Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
File:                     jqgV0DpRxRztXr5f2ZNStjdrVX0.mft (raw, json)
Hash identifier:          nz2g+DoFDvi3dJnHLgbsi2H/h4GQrbK+ldhGcxLc3uo=
Subject key identifier:   E8:40:92:EC:A0:84:50:5F:00:46:72:12:E4:BA:E8:A2:94:AF:87:A9
Authority key identifier: 8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D
Certificate issuer:       /CN=A9136067/serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
Manifest number:          5F
Signing time:             Sat 13 Jun 2026 08:08:31 +0000
Manifest this update:     Sat 13 Jun 2026 08:08:30 +0000
Manifest next update:     Sat 20 Jun 2026 08:08:30 +0000
Files and hashes:         1: jqgV0DpRxRztXr5f2ZNStjdrVX0.crl (hash: POZyMspkiZRyuqZWBqzxAtbKmWkve4axEqTb1uHmfQ4=)
                          2: 902A638ED68011F0B036527A68D3641D.roa (hash: Vz8eeIUSMui4xVAuI1Jf8LJNi6cDsIJmlb8VFlttmdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl
                          rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136067, serialNumber=8EA815D03A51C51CED5EBE5FD99352B6376B557D
        Validity
            Not Before: Jun 13 08:08:30 2026 GMT
            Not After : Jun 20 08:08:30 2026 GMT
        Subject: CN=6a2d0fff-c606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6d:51:c5:ac:34:f9:6b:25:ab:3a:9f:b2:8a:
                    39:c7:3c:d4:86:ce:d2:53:94:35:4b:bf:63:27:5a:
                    72:8e:42:ca:a9:1c:a8:4e:15:fa:b5:f2:9a:68:08:
                    16:df:f1:42:9e:d3:b3:0b:f2:71:65:fe:09:56:9e:
                    3c:0d:31:49:08:e8:d0:78:68:b4:a7:4c:74:ac:c4:
                    e5:4a:7d:71:fb:c4:22:cc:55:a7:2b:f7:59:c6:9d:
                    c4:2d:5d:c5:ab:10:90:50:b5:80:a3:13:6b:ca:14:
                    bc:4c:51:48:9b:ab:e8:1d:6b:78:b7:79:23:67:c6:
                    5e:d5:8e:c9:84:ac:de:2e:00:76:4c:8d:20:ec:c2:
                    fa:f1:35:6b:93:d2:7a:70:c0:d8:70:16:17:8c:e0:
                    30:ad:76:3d:32:c0:a1:1e:7c:1f:2b:51:4b:64:b2:
                    a6:eb:cf:3f:78:17:c1:38:6d:8e:45:2c:2c:16:82:
                    1b:f1:27:f6:40:d5:fe:9d:d0:86:0f:4f:ff:71:5c:
                    9d:f9:70:5a:48:05:82:a0:a9:1a:71:54:eb:19:3e:
                    d8:9a:a8:d0:3a:cd:64:79:a0:77:26:ce:f2:bd:a2:
                    e0:04:45:7a:4d:2a:bc:61:d7:71:20:3f:3b:aa:d6:
                    f3:4f:15:0d:d6:d9:a6:80:f3:4c:21:b2:9a:91:59:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:40:92:EC:A0:84:50:5F:00:46:72:12:E4:BA:E8:A2:94:AF:87:A9
            X509v3 Authority Key Identifier:
                keyid:8E:A8:15:D0:3A:51:C5:1C:ED:5E:BE:5F:D9:93:52:B6:37:6B:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqgV0DpRxRztXr5f2ZNStjdrVX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/2F26F962D68011F0B1B4C7A067D3641D/jqgV0DpRxRztXr5f2ZNStjdrVX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:23:72:2b:95:58:db:36:58:72:95:73:8b:09:d2:e7:72:
         53:3c:90:d5:e8:37:de:03:93:49:36:a0:06:47:fd:d5:bf:a6:
         ee:d8:55:35:c9:da:1d:e4:5f:a9:f1:c2:fc:9e:22:06:6c:a4:
         19:24:9a:f2:a1:d9:3f:83:1e:a4:56:29:43:74:dd:44:26:8b:
         df:e4:ac:ca:ca:b5:45:86:a5:3a:f7:63:15:d5:c2:86:cb:c0:
         dd:d7:57:86:4b:3a:36:9b:89:bf:72:fb:84:41:99:08:a4:db:
         cb:35:0b:63:fb:3d:b9:f4:a5:3d:99:8b:a2:35:cc:52:c3:56:
         83:59:4c:7e:51:35:b8:67:f5:50:19:62:eb:35:1f:82:2f:e3:
         ac:61:fa:81:05:76:56:cc:1d:74:a3:e0:72:05:da:96:98:96:
         58:1a:1b:2c:da:ca:0c:67:d9:d0:32:a2:e5:97:82:8e:f7:d7:
         db:1b:21:9b:ed:69:47:3c:bb:16:0e:69:d3:d5:1f:d4:c5:a5:
         7c:1c:c9:f0:fa:9c:1f:45:50:47:7a:7a:01:93:8f:8f:ab:e7:
         7b:7c:d4:f0:91:55:7e:eb:9a:22:e2:ed:ac:9b:ea:40:b1:f8:
         dc:73:47:8e:e2:34:d6:34:39:d8:bb:fc:f7:47:65:80:0e:3f:
         49:3b:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:39 2026 by rpki-client