Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File:                     rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier:          LZCwFWQ7cgYmgwOUS+h+6ygsZBAaPg28/R46bvLFdPU=
Subject key identifier:   FB:9A:18:E7:67:4A:21:0E:29:1D:10:8E:3A:A3:DA:73:E1:AA:B4:31
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number:          4C
Signing time:             Sat 13 Jun 2026 08:27:47 +0000
Manifest this update:     Sat 13 Jun 2026 08:27:47 +0000
Manifest next update:     Sat 20 Jun 2026 08:27:47 +0000
Files and hashes:         1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: S+twVL9C22+MipJwq1zMg5KxnJheFOR6h1cOfPtm+YM=)
                          2: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
                          3: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
                          4: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Jun 13 08:27:47 2026 GMT
            Not After : Jun 20 08:27:47 2026 GMT
        Subject: CN=6a2d1483-b623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:21:87:c0:6a:1b:e4:80:c8:ab:ae:fa:a8:
                    2c:a7:8b:f4:8e:07:62:40:bf:d8:8d:12:57:1e:01:
                    9c:e1:ec:3f:a1:7c:3b:41:fb:a9:fa:9a:cb:ff:42:
                    f8:96:33:4d:f6:ce:db:ba:ed:13:1e:1b:80:ed:92:
                    8a:1c:83:08:de:dd:6b:66:12:92:75:d8:94:3e:f8:
                    e0:52:cb:aa:f5:2c:d2:9a:ad:57:b9:53:5e:d1:0b:
                    5f:1b:dd:44:96:5e:b5:cd:e2:36:05:42:8b:96:f1:
                    ea:12:48:95:65:31:dc:d9:02:55:c0:01:08:a8:88:
                    e4:c0:94:3c:3b:11:a3:15:a1:c2:65:9e:6f:26:11:
                    87:f6:bd:c0:6d:b8:c9:b5:97:b8:da:18:69:37:d5:
                    0f:1c:55:ff:56:2c:6c:5a:74:20:e6:69:98:63:cb:
                    a3:2d:16:ca:9b:6c:33:5f:71:26:c0:49:a7:12:70:
                    5a:4a:9d:6f:09:b6:a6:a1:a6:bb:66:4d:17:f2:aa:
                    73:e9:2f:e2:6f:d3:c2:36:95:ff:2f:5f:2a:fe:f0:
                    fb:87:2b:a0:9a:48:07:41:45:6d:67:2f:37:04:df:
                    ef:15:63:aa:49:0f:d1:6a:e1:1b:8d:02:df:e1:48:
                    7d:05:b4:b7:8a:bd:13:a2:ff:ae:55:2b:92:4f:d9:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9A:18:E7:67:4A:21:0E:29:1D:10:8E:3A:A3:DA:73:E1:AA:B4:31
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a9:e5:d9:47:7b:1f:fa:68:cb:f4:a0:d8:1f:e5:34:cc:b9:
         41:55:de:90:26:98:6f:b7:2c:bc:b4:7c:b6:62:37:59:cd:fd:
         c3:4b:b4:80:29:4a:27:03:4a:c0:fd:a9:35:5e:2e:ca:f8:f8:
         75:8a:7f:3a:46:98:61:d2:53:6b:8b:02:8e:f3:65:0b:40:1b:
         6e:5e:34:88:cd:22:15:e5:fb:46:ab:ab:32:fe:8e:d7:1f:8f:
         b5:dc:4e:87:69:4c:87:1f:d2:18:f8:dc:db:b8:10:5d:02:f2:
         f6:de:70:a4:84:a9:a1:3d:a5:0d:a1:a9:16:de:3d:e9:10:f7:
         9b:3a:79:07:66:de:26:c1:70:77:05:e5:07:e7:cd:5a:8e:34:
         e3:32:10:92:69:a1:fd:41:f3:f6:32:da:ff:e9:44:8b:1d:a3:
         13:c8:1e:8f:a2:4e:9a:3f:f5:27:1f:bb:04:e6:5e:0e:56:bb:
         73:b7:bf:c2:ec:cc:2d:d1:42:15:ec:7d:60:8a:8b:b6:82:17:
         29:7a:e0:6c:ee:0f:3c:26:6e:fd:ee:16:18:1f:9f:18:f0:67:
         e5:6e:4d:29:95:51:0e:24:ec:70:bf:97:33:1e:11:91:e9:3d:
         1e:cc:f7:d7:43:fa:3e:4c:cd:86:75:70:a7:3c:ba:79:46:6b:
         8a:83:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:44 2026 by rpki-client