Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
File:                     JuWb695DQKtmcU_i2e3_bMyBofk.mft (raw, json)
Hash identifier:          bFW56awpDzubzRdhn7T10Kkhz1wM3YP3yJniTF+J/Rw=
Subject key identifier:   55:27:31:09:DF:87:3B:3F:C1:CD:8E:96:A7:7A:4B:BB:B4:7C:62:B8
Authority key identifier: 26:E5:9B:EB:DE:43:40:AB:66:71:4F:E2:D9:ED:FF:6C:CC:81:A1:F9
Certificate issuer:       /CN=A913C35A/serialNumber=26E59BEBDE4340AB66714FE2D9EDFF6CCC81A1F9
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
Manifest number:          31
Signing time:             Mon 27 Jul 2026 10:58:28 +0000
Manifest this update:     Mon 27 Jul 2026 10:58:27 +0000
Manifest next update:     Mon 03 Aug 2026 10:58:27 +0000
Files and hashes:         1: JuWb695DQKtmcU_i2e3_bMyBofk.crl (hash: aG706W5pgpGPD6TSoQlW+TcjIk3vmdBTm5SbQOPvNxc=)
                          2: 6FACCFD03DE511F19BE7396A9C833773.roa (hash: hx73FbUhhYSn4YdY28vMT/48260o2dLNY4f4/5t+UtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.crl
                          rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C35A, serialNumber=26E59BEBDE4340AB66714FE2D9EDFF6CCC81A1F9
        Validity
            Not Before: Jul 27 10:58:27 2026 GMT
            Not After : Aug  3 10:58:27 2026 GMT
        Subject: CN=6a6739d4-84dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:fd:45:1b:29:0b:95:ad:e4:40:46:c5:55:
                    a9:37:8d:ad:f3:f1:86:d5:60:a7:ed:73:60:33:d7:
                    bc:d4:7e:f9:a1:28:af:5e:8f:8b:5c:e9:30:da:36:
                    97:83:3d:4b:4d:a8:e7:6a:50:53:ee:af:a7:8a:c1:
                    5c:65:4b:1c:ae:fe:ae:73:e3:36:63:cb:eb:10:e3:
                    cc:af:d3:0c:d5:78:7f:f1:41:8c:66:58:a2:cc:19:
                    24:21:f4:27:1e:cb:94:ff:79:e6:2b:15:e4:42:4c:
                    97:2f:b7:cc:d7:9f:a0:ea:0b:a0:99:ae:94:89:98:
                    1a:4e:b1:17:b7:c3:cf:fa:95:bb:ae:97:aa:eb:cf:
                    fc:96:ab:9e:7b:8a:b4:9a:3b:2a:3c:ac:56:56:77:
                    23:b3:9d:24:e6:d7:f7:da:1a:10:bc:18:1d:85:52:
                    88:77:b7:9b:6b:95:9e:59:e2:7a:2c:03:dc:c3:a1:
                    9c:6c:8b:fd:88:23:8f:aa:32:23:b4:c5:eb:69:7d:
                    c8:be:63:8d:ee:85:3a:dd:87:60:c3:1a:14:61:33:
                    bb:3e:8d:93:be:b5:b9:55:67:15:a3:79:4d:2b:ba:
                    b8:9a:9a:26:e2:4b:5b:d4:1d:3e:c1:55:fe:cb:5a:
                    d4:a7:db:5d:49:e4:cd:3e:51:d5:0f:29:cb:53:21:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:31:09:DF:87:3B:3F:C1:CD:8E:96:A7:7A:4B:BB:B4:7C:62:B8
            X509v3 Authority Key Identifier:
                keyid:26:E5:9B:EB:DE:43:40:AB:66:71:4F:E2:D9:ED:FF:6C:CC:81:A1:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:88:d7:e4:e7:2f:1e:86:b3:b9:9c:ad:2f:ab:8d:f8:8d:
         f1:6f:79:2e:66:1e:b2:0c:82:6d:80:af:de:e5:4e:50:f1:3b:
         af:df:ff:09:da:ee:1c:c4:c8:09:c6:02:c3:6a:06:1e:57:0f:
         3a:4f:de:ae:e4:db:20:ad:18:7b:03:19:04:f6:a7:c2:36:ab:
         d8:58:90:4f:7e:ac:1e:8e:f6:30:d6:29:5e:0c:c0:a6:1d:70:
         05:f4:1e:0f:39:1c:ad:b5:9f:3c:ab:b0:08:94:db:63:38:a5:
         c4:5c:1c:b1:8a:02:3e:99:b6:3b:49:c0:57:b2:9d:a2:d8:10:
         5d:be:f1:0d:ba:45:8a:83:1e:da:9a:64:f5:3c:ee:48:eb:a4:
         a3:5f:36:16:66:51:fa:1c:b2:94:bc:5b:8e:fd:05:50:4c:9a:
         fe:a4:41:2c:ff:0b:ec:a2:ea:92:e2:1c:96:5e:ca:6f:2d:f3:
         f8:82:30:d7:2e:0b:24:fc:25:c2:07:6b:e8:09:bf:b6:5c:ec:
         78:cf:84:61:5d:db:11:f8:3c:ee:61:de:cf:c2:a5:cf:a5:50:
         7f:f9:b5:df:94:45:a3:d7:ee:4d:14:db:f7:4d:07:35:8f:ab:
         3a:e2:4f:83:3d:6d:b9:3f:52:1c:c7:02:ca:7b:f7:34:b3:99:
         13:83:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:15 2026 by rpki-client