Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File:                     rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier:          mi4zyuqpN40RaikydxZ5Vy5sxuaIDi4f//V4N6sKuJk=
Subject key identifier:   91:05:F7:59:28:B9:C4:22:60:84:4B:E4:7F:A8:FD:11:99:B7:87:99
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number:          63
Signing time:             Wed 29 Jul 2026 09:39:59 +0000
Manifest this update:     Wed 29 Jul 2026 09:39:59 +0000
Manifest next update:     Wed 05 Aug 2026 09:39:59 +0000
Files and hashes:         1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: /sx+wmCA24EZEsjm3Zfo49NLBDmxWJHk8KlHWrpvM0M=)
                          2: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
                          3: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
                          4: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Jul 29 09:39:59 2026 GMT
            Not After : Aug  5 09:39:59 2026 GMT
        Subject: CN=6a69ca6f-8107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:34:2a:3f:e9:c4:c3:f7:a3:83:1a:5b:a7:
                    7b:de:ae:12:50:80:10:39:85:2a:0d:b9:b2:10:4c:
                    35:1c:cc:b6:ae:32:36:bb:8c:27:64:4c:1d:75:9f:
                    bb:26:68:75:a2:db:5a:f0:ba:47:e3:28:0c:b3:74:
                    96:c4:d8:bc:92:ac:4f:59:5a:ce:13:35:75:a4:84:
                    f1:3f:fa:ca:45:63:f8:55:2d:be:1f:25:70:7a:ec:
                    94:73:de:82:fd:d3:4a:3a:49:a6:b5:c3:b7:38:62:
                    df:e7:e2:be:30:e9:bf:aa:91:0c:9f:ef:a4:11:ef:
                    92:35:22:7d:90:dc:d0:1c:eb:cd:cd:76:41:a6:bd:
                    93:14:cc:80:48:eb:8e:a4:2c:76:70:98:2a:3a:f5:
                    7d:62:2e:cf:a7:f9:c1:6f:3c:cc:1e:fc:86:2f:ae:
                    c7:91:7a:f8:ab:1f:a3:2c:5f:ab:54:cd:36:c7:e0:
                    58:1c:10:c5:49:f8:92:eb:b3:bc:0f:87:c9:ee:1d:
                    12:21:2e:62:21:51:a2:ff:bd:55:70:28:ed:1b:23:
                    b0:05:40:2f:03:a3:26:e9:38:76:47:e5:f3:cb:b8:
                    01:6a:f1:1a:41:27:69:ef:39:e8:ea:3d:99:62:30:
                    6d:7b:59:4c:aa:6b:83:fb:db:33:d6:87:06:08:c6:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:05:F7:59:28:B9:C4:22:60:84:4B:E4:7F:A8:FD:11:99:B7:87:99
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2b:d8:13:4c:23:fd:f5:f6:b8:38:30:fb:17:75:b1:4f:7d:
         f1:d6:41:5a:30:e6:fc:ea:14:db:2c:21:3c:4e:dc:8d:4c:b4:
         5c:f8:ac:dd:c8:cf:d0:32:a2:ff:55:73:c7:36:ee:2c:b9:cc:
         2a:cc:e5:6a:66:38:75:4c:03:78:4f:d6:7f:87:9d:be:85:54:
         fb:86:46:a9:29:77:59:a5:f1:13:3c:d1:77:b9:e8:d1:8f:b2:
         66:bd:6b:e1:63:7c:85:a7:83:20:34:09:7e:a9:d9:10:04:79:
         db:b3:98:6a:8e:49:19:ac:4c:7b:3b:6f:99:c8:4c:2d:51:59:
         0e:af:39:b3:cc:92:b6:a1:7b:67:53:8c:f7:fe:b9:fa:02:ae:
         9d:f7:85:75:04:37:7e:fe:7b:4c:be:91:4e:0f:cc:d4:5b:fc:
         88:71:8a:a4:cc:8d:cf:48:fa:7f:23:04:d5:a9:86:86:18:ea:
         e3:04:06:51:3a:b7:08:4f:93:c7:8f:d1:2a:d9:aa:54:59:a9:
         60:8f:30:65:28:86:a2:5a:97:fb:09:86:54:e1:6f:f2:4e:a9:
         10:c3:ab:14:48:de:cb:a2:b4:94:cb:73:94:ce:68:d1:a8:0d:
         2e:52:dd:5b:85:ca:27:81:2a:a9:b8:fa:93:8c:6a:55:d6:86:
         34:84:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:44 2026 by rpki-client