Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
File:                     jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft (raw, json)
Hash identifier:          16Ug3MdagrUx2hvz44CYZB32VM7N9LiKlBYuStcFHo8=
Subject key identifier:   22:B0:57:76:DC:F9:7C:E6:AB:F1:09:7D:B8:47:BA:04:8A:64:87:BC
Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
Certificate issuer:       /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
Manifest number:          AD
Signing time:             Mon 27 Jul 2026 09:30:26 +0000
Manifest this update:     Mon 27 Jul 2026 09:30:25 +0000
Manifest next update:     Mon 03 Aug 2026 09:30:25 +0000
Files and hashes:         1: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl (hash: CE6d2n6skhuAgKIAZ6UCS9PYL2vePyxy3vIZXVXgpXg=)
                          2: 65009C2C081D11F19944049E323D8C67.roa (hash: tE0/hZPJ/MXUNdrjbUTRpqb4i6ft44xl0fQQy9zLFzM=)
                          3: 14546D12FF3F11F0805DCCBD8DEE528E.roa (hash: Q1csuSiprpfO+YLO7DTZ4z2P7rX3W4WGdzmbPVATNiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
                          rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
        Validity
            Not Before: Jul 27 09:30:25 2026 GMT
            Not After : Aug  3 09:30:25 2026 GMT
        Subject: CN=6a672532-2eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:1f:f0:e9:61:05:e7:e0:81:10:d3:60:75:
                    72:d2:5f:36:ac:74:a3:a9:7b:0a:3a:27:03:7f:e6:
                    36:90:20:e1:d4:0e:ca:7e:9b:e7:9e:27:60:93:21:
                    7f:ef:af:01:a6:8d:85:d2:8b:e9:81:f7:54:a4:1d:
                    6e:55:0d:65:05:7a:4c:6b:9f:bb:03:fb:75:70:a0:
                    d9:a5:0c:bf:e2:8e:e8:54:68:85:8f:b6:8d:5e:73:
                    a4:79:fa:11:66:d6:28:a9:cc:fe:5e:85:fb:2a:06:
                    67:d1:70:ab:a1:bf:ff:ec:92:74:93:1f:97:7f:20:
                    2e:0e:e3:7f:38:5f:46:aa:f8:19:df:67:39:d1:d0:
                    2b:03:3a:a5:39:e9:45:49:17:45:3d:50:24:a3:e7:
                    18:b4:ed:f3:f0:22:0d:b2:2b:53:60:2e:05:54:62:
                    fd:06:67:fb:7e:47:18:c9:93:c4:1d:38:2f:f3:5a:
                    61:1d:80:e7:83:0a:ba:9c:10:91:86:0d:fb:dc:72:
                    1f:49:8d:e2:81:d9:66:d3:fa:9c:35:93:38:59:fb:
                    81:c9:3c:be:e9:ea:93:f6:74:96:30:8f:3a:c7:ba:
                    4c:3e:8e:59:08:88:1f:9e:47:08:e7:32:49:28:81:
                    b4:2c:9e:6c:0c:9c:bf:e9:4e:ab:ad:87:54:dc:81:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B0:57:76:DC:F9:7C:E6:AB:F1:09:7D:B8:47:BA:04:8A:64:87:BC
            X509v3 Authority Key Identifier:
                keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:13:7f:ca:99:cc:b2:72:52:60:2e:c9:c5:53:0c:ab:47:8b:
         4c:fe:c1:73:03:6c:ed:7d:65:32:70:ab:8b:95:93:a4:4e:9d:
         87:c9:aa:ad:b4:50:b1:7e:9e:2c:6e:cf:c6:85:a4:11:20:ec:
         38:1c:60:67:c6:ea:6b:79:f8:67:71:49:4e:ad:05:3f:c2:23:
         15:af:f3:d4:36:57:50:f9:d2:b6:5f:7e:1b:a0:0a:63:ce:dd:
         0f:b7:4b:4f:52:e4:2f:8b:50:28:91:57:b6:56:03:e9:fb:df:
         37:65:ae:fa:b0:9e:2e:2f:49:30:9e:4e:b4:92:8a:f1:cc:ca:
         e7:3c:33:c2:5a:ef:f4:6d:2f:24:8c:64:33:42:b1:bf:8d:31:
         74:d4:bf:11:e0:c9:ff:93:f3:ac:5d:b0:34:15:29:80:52:2c:
         a3:c9:37:ea:65:5f:82:4f:77:5e:13:60:78:3f:79:d0:09:a4:
         b3:fc:7c:1c:0e:42:80:e3:40:c2:a7:4c:58:d1:bc:22:56:57:
         ab:0b:d6:30:65:ab:39:cb:9c:c7:6c:4a:11:58:60:1b:32:ca:
         f5:85:b8:39:59:e5:6c:f9:46:62:11:f5:17:98:ce:8b:f3:cd:
         7d:68:a0:ea:56:f9:5f:e9:fa:d6:66:6c:9c:5c:ef:be:95:a8:
         e7:0f:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:49 2026 by rpki-client