Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
File:                     JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json)
Hash identifier:          sVu7OJgYUeNyWS7eozIh7XmiGEz4P2ORnYk1qWsRKlo=
Subject key identifier:   8B:2E:3C:57:04:E0:BC:56:23:7B:94:B9:03:1C:E6:71:9E:F2:C1:8F
Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Certificate issuer:       /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Certificate serial:       0EF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
Manifest number:          0EE5
Signing time:             Tue 28 Jul 2026 17:46:21 +0000
Manifest this update:     Tue 28 Jul 2026 17:46:20 +0000
Manifest next update:     Tue 04 Aug 2026 17:46:20 +0000
Files and hashes:         1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: IbBa4ddRo7ZD43NyKmK6KS4UNvwW0wZ/4NjLZt7FW5Q=)
                          2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: IEnqgZAlKovuD6MzCecMuoV1aCeVk9H0qwnKaqYXSEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
                          rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3827 (0xef3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
        Validity
            Not Before: Jul 28 17:46:20 2026 GMT
            Not After : Aug  4 17:46:20 2026 GMT
        Subject: CN=6a68eaed-f183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:c2:4a:d3:47:32:bf:36:85:53:38:68:94:
                    0b:12:52:71:dd:67:1f:95:9c:61:3d:1c:4d:fc:1b:
                    18:4f:e8:b9:28:5f:1f:03:be:39:e6:6d:02:15:d8:
                    fe:21:a1:72:6d:41:ba:ab:4a:2b:25:4d:e0:01:c7:
                    cc:22:56:5d:8d:64:dd:c7:e8:ae:6d:bb:72:d2:27:
                    d6:ce:e8:dd:3c:1f:4f:0f:44:2d:44:f9:1d:c9:8e:
                    03:44:9d:9f:b6:64:6e:f9:64:f7:90:5d:ec:00:0f:
                    d3:ba:7a:33:3f:b8:d6:75:14:6c:58:7b:33:a3:dd:
                    2e:1f:79:e4:52:99:0a:fe:4c:1e:7f:d7:e7:ce:4c:
                    d2:f4:ba:29:4d:c2:97:73:81:55:2e:69:b2:07:45:
                    6d:b0:ce:e4:ab:35:fe:bd:c9:d1:23:88:f8:46:a5:
                    ca:89:58:6c:5a:e3:82:0b:1b:f7:c8:d3:40:a8:d7:
                    e7:dd:ab:d7:28:67:d4:40:dd:b9:96:48:b1:f5:d5:
                    27:5d:99:da:e2:92:24:91:8c:c6:f6:f6:07:17:55:
                    75:90:ff:a0:ed:b9:f4:03:2c:01:5e:50:54:d6:f9:
                    dc:5a:d1:0d:d8:4a:ec:0b:9b:71:f6:e3:03:2c:1e:
                    7b:29:15:1b:2f:eb:8a:c0:ce:5d:be:e3:97:2d:91:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2E:3C:57:04:E0:BC:56:23:7B:94:B9:03:1C:E6:71:9E:F2:C1:8F
            X509v3 Authority Key Identifier:
                keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:12:d1:b3:a9:b0:da:a1:bf:ed:ef:2a:05:1b:ad:47:dd:
         71:01:55:dc:00:93:d6:df:3d:09:0e:41:cd:82:92:9e:7e:e8:
         42:29:00:c9:8e:3d:10:45:8b:f7:f4:58:03:e0:77:7d:40:4e:
         0e:e0:ee:b4:b5:d0:00:3f:57:c0:5f:10:b1:c0:ba:7a:c5:e4:
         76:4a:0a:fc:bc:d6:78:24:e1:ea:b8:86:ac:72:3d:74:29:6b:
         8d:8a:0e:02:18:ed:b8:fd:7b:2b:e1:07:11:5d:7b:67:3d:8d:
         28:db:9d:f0:93:1a:58:de:82:27:65:4c:60:47:8a:fa:05:96:
         30:f1:dc:79:99:b4:b1:12:ea:40:97:b4:1b:49:e3:e8:fc:3c:
         ba:f4:8a:e9:cd:8d:b5:c5:c8:1b:76:c1:bb:25:ec:2e:60:1b:
         19:11:4d:29:bc:f7:94:55:d5:4b:98:fe:2e:da:92:2c:1f:cb:
         5f:20:0b:39:b6:df:c8:44:73:cc:b8:56:1f:0a:ef:e4:3f:db:
         d9:ff:5b:db:40:09:1f:74:ba:69:e3:18:26:b4:76:2a:8f:05:
         ec:8d:a2:b0:ea:54:a6:b4:88:29:b4:50:5f:15:b3:d5:1f:c6:
         b4:3b:be:c8:1f:d7:2d:3c:49:82:11:48:21:67:ab:5f:6a:a4:
         2a:c9:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:16 2026 by rpki-client