Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
File:                     jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json)
Hash identifier:          VRuAoUQ9iQWCkgf7+TGS5GzrpC4CjTZdax9N3w4WKw0=
Subject key identifier:   35:D1:0F:DE:E9:0E:6F:CE:77:C3:84:91:31:AE:C9:9A:AF:38:96:2A
Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
Certificate issuer:       /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
Manifest number:          01FF
Signing time:             Sat 13 Jun 2026 03:15:48 +0000
Manifest this update:     Sat 13 Jun 2026 03:15:48 +0000
Manifest next update:     Sat 20 Jun 2026 03:15:48 +0000
Files and hashes:         1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: J04WEobJLHHL5GAQKuM1pgnOTFmbIo3cUsLYkI7o7vc=)
                          2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
                          rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
        Validity
            Not Before: Jun 13 03:15:48 2026 GMT
            Not After : Jun 20 03:15:48 2026 GMT
        Subject: CN=6a2ccb64-569f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:45:f2:4b:3c:e5:7c:ed:3a:23:a1:5d:28:
                    01:d1:21:d3:94:df:9f:56:38:c0:d3:95:6e:60:84:
                    86:3a:c0:25:a3:f7:91:cd:a9:29:86:4f:2f:b8:2e:
                    ab:8e:c5:a7:bb:92:8a:c0:d5:b6:ef:54:6c:61:a2:
                    af:49:f7:ef:05:a8:4b:26:23:36:ff:6c:9a:19:7c:
                    52:7b:94:2f:85:46:da:9f:f0:b8:46:a8:ae:b0:b7:
                    e0:14:ee:57:9e:48:a3:70:3d:ed:25:38:ce:f0:7e:
                    2f:07:df:ed:04:4b:61:07:d6:5f:6d:4a:73:4e:a8:
                    54:47:7e:8f:de:b4:01:82:14:85:77:ad:d9:2e:45:
                    6e:2e:6a:38:1f:02:f2:90:4c:61:92:71:b6:dc:40:
                    dd:c3:b3:89:f2:a4:e4:a8:28:a4:98:8e:ac:03:1c:
                    e3:07:f6:21:60:65:ef:08:66:58:14:fa:cc:2c:f9:
                    79:ce:b0:2e:01:41:76:1e:8f:07:57:d4:aa:24:3c:
                    e9:7c:01:23:4a:de:e9:2b:15:61:e2:97:41:03:1e:
                    d7:1d:fa:63:03:ef:62:00:21:f7:d1:be:87:ff:eb:
                    bb:f1:8a:a0:40:47:0c:ba:46:b7:e3:6c:c3:f2:93:
                    ad:be:ae:fe:16:84:b4:72:f9:78:eb:35:dc:7f:9e:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D1:0F:DE:E9:0E:6F:CE:77:C3:84:91:31:AE:C9:9A:AF:38:96:2A
            X509v3 Authority Key Identifier:
                keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9f:cb:53:0d:8e:3c:8c:76:63:18:f2:e1:b0:20:f6:4d:cb:
         de:10:51:0b:26:12:7b:92:ac:b6:a4:7f:09:4e:3a:59:29:9f:
         e5:25:83:6f:a0:38:14:c3:4f:61:e4:80:77:ec:2d:4d:4d:39:
         a4:73:eb:ad:50:65:05:cb:cc:63:29:4b:8c:c1:13:b4:40:19:
         22:06:51:61:33:2c:c1:15:63:b5:77:c4:e5:51:17:2e:bd:13:
         c3:62:07:99:23:23:15:31:27:e3:1d:04:93:14:b3:f4:d3:f3:
         84:2a:f2:43:b0:1e:6f:70:aa:dd:c2:15:1b:63:99:5f:e3:c9:
         ed:2b:54:7d:2e:3a:60:4a:09:d7:76:fb:b5:ae:ff:cf:64:4f:
         14:0a:a8:0d:43:b3:c4:60:e8:93:04:f2:c9:36:c6:c0:8f:08:
         16:d0:a5:dc:10:24:a6:29:8f:10:8e:df:b1:b0:7e:0f:98:fe:
         60:9c:b1:bf:01:7d:06:89:d4:53:c9:7b:15:1c:88:c7:8e:b9:
         1e:96:19:77:b9:2a:cb:b9:c7:79:ec:c6:38:90:6d:0f:66:b1:
         47:ed:2f:0e:1e:96:93:0b:d1:bc:15:f4:63:ab:be:ff:3b:50:
         12:4c:4a:f1:b6:86:5e:c7:e8:28:85:45:d3:56:db:66:50:37:
         bd:7f:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:12 2026 by rpki-client