Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
File:                     jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json)
Hash identifier:          EvT2mJ6JlrS3lrfeXE+vQs5a2fuUMovuMtTwq6v0VTQ=
Subject key identifier:   7F:88:96:B1:93:3B:2A:C0:EB:6B:79:84:60:98:8F:B6:50:F6:FA:7B
Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64
Certificate issuer:       /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
Certificate serial:       0D30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
Manifest number:          0D25
Signing time:             Fri 12 Jun 2026 18:05:34 +0000
Manifest this update:     Fri 12 Jun 2026 18:05:34 +0000
Manifest next update:     Fri 19 Jun 2026 18:05:34 +0000
Files and hashes:         1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: WmiJOSadSWBbqSV93kh1FkHy+3PhPlMwWnNo87qh2WM=)
                          2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: LKT7IFaOCmRtYDfw8c46CXWIZdujEW6bP/9GOxBiApA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3376 (0xd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
        Validity
            Not Before: Jun 12 18:05:34 2026 GMT
            Not After : Jun 19 18:05:34 2026 GMT
        Subject: CN=6a2c4a6e-f9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:a3:01:f4:7b:e6:5c:c6:af:8d:ee:96:30:
                    90:39:a7:fb:3b:3c:34:24:59:4a:af:74:67:1c:63:
                    68:ca:e1:ed:7c:7d:d1:f8:51:f7:e7:40:a6:54:8c:
                    5c:8b:28:a2:93:0d:6a:c0:7c:ce:63:e6:21:b9:bd:
                    9d:fc:54:cb:16:0d:3a:9d:43:d2:c9:ab:e6:19:85:
                    b1:e3:64:aa:3f:3b:d7:38:6f:29:07:d8:fa:f7:7e:
                    4f:4f:c4:18:1b:00:5d:c4:23:f4:6b:c4:e8:cc:94:
                    b3:b9:b5:b8:7a:8d:3b:e6:ad:0f:aa:ce:2a:2f:6b:
                    b9:4b:83:b0:de:9d:07:66:97:ec:bb:ff:1d:4e:1b:
                    00:9b:a9:8e:99:18:09:eb:58:57:11:22:e9:87:7f:
                    99:89:11:0e:b1:14:d8:de:c1:83:d6:4d:18:f4:80:
                    92:39:df:90:e5:93:a5:49:56:ba:d8:30:2e:eb:94:
                    ab:41:e6:d1:d5:cb:6a:4b:c1:59:5a:41:13:4b:5b:
                    4e:a3:98:6f:ee:d6:f0:b0:cf:be:51:21:d3:0a:57:
                    6c:9b:c6:59:c8:5e:db:e9:4e:29:82:c2:62:3b:1a:
                    73:cd:77:ee:4b:32:b5:ce:f9:41:ff:67:16:7e:98:
                    22:2c:2c:3b:fd:c3:93:53:d3:e4:90:8b:a5:9c:c9:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:96:B1:93:3B:2A:C0:EB:6B:79:84:60:98:8F:B6:50:F6:FA:7B
            X509v3 Authority Key Identifier:
                keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:9d:1e:36:f8:45:f9:4a:a9:b7:1e:79:e0:cf:3e:62:61:
         91:d2:d2:ce:78:f2:72:a5:f3:dd:bd:fb:d9:0b:22:1e:c8:70:
         14:55:b0:2b:3c:52:c6:dc:77:14:5b:84:f7:00:79:05:82:29:
         c7:2d:01:e9:3a:bd:37:64:84:f5:8d:db:59:51:c3:15:9e:07:
         b3:22:af:65:1f:d5:44:a0:b8:73:08:18:72:1d:3f:50:7c:77:
         ec:a7:2a:8d:47:bb:7b:bf:14:37:c9:46:18:4a:7e:b5:db:90:
         ed:e2:23:69:92:17:5c:8a:ba:8e:3c:1c:e1:5b:81:af:cb:4c:
         dc:e9:30:af:58:ad:7b:1b:2f:04:1e:af:57:46:14:d7:08:7c:
         05:dc:6c:e7:c4:e1:77:05:0f:1a:ea:5a:23:ee:6b:4b:57:4c:
         1b:8b:99:28:99:19:73:be:48:8c:9a:64:c8:4f:4f:f0:4e:fa:
         d0:3b:3d:cc:6d:b3:55:54:3f:70:ee:d0:05:10:2b:d0:62:b1:
         9c:a5:e8:4f:f5:73:ad:07:f2:46:24:9b:5a:f3:21:cd:ad:4b:
         b4:0a:23:ca:c8:40:85:b3:26:db:cf:07:e8:e4:0a:fb:b8:25:
         90:90:2a:2c:32:48:e9:b6:e7:ce:7c:f2:d8:8e:6f:d8:cd:93:
         bf:0f:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:12:54 2026 by rpki-client