Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File:                     JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier:          XZ1UvI1Z/1XzjwGzCIVREnSQOPLlFndCNnMdlTqWvtw=
Subject key identifier:   C8:55:4E:25:8B:DD:46:40:0E:1A:6B:38:97:0B:75:A9:13:D6:DF:DE
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       0406
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number:          03FD
Signing time:             Mon 27 Jul 2026 01:30:55 +0000
Manifest this update:     Mon 27 Jul 2026 01:30:54 +0000
Manifest next update:     Mon 03 Aug 2026 01:30:54 +0000
Files and hashes:         1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: iTkg0uFM+6lOdDGmdcr2Az3cC4rPVeIYrPxB+Lf7L7w=)
                          2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: eZ7JK+aGAs/opiDztnKqy+GMiThhAmSDYCWU0M8qRG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
                          rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: Jul 27 01:30:54 2026 GMT
            Not After : Aug  3 01:30:54 2026 GMT
        Subject: CN=6a66b4cf-9bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:8a:26:69:53:78:e5:14:c3:5b:af:8e:e9:
                    4f:2c:dd:61:4e:17:58:df:ab:c4:c6:12:8c:b8:13:
                    a7:a0:b0:b3:ee:78:28:e9:21:13:e3:01:36:56:f5:
                    1d:5f:94:4f:d5:9a:b0:f4:8f:82:30:b5:d6:ff:6d:
                    f8:f7:fc:42:d9:ec:ed:73:e2:04:01:c5:ef:e3:0a:
                    16:57:fc:c6:27:0f:c7:4a:3b:68:7f:14:f6:5d:c7:
                    8c:f6:cd:62:a1:5c:9c:6d:f4:be:73:ea:96:41:6d:
                    00:42:c0:b0:16:95:1a:f6:11:13:67:13:b6:6e:f7:
                    cd:80:c3:0e:0a:15:82:0c:ea:e5:0c:a3:b8:41:93:
                    01:49:96:9e:91:a0:66:49:5a:f4:da:15:3b:f5:d0:
                    1c:f1:b7:c8:17:5c:c8:4e:6e:ed:11:15:87:ee:39:
                    ed:a4:af:3a:f8:8c:2f:54:f0:4b:30:b1:e8:f8:33:
                    d5:08:71:55:e8:b8:3a:0b:ac:eb:ed:5f:9f:00:72:
                    66:76:e5:f1:27:5e:ad:0d:48:15:99:07:55:84:ce:
                    30:eb:7f:ba:ac:26:82:71:7f:cf:a9:46:82:cf:3e:
                    23:81:d6:47:31:2d:96:c3:90:f4:93:bc:e9:2c:6f:
                    13:47:30:2f:52:a1:a0:4e:fa:9a:fb:d3:21:94:cb:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:55:4E:25:8B:DD:46:40:0E:1A:6B:38:97:0B:75:A9:13:D6:DF:DE
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:4e:24:f7:12:a3:dd:c9:34:b0:ee:c1:41:08:65:84:6f:
         0e:ea:e5:76:5c:83:f3:8d:55:1b:78:3e:f1:e6:2f:c2:4c:34:
         10:f5:5a:53:0c:5a:ec:98:b4:ed:c8:b5:c6:bf:26:e5:f7:32:
         62:b0:1d:72:e1:bd:6d:13:10:1d:a4:ed:d2:c1:bd:95:37:34:
         70:70:5a:41:b0:4c:a9:3e:4d:a1:a8:ba:fd:fd:10:d2:2a:5d:
         0a:13:3d:99:be:7b:55:65:b4:67:51:61:4f:58:2f:48:c6:be:
         c9:00:ad:df:32:c4:1e:4a:d0:c8:bf:a1:36:1c:e5:f2:01:a6:
         31:3c:b4:a1:7d:8f:40:a0:6e:8d:2b:f9:ce:9f:4d:64:95:64:
         36:d2:a7:8f:5a:66:1a:dd:6e:46:0f:09:75:81:8b:1a:6d:db:
         aa:1e:68:69:14:f4:17:30:39:45:db:13:c1:30:4a:49:88:67:
         74:69:f9:cf:0a:e8:11:c1:39:b2:32:58:ac:aa:e0:cd:62:c3:
         2a:2a:67:2a:8f:8a:ae:e6:45:63:9b:f5:37:41:cd:04:52:68:
         04:05:a8:48:7a:d3:67:74:82:5f:f9:53:79:7a:f8:f3:32:01:
         7f:eb:90:7b:ec:b0:58:b0:da:0e:ea:e1:a3:40:58:f0:bb:6a:
         1c:f7:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:00 2026 by rpki-client