Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
File:                     JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json)
Hash identifier:          wYwfGcLe/6q4G4hHsCS+mCgsfLdSuCl0E67uSXBYMgY=
Subject key identifier:   42:6A:C7:90:DA:9A:30:D6:6D:79:2F:83:6F:FE:E0:BD:8F:A4:0A:F5
Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09
Certificate issuer:       /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
Manifest number:          FE
Signing time:             Mon 27 Jul 2026 08:21:09 +0000
Manifest this update:     Mon 27 Jul 2026 08:21:08 +0000
Manifest next update:     Mon 03 Aug 2026 08:21:08 +0000
Files and hashes:         1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: KjNDGuJANH9RiXEtHDwqdZUvdRQHLg8IxyyitPUmvtw=)
                          2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: JDWX9UuqHKo4in7tq3/puQm/PTl4j1DhM/0eE9MXDA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl
                          rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
        Validity
            Not Before: Jul 27 08:21:08 2026 GMT
            Not After : Aug  3 08:21:08 2026 GMT
        Subject: CN=6a6714f5-abab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:2a:2b:0a:63:e8:15:a6:4a:b8:34:35:8e:
                    1b:54:b0:9c:df:8d:c8:30:72:fa:b8:2e:59:c3:2e:
                    4f:7d:7c:cd:60:c1:d4:e6:9a:aa:bc:34:32:2a:4f:
                    29:53:0f:84:7d:a1:76:8f:86:1e:8d:7d:e0:a1:86:
                    e1:51:71:a0:8a:af:8d:51:2e:ee:8e:a8:2d:ce:d5:
                    a6:a1:9e:be:05:d6:b6:4c:3b:c2:c5:64:97:84:63:
                    21:32:26:c9:9a:65:85:fa:80:18:00:2c:b9:78:7f:
                    df:11:e9:b7:07:8f:79:0b:e1:9a:eb:f1:de:d2:3f:
                    95:b8:48:14:0d:6f:29:69:12:8e:4b:b9:7b:d8:cc:
                    f5:1e:af:5c:94:77:83:a8:e8:70:7a:b2:ce:d7:cc:
                    95:63:80:05:c9:01:61:e1:ae:a3:28:d3:4f:ce:2f:
                    88:a5:98:a4:00:6d:2f:2d:47:24:f3:2e:be:77:43:
                    17:aa:a2:82:f6:5f:d0:fb:16:bf:60:ab:8d:56:e8:
                    b4:32:7d:ed:68:39:e0:2d:c1:b2:7a:5c:18:a5:e5:
                    ab:94:ce:69:6c:34:1a:19:78:02:f5:3b:a5:ae:49:
                    ea:14:fa:cf:35:8d:08:4b:22:79:d8:42:80:bb:a5:
                    d2:ab:3b:93:b8:e1:29:da:78:1d:dc:ef:b8:93:ff:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6A:C7:90:DA:9A:30:D6:6D:79:2F:83:6F:FE:E0:BD:8F:A4:0A:F5
            X509v3 Authority Key Identifier:
                keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:eb:58:89:74:72:ca:65:13:91:62:71:2d:a5:70:7f:3b:
         73:f8:19:7e:ba:24:af:a5:5c:8e:46:d8:73:77:58:fb:6b:15:
         2d:60:0f:c5:5c:f4:01:4d:fe:19:37:ae:2e:23:64:e3:f3:03:
         f0:c7:22:44:f2:30:91:07:1c:3c:8d:26:c0:e5:0c:26:bf:84:
         03:9d:84:68:5f:bf:e0:84:0d:06:11:da:c2:99:1a:e9:56:86:
         5f:12:43:80:0f:44:5d:89:7c:f1:43:64:13:c0:07:25:e2:48:
         df:9e:a0:04:af:3d:08:a6:b0:32:ee:d1:2b:70:9e:1d:66:a5:
         8e:99:4d:1b:cc:c6:91:75:c9:aa:75:8d:a2:fc:ba:18:be:a5:
         4f:92:0e:0c:0e:ef:52:f4:26:3a:71:3d:c3:98:b7:32:86:1c:
         6e:ad:a0:76:85:df:69:aa:2d:45:94:cf:cb:bf:92:75:fa:5a:
         5d:51:19:24:9d:f0:19:e2:7c:da:11:02:89:93:1e:75:bf:ae:
         36:0c:95:46:9b:cb:18:f2:1a:de:21:d7:78:8c:77:1d:ef:64:
         3f:d5:67:02:f9:51:c5:0b:73:f4:63:51:29:ba:80:bd:90:22:
         9c:7f:b9:ab:30:12:d5:a9:24:05:c7:4d:9c:ba:1d:60:67:d0:
         71:98:b9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:58 2026 by rpki-client