Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
File:                     joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json)
Hash identifier:          24vpH6SahRbsRJdqpaeDXZHIgLYNurEB6TaXb/ZhLKE=
Subject key identifier:   0E:99:CD:04:4C:C6:52:7E:CC:4D:EC:5C:F5:66:15:99:E5:83:58:72
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Certificate issuer:       /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial:       1FD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
Manifest number:          1F98
Signing time:             Tue 28 Jul 2026 16:05:24 +0000
Manifest this update:     Tue 28 Jul 2026 16:05:24 +0000
Manifest next update:     Tue 04 Aug 2026 16:05:24 +0000
Files and hashes:         1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 55quB5mk4/RTW3L10tQSIzqwyvsk+8nV1ly6U1MblW0=)
                          2: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=)
                          3: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=)
                          4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=)
                          5: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=)
                          6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
                          rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8146 (0x1fd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
        Validity
            Not Before: Jul 28 16:05:24 2026 GMT
            Not After : Aug  4 16:05:24 2026 GMT
        Subject: CN=6a68d344-8d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:6b:0f:4c:9c:70:3a:2b:5a:8b:f3:d6:8f:
                    98:eb:cd:57:7a:0d:38:17:16:d0:14:59:06:3a:41:
                    4e:24:a9:9c:d7:12:83:70:97:60:95:b2:3c:a1:5b:
                    29:aa:64:79:e9:22:c3:9b:53:39:fa:8d:d3:55:94:
                    db:d2:a9:07:90:71:c2:70:e2:8b:58:a3:8f:27:4d:
                    43:3c:05:c9:66:83:a8:9f:4f:d0:5c:56:c2:25:dd:
                    aa:a5:27:ab:ef:38:6b:87:e5:7a:09:db:38:a6:e1:
                    3d:e0:53:cb:a5:0c:80:26:d3:57:d9:10:e6:20:8f:
                    a5:10:cb:6e:07:20:64:83:09:76:25:c7:16:4a:2b:
                    87:a3:1f:c0:8c:1f:ac:3f:e8:d8:35:66:d0:03:8a:
                    e3:0e:85:0c:a5:ee:74:09:47:f6:d2:2b:44:e6:49:
                    b3:82:e4:54:bb:32:d4:55:f1:ca:ae:fa:40:a3:5a:
                    2d:73:b2:92:e3:c2:c3:aa:4f:07:31:89:bc:bb:45:
                    80:d0:f2:5c:72:e2:6e:7a:52:f1:3a:c0:2d:db:3a:
                    24:23:ee:c0:3a:3c:9b:9b:16:f4:85:d3:ca:c3:10:
                    8a:62:91:7b:53:d2:da:0d:e3:81:c9:5f:eb:d5:59:
                    f4:7d:94:b1:88:97:e1:8b:1c:b9:23:e8:13:88:36:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:99:CD:04:4C:C6:52:7E:CC:4D:EC:5C:F5:66:15:99:E5:83:58:72
            X509v3 Authority Key Identifier:
                keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:89:ef:a8:d7:4c:f5:c3:62:54:9f:d0:40:f3:f4:38:fe:0f:
         98:a9:64:16:b0:b4:2c:95:a4:de:e3:d9:49:ba:e1:a6:82:15:
         55:0a:fc:c9:0d:eb:45:00:5d:ae:ed:10:54:be:8b:cc:7c:97:
         a7:15:a9:9f:41:83:08:aa:1e:26:0c:8e:7a:8c:f2:eb:1f:82:
         a8:7f:4c:f3:1e:2f:f0:24:bd:0c:f4:b9:4a:3c:f4:bc:57:29:
         2b:18:84:ca:67:28:02:b2:8a:ef:05:5a:4e:3b:42:33:8e:7a:
         e7:fc:aa:86:36:91:9a:25:cf:c7:36:09:88:a6:57:58:05:ed:
         d4:46:a7:a8:5f:50:8c:7a:02:15:7d:e9:c4:04:f7:e0:b7:8e:
         3a:22:26:f1:4f:de:b2:78:5b:7f:4e:99:77:e0:86:c3:b8:ab:
         74:c5:d7:ef:d9:77:46:28:7b:bb:45:86:63:75:d9:90:93:be:
         1f:b1:c9:21:54:6a:af:b4:12:b8:c4:7b:53:17:7d:2a:6b:97:
         cc:87:6e:05:84:74:ab:d4:14:12:69:29:37:76:63:5a:5e:77:
         71:c8:76:7b:22:49:f8:69:cf:0a:37:c1:f3:5e:75:ba:4d:36:
         37:81:04:2c:8c:fe:71:f5:a0:f5:5a:1a:29:4b:82:4e:66:08:
         69:ae:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:30:17 2026 by rpki-client