Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
File:                     jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json)
Hash identifier:          KgOprOZ9lJHHM6HR02JDVYp01sdSUHhcA8oXz3Rh97U=
Subject key identifier:   08:78:A6:A0:4F:EE:3E:F6:21:94:AA:04:CC:BB:3F:DC:8A:81:B8:FC
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0B85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
Manifest number:          0B12
Signing time:             Fri 12 Jun 2026 19:27:04 +0000
Manifest this update:     Fri 12 Jun 2026 19:27:04 +0000
Manifest next update:     Fri 19 Jun 2026 19:27:04 +0000
Files and hashes:         1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: 4DZiOkrbeukqfe5USaEeZuzRcdYUS9OBYj3DfYgc0og=)
                          2: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=)
                          3: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: KY96V7nPX5oq3FzsE82d+7qiOhZ/q030YiLdCFM2iGI=)
                          4: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: NMa7UpL5w1Txgsqxfm+5UqMg/zQgfsv4FmRfVL5Sn+c=)
                          5: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: A7d/aeiJtUu4K+fswUeowBZEDmHgn1F1Svvc5b1xWTc=)
                          6: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: HwFnU0dCqCQrz33mSD+K9rw/y8Y1TbFJLnxiPnPYqwc=)
                          7: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: Al2kZd3bm7sIrq8HRQFPgDS+45qqXFnhmN7j5M3C30g=)
                          8: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=)
                          9: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=)
                          10: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: b9jxPZOZDnRvzE7CGYRtx0ipIG0fk5b1zujNyCQ0yI0=)
                          11: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 7FNm1lP1Pe3hdsBxuVhe1eOrgDF7OuaVieb5lKlg9LI=)
                          12: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2949 (0xb85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Jun 12 19:27:04 2026 GMT
            Not After : Jun 19 19:27:04 2026 GMT
        Subject: CN=6a2c5d88-b040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:f5:b9:9f:b1:d6:8a:51:e6:b7:2c:82:fa:
                    3f:db:c1:3d:6a:f1:c9:fd:73:e3:6e:76:45:d8:b9:
                    57:39:75:77:28:8c:7f:ae:8e:a4:27:77:07:39:e5:
                    35:8b:9e:99:43:d1:7d:f1:b3:c8:4c:0a:8e:5d:3f:
                    f4:d1:f2:72:67:87:e4:c0:8b:26:b1:30:a4:e3:6d:
                    4a:7b:be:e4:c0:24:eb:5b:7b:69:b6:05:4f:4d:ec:
                    51:7b:99:fe:90:ae:f0:03:f0:19:3a:46:9d:f2:2e:
                    55:c0:e0:c9:88:a1:dd:f8:d6:fa:43:e1:97:9c:0b:
                    b8:b1:cc:db:21:04:bc:ea:6f:85:80:30:d7:dd:13:
                    cd:a9:d2:14:22:46:26:3b:c8:e1:53:f1:7c:24:cf:
                    df:66:48:16:2b:05:db:b5:61:40:7d:fb:80:39:3f:
                    49:15:d4:2c:e9:78:08:7d:b3:69:2b:8f:4f:df:61:
                    0f:63:b8:41:c8:c6:f6:ed:0c:bc:be:c8:d2:90:52:
                    ae:f3:01:44:4f:91:aa:75:cc:4a:2d:e7:86:5a:6b:
                    9e:da:02:2d:71:d1:e4:d7:93:64:af:21:d8:e9:45:
                    68:c5:e7:08:b8:73:b0:45:ab:9c:95:8c:6c:41:33:
                    92:a6:44:fa:6f:47:2f:84:1e:de:26:1b:cf:da:97:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:A6:A0:4F:EE:3E:F6:21:94:AA:04:CC:BB:3F:DC:8A:81:B8:FC
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:e5:3b:51:97:0a:0d:90:bd:fb:a9:bf:22:fb:5e:cf:3f:
         40:9d:e3:41:4b:85:73:be:f2:97:b8:bf:35:06:bc:47:b8:0d:
         6d:dd:cf:52:42:95:ee:df:4a:c9:ca:31:40:90:37:a6:e8:4d:
         e1:f9:ba:38:06:4e:76:a8:4c:65:3b:be:37:7a:24:48:94:8f:
         b4:88:a2:1d:5f:a0:1a:6b:10:7f:b4:27:09:e2:bd:27:9d:8e:
         0b:ca:ad:db:bb:23:62:21:d0:f2:e8:57:16:9c:52:f5:a1:69:
         95:a5:e3:a7:55:ec:08:32:d6:34:f8:d8:64:34:a8:ca:d7:12:
         13:97:d1:9a:4c:25:7a:0e:08:01:fa:2c:7d:4e:04:bb:28:56:
         44:12:ad:5e:45:39:78:25:e2:b7:25:57:9d:f5:44:0c:11:43:
         cf:ec:1c:d3:e0:47:5d:f7:16:7a:39:ca:b8:cf:21:d6:2a:ed:
         f2:3c:56:1f:60:12:c9:db:ce:ea:53:6f:cf:07:85:cd:25:6c:
         71:dc:8a:f1:ad:2c:27:4c:87:ff:e3:62:f6:ab:25:a1:8a:45:
         a4:35:83:90:d3:2c:bd:86:56:0f:37:a7:d5:92:e4:b7:e8:71:
         fb:2e:7f:36:f8:a6:34:b8:3e:61:df:b0:5b:7c:04:cc:aa:bc:
         d7:02:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:36:29 2026 by rpki-client