Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
File:                     Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json)
Hash identifier:          fZTPAsjin71AXTkWrr4fCGZR/PkGkeu9+a9RoSVMMWs=
Subject key identifier:   11:7D:D7:DD:24:09:3F:69:E8:F8:0C:15:6E:7F:FC:3A:95:D0:0D:DA
Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13
Certificate issuer:       /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
Manifest number:          011B
Signing time:             Mon 27 Jul 2026 07:54:39 +0000
Manifest this update:     Mon 27 Jul 2026 07:54:39 +0000
Manifest next update:     Mon 03 Aug 2026 07:54:39 +0000
Files and hashes:         1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: aKO5517PG47sZnEJz3/Oyb64qVtKZjbGui+xN6DC684=)
                          2: 71C4845EDD9A11EF8CFB3566C4F9AE02.roa (hash: zD5WhC0bCWsOo5jdXngZobTQEu1Lt+roWNrpYQlV4vk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl
                          rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
        Validity
            Not Before: Jul 27 07:54:39 2026 GMT
            Not After : Aug  3 07:54:39 2026 GMT
        Subject: CN=6a670ebf-315d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:4c:86:a3:c2:3f:07:4e:09:cd:35:b6:e9:
                    81:34:7c:47:40:fa:bc:1d:b1:ab:b2:3c:70:21:a2:
                    7f:58:65:85:09:39:26:7b:fc:45:95:31:30:d4:01:
                    00:62:98:a6:e3:02:9d:42:19:3b:c1:79:fb:a7:05:
                    90:61:2f:55:a9:6b:8d:b0:ec:6b:9a:dd:a7:24:95:
                    96:0b:2f:e7:82:e4:c4:28:1d:89:cd:62:42:1e:f0:
                    d0:f9:6e:4a:8f:19:59:f1:31:ea:d3:f3:3c:4c:fa:
                    bf:9b:76:4a:82:97:3f:bb:55:78:e5:03:28:10:9e:
                    79:30:85:5d:77:ca:48:27:cf:d4:9f:31:e9:9c:fa:
                    68:11:19:0f:c5:15:f9:4d:76:96:21:82:ad:ab:d3:
                    85:6d:7b:5c:85:6a:28:08:cd:de:2a:e2:d6:b7:d0:
                    6d:65:53:03:96:00:2e:b3:98:64:b3:9c:1e:17:ea:
                    77:4b:c0:d6:0f:75:c2:72:e0:5a:63:d3:41:4e:3e:
                    2a:83:14:78:ea:d5:a8:2f:92:a1:76:51:dd:b1:c5:
                    30:4c:56:2d:d1:bb:eb:e6:41:ce:f1:39:50:40:04:
                    b6:f4:d0:3d:56:b7:fa:74:b1:9e:ea:d0:83:fb:5b:
                    ad:d2:f8:28:0d:17:43:ca:9a:e6:4d:2c:64:8b:39:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7D:D7:DD:24:09:3F:69:E8:F8:0C:15:6E:7F:FC:3A:95:D0:0D:DA
            X509v3 Authority Key Identifier:
                keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:c2:44:b4:16:c5:b8:77:1a:9b:7b:45:27:d6:8a:3c:30:
         8c:5c:08:80:c0:cd:0d:a0:1e:e4:91:91:bd:c2:84:83:66:ab:
         93:0e:54:e0:80:26:2b:ba:38:2b:73:d9:e5:46:74:7a:45:6d:
         8d:f8:b7:b1:5a:80:37:3e:13:5b:ca:36:b3:37:95:00:97:cb:
         19:75:62:da:ed:04:f6:08:04:e0:4e:27:35:cc:6d:31:3e:7c:
         30:58:a0:e2:ef:6c:18:3c:11:b1:c4:72:42:96:ab:d3:35:8f:
         47:d8:d0:3b:10:d4:31:90:51:cb:9b:62:ca:ad:4b:bd:5d:95:
         c4:36:a4:1c:68:e3:62:cd:cf:c4:81:f2:45:67:06:79:9f:a7:
         2e:d9:51:db:e3:c8:23:b7:a2:4a:e1:26:ae:1e:f8:22:52:b0:
         55:8a:2b:fa:21:f4:64:27:98:02:43:90:5a:09:5b:0a:e0:42:
         77:25:8e:10:2c:39:31:2e:6d:e8:6e:47:f5:39:7a:e2:bd:5e:
         18:3f:f8:23:84:c3:cd:82:14:dc:3e:67:02:44:4d:33:15:bb:
         15:cc:0d:3a:1e:5e:e7:d2:91:74:73:8e:2b:0b:3e:7b:18:71:
         1a:9c:56:28:b7:ef:56:1e:3c:6a:f3:4b:4d:16:0c:13:7c:f4:
         be:0f:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:06 2026 by rpki-client