Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          +K85ESeOKwvaB6wBpHjF272c6DFRMruEIBygKKd2SRg=
Subject key identifier:   61:B3:D5:E7:4E:E8:29:ED:96:D2:AD:7B:92:9E:70:9E:EE:3E:1F:B3
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0D42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0D33
Signing time:             Thu 12 Mar 2026 17:50:23 +0000
Manifest this update:     Thu 12 Mar 2026 17:50:23 +0000
Manifest next update:     Thu 19 Mar 2026 17:50:23 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: EBoxkLXcunPAp1OU3XWilsoty9R2HgMvzUqJHCHg1U8=)
                          2: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 89YxSryYm31Rbj8lSds/XzwttXebIp1udXTMfTHqmfg=)
                          3: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: QLA/RgvuaonKg9bW/z2IbJYEpT3gfx5VJ79vVBjWg0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3394 (0xd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: Mar 12 17:50:23 2026 GMT
            Not After : Mar 19 17:50:23 2026 GMT
        Subject: CN=69b2fcdf-0717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:aa:0e:6b:97:9f:b3:b2:be:2d:f4:e2:50:
                    32:06:ae:8b:16:57:60:33:88:aa:84:d9:66:b7:3c:
                    79:2d:f8:5e:2e:72:07:e2:af:52:81:a7:db:21:ec:
                    58:05:55:6f:4c:8a:11:7c:82:d7:00:a2:62:28:98:
                    18:19:64:4e:4c:d6:40:f3:8c:8f:21:74:ac:69:e9:
                    a4:36:35:58:89:aa:79:f0:1e:22:de:0c:55:dd:be:
                    5a:21:aa:af:3b:79:cb:a5:b5:22:5e:6c:0b:ab:25:
                    67:99:a3:d4:4c:9a:6e:60:2b:d9:6e:c3:3d:1f:16:
                    04:90:87:e8:27:4c:1a:6d:fc:55:3c:23:e1:06:24:
                    c0:eb:6e:c7:85:de:2f:d6:82:b2:22:cf:76:8b:65:
                    18:69:ef:f7:86:f4:59:9d:da:4f:87:f7:d4:a2:9c:
                    ae:a7:05:fe:fc:ef:55:04:b7:83:f3:15:f2:fa:d9:
                    8b:22:61:7f:25:67:28:d9:63:c0:69:34:5e:54:a9:
                    88:7d:63:22:ba:63:c0:65:70:67:8b:6b:5f:bf:79:
                    ab:49:21:58:7e:fc:f9:13:dd:6b:cd:91:25:5c:b6:
                    75:ba:67:a5:38:43:fc:e2:8b:0e:47:26:21:6e:e0:
                    33:f6:f8:62:37:b1:96:87:dc:3d:8a:03:9b:30:d7:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B3:D5:E7:4E:E8:29:ED:96:D2:AD:7B:92:9E:70:9E:EE:3E:1F:B3
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e8:80:39:ec:5d:96:79:6f:7a:63:bb:d3:c3:4d:ca:4f:72:
         e4:7f:5a:71:62:e7:0f:b5:10:e2:69:1e:67:1c:40:6e:a4:0d:
         bb:0d:8d:78:fd:fe:50:89:76:11:90:49:50:2c:dd:a9:22:10:
         a7:56:13:dd:c5:ac:4e:91:4a:4b:9c:36:98:67:8e:ba:c5:cd:
         55:33:bb:f6:e0:64:d8:d6:fd:7b:c6:7c:7e:3a:10:35:8c:c9:
         ab:81:46:9b:06:00:c9:87:76:e1:7f:f3:d0:ca:90:06:e8:ee:
         fc:1f:91:ae:97:b0:d8:06:c9:80:e1:ce:fe:7f:98:32:05:89:
         1b:5f:16:ad:a3:37:90:ab:1a:81:6d:93:28:60:26:20:54:44:
         73:88:6e:42:f2:99:42:2e:3a:4f:4f:13:a0:6b:14:06:8d:cd:
         45:8e:e5:7f:93:6e:85:6c:af:1b:74:97:3a:91:bf:07:e8:cf:
         3c:2e:47:93:f8:7d:8f:da:24:90:7c:1d:38:6c:f1:c4:ae:1a:
         ba:4e:67:b3:96:5a:44:6c:89:09:34:ed:43:0b:ba:55:55:96:
         41:0c:3c:2d:b8:be:c2:e7:2a:04:12:a0:43:5a:4a:07:a5:70:
         93:38:3c:db:fe:9b:bf:44:93:b8:e6:30:c4:1c:85:5e:b9:5c:
         d4:20:79:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD
RjQxN0M5M0YwHhcNMjYwMzEyMTc1MDIzWhcNMjYwMzE5MTc1MDIzWjAYMRYwFAYD
VQQDEw02OWIyZmNkZi0wNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+KqDmuXn7Oyvi304lAyBq6LFldgM4iqhNlmtzx5LfheLnIH4q9SgafbIexY
BVVvTIoRfILXAKJiKJgYGWROTNZA84yPIXSsaemkNjVYiap58B4i3gxV3b5aIaqv
O3nLpbUiXmwLqyVnmaPUTJpuYCvZbsM9HxYEkIfoJ0wabfxVPCPhBiTA627Hhd4v
1oKyIs92i2UYae/3hvRZndpPh/fUopyupwX+/O9VBLeD8xXy+tmLImF/JWco2WPA
aTReVKmIfWMiumPAZXBni2tfv3mrSSFYfvz5E91rzZElXLZ1umelOEP84osORyYh
buAz9vhiN7GWh9w9igObMNe/HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGz1edO
6CntltKte5KecJ7uPh+zMB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz
RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTg2OC8wNjVBQzIyQ0YzRkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01V
QjVXNkc2bXgzYV9QUVh5VDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjOiAOexdlnlvemO708NNyk9y5H9acWLnD7UQ4mkeZxxAbqQNuw2NeP3+UIl2
EZBJUCzdqSIQp1YT3cWsTpFKS5w2mGeOusXNVTO79uBk2Nb9e8Z8fjoQNYzJq4FG
mwYAyYd24X/z0MqQBuju/B+Rrpew2AbJgOHO/n+YMgWJG18WraM3kKsagW2TKGAm
IFREc4huQvKZQi46T08ToGsUBo3NRY7lf5NuhWyvG3SXOpG/B+jPPC5Hk/h9j9ok
kHwdOGzxxK4auk5ns5ZaRGyJCTTtQwu6VVWWQQw8Lbi+wucqBBKgQ1pKB6Vwkzg8
2/6bv0STuOYwxByFXrlc1CB5QQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 07:37:19 2026 by rpki-client