A:64
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer:       /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number:          23
Signing time:             Sun 29 Mar 2026 08:32:34 +0000
Manifest this update:     Sun 29 Mar 2026 08:32:34 +0000
Manifest next update:     Sun 05 Apr 2026 08:32:34 +0000
Files and hashes:         1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: XO4F3kpWvL3Y3BDTFvYllItBJxlOKOZCOlOygWs/p40=)
                          2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: 0jDN4qhuB8Eewzdeqkth7GgIxs3HfN7barktvxMRfXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 08:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
        Validity
            Not Before: Mar 29 08:32:34 2026 GMT
            Not After : Apr  5 08:32:34 2026 GMT
        Subject: CN=69c8e3a2-98da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:32:8a:5a:e6:d8:f4:51:59:5f:c6:fe:32:
                    1e:23:df:96:2c:20:33:05:51:f5:f4:07:be:9b:e4:
                    c2:56:26:4f:5e:b3:73:51:47:c6:75:b1:a1:59:85:
                    1c:3f:96:58:62:72:42:74:d3:ca:b1:a9:69:19:ad:
                    31:a9:99:11:a6:ed:c6:90:9d:91:69:6a:fc:94:c2:
                    a3:69:cd:f8:ed:7a:1c:5d:f9:6d:6b:1e:b2:e9:8e:
                    0f:1b:37:32:f8:5a:9d:79:5c:40:7b:a4:ab:23:a5:
                    62:ba:dc:d8:2f:a1:82:fd:1b:0c:80:ef:86:9e:fb:
                    eb:aa:99:8b:77:7a:8d:c1:9b:c3:3a:42:84:1c:4b:
                    fc:4a:33:04:de:72:53:03:ec:0b:d5:cb:ff:be:a3:
                    3f:52:3c:21:ea:e2:30:8e:ea:5e:f5:c5:87:c3:66:
                    a7:71:00:c3:2c:52:b8:d6:87:7f:82:45:3f:29:fa:
                    2f:cb:87:e5:7a:9f:d3:98:f5:e4:66:54:c7:af:55:
                    a1:ec:b8:ab:f1:bc:b9:f3:87:22:81:84:77:06:07:
                    88:22:27:62:3b:15:d3:a6:ed:bd:8e:f2:68:58:94:
                    0b:48:9f:18:7a:f7:27:94:65:37:85:3d:6b:48:b1:
                    77:a4:7e:d8:a4:99:7e:9e:f2:08:a5:5b:cd:1f:8b:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:2E:64:E2:DE:6B:A4:8D:9A:65:4E:90:53:88:62:11:01:6A:64
            X509v3 Authority Key Identifier:
                keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f3:5f:7b:32:69:72:be:ec:da:aa:24:fe:00:66:01:92:d9:
         62:98:34:cc:f3:d4:82:8f:69:0b:cd:ec:d7:0b:c7:ad:97:2c:
         b9:04:4b:e0:3a:cd:d1:39:25:78:ad:43:4b:d7:d1:57:cb:a8:
         c7:8c:52:f7:9c:35:53:af:71:da:4e:0b:6a:41:85:92:2e:ae:
         7e:5e:10:f1:dd:2b:24:2a:b1:76:7e:21:53:f2:68:a9:ae:98:
         2b:5d:fa:f6:53:fe:2a:2e:95:ee:d1:bd:5f:25:07:0e:b4:fa:
         42:ae:76:09:b3:87:fe:1a:fc:c0:19:d1:4a:7c:a1:23:52:e5:
         5e:12:0b:4e:0f:c7:0e:c7:b1:72:58:db:5e:97:d1:d7:c3:14:
         de:96:47:10:af:25:13:2c:05:58:13:f1:b1:61:a7:51:21:38:
         51:4d:e0:ec:25:90:a3:4f:52:e1:10:7f:d1:e5:03:88:36:31:
         a6:2f:5a:14:a2:45:db:1a:50:54:67:1e:c5:de:94:c5:ef:e4:
         e7:37:b7:50:4a:b4:23:2c:a5:99:56:11:eb:98:06:80:51:0d:
         27:13:17:3c:b2:82:cd:e6:f1:85:10:f3:fe:8b:02:1a:ef:70:
         a7:3f:cf:0f:e2:6a:83:33:94:2e:cb:48:f8:2e:9e:ad:c9:f4:
         ba:64:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 13:15:29 2026 by rpki-client