Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
File:                     jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json)
Hash identifier:          G/c1d+BO+YFwxz7jZX/B3NOGwTWR/lUOvrGEBlDouFY=
Subject key identifier:   1F:B9:70:DA:63:32:00:17:08:EC:F0:B1:08:42:A9:BA:89:E5:86:AF
Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
Certificate issuer:       /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
Manifest number:          75
Signing time:             Mon 27 Jul 2026 10:03:55 +0000
Manifest this update:     Mon 27 Jul 2026 10:03:54 +0000
Manifest next update:     Mon 03 Aug 2026 10:03:54 +0000
Files and hashes:         1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: 9wQja+lb1jPahTDUDnNVpRWZuwFZLXND0B89pH1lqSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
                          rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
        Validity
            Not Before: Jul 27 10:03:54 2026 GMT
            Not After : Aug  3 10:03:54 2026 GMT
        Subject: CN=6a672d0a-ca3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:cb:82:f4:d9:f4:c8:aa:b0:fc:8b:e2:94:
                    2a:c0:6b:ac:7e:c9:f6:20:30:5d:ee:66:ba:a6:7b:
                    da:a8:2b:f0:95:24:3f:a3:24:45:56:b8:1d:30:aa:
                    0a:4a:27:bb:32:bc:3f:f0:19:f2:b8:0b:88:64:2c:
                    e2:1b:4d:f8:cb:af:bb:e2:11:69:af:4a:e8:af:56:
                    d6:5e:62:a1:f4:07:e1:7d:a0:dd:a0:3e:26:30:3e:
                    e4:00:c8:f9:5c:87:9b:42:ad:56:6d:e7:67:8e:85:
                    2f:e2:9c:3d:38:c9:4f:2c:89:3f:e0:e6:3c:5a:cb:
                    0d:3f:1b:64:aa:f1:15:10:5a:32:bb:2f:4b:1c:88:
                    62:ba:77:70:bd:c5:a8:08:5f:92:aa:77:48:86:2c:
                    90:b8:e0:59:42:4c:40:2e:68:d8:bf:0d:b8:80:9b:
                    55:5a:df:e0:9e:30:5b:98:d2:55:55:f4:8c:bb:ab:
                    ac:e0:50:37:89:96:9f:35:94:53:62:6e:8d:aa:bb:
                    0a:27:b5:35:2c:1c:39:3c:49:95:dc:af:ba:75:9e:
                    07:5c:7a:00:a2:66:f0:eb:9a:c6:33:3f:cc:77:7a:
                    ee:8d:1d:bd:fc:26:4f:7b:80:fa:a7:b9:c7:71:b9:
                    78:e4:0d:0b:76:5e:11:9c:df:b2:9f:18:bb:40:ef:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B9:70:DA:63:32:00:17:08:EC:F0:B1:08:42:A9:BA:89:E5:86:AF
            X509v3 Authority Key Identifier:
                keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:da:e6:7b:a0:c4:22:c7:cc:e4:bc:f1:32:6c:79:e3:a6:
         24:97:c3:32:20:00:bc:0e:2f:96:6c:66:57:c9:0d:8c:ad:e3:
         1e:18:cf:d4:ae:3f:fd:f7:81:44:8b:be:06:3d:a5:6e:42:03:
         c2:b6:20:2d:d3:2e:d7:5d:27:21:9c:84:75:cb:1e:4b:44:15:
         34:78:fe:42:95:16:fb:bf:dd:16:2f:62:a3:11:92:22:7d:d1:
         fb:56:e1:e1:c9:9e:4b:d5:f8:6a:3a:24:8b:65:0e:0e:26:6a:
         d2:de:1f:66:9b:f1:e5:0b:0f:b3:e1:96:a9:e5:b2:c3:53:3d:
         cf:4a:b2:5e:f2:33:39:15:bf:45:b3:9f:f8:31:71:ea:83:94:
         5d:73:28:4a:44:8e:3e:84:bf:5d:c8:88:4e:ff:26:a4:c8:91:
         ca:ca:f5:9e:ee:9f:c6:2a:67:23:1e:20:41:b8:9d:4c:2e:e2:
         4e:c5:5a:5c:a0:a9:62:8b:06:43:c3:f5:b0:1a:d1:b5:82:5f:
         a2:ae:e6:2b:80:4b:fc:28:53:32:ea:ad:9a:fa:25:03:3d:43:
         87:57:b6:86:d8:e4:74:c1:d2:ba:25:e1:80:43:e0:be:31:06:
         a2:90:ba:91:21:8e:11:00:44:da:fc:d7:4f:96:c5:1e:cb:74:
         31:59:84:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:55 2026 by rpki-client