Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
File:                     j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json)
Hash identifier:          p3dzVcI8bIu0U4IQcFK4z4cX7gxvBmgrHxJId47IFHk=
Subject key identifier:   7D:D0:A5:FB:6F:44:E6:94:4D:9D:03:0F:5D:8B:7C:AB:2C:E5:40:51
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Certificate issuer:       /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial:       08A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
Manifest number:          087D
Signing time:             Sun 26 Jul 2026 21:22:00 +0000
Manifest this update:     Sun 26 Jul 2026 21:22:00 +0000
Manifest next update:     Sun 02 Aug 2026 21:22:00 +0000
Files and hashes:         1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: urH++HZEBcwaBLboOUAhTuSi1s6CPVfXSU3qvmS3h98=)
                          2: AFDBAB82BAE911F09182A92BC4F9AE02.roa (hash: PVjkDP7T0tezEoMksg6Sf8gOirpdO87qwsau6puOlUc=)
                          3: 66D426F0E55D11F0B49EA6E0396F56BC.roa (hash: MLnSJZ7wlMAlzMFJZwoCnvZfMjGPgiWNcDMGC+8J2FI=)
                          4: 97786014BAE711F08A930863C4F9AE02.roa (hash: n9Kxrr3pps9EWJc6FJJvW5XN8lfbolwtiiuJt22fhTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
                          rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212 (0x8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
        Validity
            Not Before: Jul 26 21:22:00 2026 GMT
            Not After : Aug  2 21:22:00 2026 GMT
        Subject: CN=6a667a78-491c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:ce:ad:3d:b3:ed:2c:45:4e:a9:e4:98:be:
                    0e:9d:c6:49:d3:13:16:b9:29:48:4b:3f:83:12:30:
                    93:09:24:67:e5:0e:18:30:29:36:4a:7c:55:bf:97:
                    5f:7b:9d:71:5a:87:59:d4:66:11:98:e4:43:2f:0e:
                    9b:31:f9:f3:9a:c2:8d:0e:53:78:ee:fd:02:55:fb:
                    1e:59:f9:dd:0c:ac:97:28:e9:b0:87:96:53:23:06:
                    c6:47:60:f5:9b:5e:de:3e:77:6d:c1:3a:73:96:c6:
                    e5:a3:26:46:c1:de:3e:f5:fc:65:c2:e3:97:2f:e8:
                    0f:e4:a4:78:b3:19:b4:67:ea:24:da:ed:0f:44:8b:
                    f6:2b:30:a6:9b:d2:4e:39:74:c5:76:8a:5d:ec:82:
                    9e:9a:36:f0:f7:92:3e:3a:37:ff:a6:5b:e4:4b:0e:
                    53:72:68:dd:27:46:30:cc:aa:bf:20:03:62:35:80:
                    02:d9:53:7f:83:69:77:18:86:dd:f9:d4:6f:bd:1b:
                    45:09:5c:bd:9b:15:cb:9b:9e:1c:c9:e3:5a:b8:3f:
                    69:d5:40:ce:70:d2:82:77:6c:9b:43:c1:54:5b:13:
                    f2:09:31:a7:6c:5a:aa:33:e7:e4:73:83:33:05:a5:
                    e1:cb:17:39:d1:17:c5:bc:32:db:e4:77:8e:ab:73:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D0:A5:FB:6F:44:E6:94:4D:9D:03:0F:5D:8B:7C:AB:2C:E5:40:51
            X509v3 Authority Key Identifier:
                keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:e2:f5:40:79:65:4e:78:47:94:5e:71:3d:a4:d4:ea:13:
         9e:a6:0f:f9:2d:7b:59:8a:26:da:d0:b4:1d:89:35:12:ab:33:
         44:92:34:a5:00:29:3d:a0:fe:41:79:a1:43:f7:4a:24:ed:ee:
         46:3f:86:03:4f:52:3f:eb:00:5b:a3:2b:5b:b7:a4:74:8c:4a:
         5d:f5:e6:32:dd:ce:d0:4d:95:e4:4f:e2:1c:15:dd:de:8c:ea:
         8c:49:a7:44:96:49:b2:11:d8:6e:46:85:87:eb:4c:2c:84:e4:
         3f:ab:50:d7:38:36:55:dc:01:79:41:0f:90:c1:fe:56:91:25:
         ae:6b:3f:29:eb:15:a8:a4:a1:1e:d3:46:34:26:e8:b9:97:f9:
         73:5d:f7:b5:c8:c3:1c:51:e3:fe:ee:1f:da:fc:0f:53:98:d8:
         af:f1:97:23:0a:ff:c4:18:db:14:9b:cd:8d:ab:39:41:8f:bd:
         2b:8b:8f:8b:27:71:7b:27:2f:b2:9f:48:18:65:16:1d:21:42:
         9b:38:59:b0:76:b2:25:19:95:98:f5:53:2a:a5:c9:31:28:a1:
         5a:68:25:a6:30:be:f5:dd:04:a5:20:da:89:59:c6:e0:a1:cd:
         c2:ec:fb:47:ab:c0:12:bd:96:21:fc:39:cc:5c:8f:16:8d:67:
         47:08:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:17 2026 by rpki-client