Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
File:                     JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json)
Hash identifier:          0/bSbuA6m+5Fw6FgSnmZrY+2scuTsk00jq4i0umfmlQ=
Subject key identifier:   6A:BE:B5:9E:E2:6A:35:85:2A:3F:12:23:AF:34:EE:55:18:B9:94:71
Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE
Certificate issuer:       /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
Manifest number:          0265
Signing time:             Mon 27 Jul 2026 03:42:51 +0000
Manifest this update:     Mon 27 Jul 2026 03:42:51 +0000
Manifest next update:     Mon 03 Aug 2026 03:42:51 +0000
Files and hashes:         1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: 4ZJ3Tsfvc7jVUPSvrVC+Kjl2bmDdVWaFDugqAtSdPRk=)
                          2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: YXAoNWpBZgAb9OgrXxqM1zjvNiMjLHb2Nw6mTAt3Mio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl
                          rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE24, serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE
        Validity
            Not Before: Jul 27 03:42:51 2026 GMT
            Not After : Aug  3 03:42:51 2026 GMT
        Subject: CN=6a66d3bb-dc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:21:06:ce:82:51:87:0d:28:5a:b3:ac:f4:
                    9a:a7:84:e6:8e:73:28:0b:dd:d6:15:62:f4:1a:4f:
                    2b:68:b8:cb:8a:a5:ae:4e:00:fd:55:fe:8b:eb:c9:
                    4c:12:f7:e1:eb:fa:ad:7f:6b:22:bf:07:4a:ca:f7:
                    e2:20:84:ce:b6:1a:c1:80:36:6f:47:52:bb:b7:2a:
                    4d:ce:9a:93:de:4b:2e:9a:ef:9e:e5:80:d9:a6:8b:
                    65:ce:e7:0c:83:ca:12:e1:2c:e5:a2:b8:e1:2c:47:
                    bb:87:ae:cc:d5:f7:21:c8:3e:9f:0c:0a:43:0c:04:
                    83:bd:07:72:02:c3:f1:87:6c:73:9f:49:14:c5:00:
                    c6:a1:60:79:e7:90:3b:49:80:34:28:c6:8c:45:76:
                    1e:01:8b:bb:21:24:91:95:fd:5f:86:05:cb:c3:1a:
                    a0:a2:f3:cf:7f:58:aa:a0:49:0b:dd:7c:d8:dc:bb:
                    ec:08:85:14:44:5e:74:67:5f:6d:3c:9b:0a:d2:80:
                    6f:ac:9a:b5:65:65:5e:8a:54:52:92:0c:0b:34:bc:
                    39:ea:b4:a9:d7:e0:b4:35:d8:3d:b7:cf:e7:c8:a1:
                    a5:40:68:e9:36:bf:f4:a4:68:ba:8f:55:35:bc:b8:
                    8d:fd:8a:d1:c8:7a:34:3a:85:5a:d5:3f:cd:39:51:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BE:B5:9E:E2:6A:35:85:2A:3F:12:23:AF:34:EE:55:18:B9:94:71
            X509v3 Authority Key Identifier:
                keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ad:02:3c:a5:04:9a:79:67:c5:72:7c:35:2c:4d:2a:43:c8:
         ce:32:74:cc:b9:08:ff:21:5b:b7:a1:f1:81:d0:ed:77:b6:16:
         fb:ea:64:a3:26:da:e2:90:91:7c:bc:54:47:c0:8b:32:36:f2:
         6a:80:22:88:75:c1:ac:a8:2b:56:2b:b4:97:ec:d8:a1:4d:f8:
         84:29:24:f9:2f:f6:cf:a5:00:40:13:90:b7:21:5d:cf:15:04:
         d4:f9:4f:4c:46:c4:6e:bb:25:c6:63:51:92:4b:2c:75:fc:41:
         ae:5a:e4:07:c9:50:0b:9d:0f:7d:5d:7d:fd:4f:8b:f8:1e:c5:
         11:9c:38:74:39:4b:f7:32:5e:c2:9d:6d:c1:e7:14:40:29:b1:
         4d:81:6f:87:d6:51:52:0d:e8:8d:f7:68:d3:bf:4d:78:b1:02:
         16:4b:91:d1:7d:d8:89:17:6a:79:3e:77:07:c7:8d:ef:98:9b:
         8a:7e:95:d6:ad:ca:3b:68:8c:28:a2:3a:4c:72:1d:55:dd:6b:
         ef:a1:3e:40:fc:54:38:e4:0e:0f:d7:7e:f0:bf:c1:dd:5f:65:
         9c:75:7d:4d:af:73:43:3c:92:4f:b3:56:53:a9:8e:df:7d:d8:
         b4:27:14:04:08:69:bd:08:3e:ce:d0:06:08:54:66:ef:a9:38:
         df:4f:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:41 2026 by rpki-client