Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
File:                     juyxGYDtEVNPQZL03gjRss25Fsg.mft (raw, json)
Hash identifier:          UMfTu2+C3g9Po1YDb5adX3NqiCK9fHBiizBh4VetTW4=
Subject key identifier:   F7:AA:2A:E6:00:8E:A7:ED:3A:9A:A2:68:23:DA:85:75:2E:E0:7B:A2
Authority key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8
Certificate issuer:       /CN=A9191DE0/serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
Manifest number:          6E
Signing time:             Tue 28 Jul 2026 19:58:53 +0000
Manifest this update:     Tue 28 Jul 2026 19:58:52 +0000
Manifest next update:     Tue 04 Aug 2026 19:58:52 +0000
Files and hashes:         1: juyxGYDtEVNPQZL03gjRss25Fsg.crl (hash: ll/srEhxspWOhbt0Vas84X3vILgb0ca48zdp7BqSs+E=)
                          2: A4C79C9AEC4611F0B45F05E8456F56BC.roa (hash: EVMXznE3JflMcjw9lwizAdWj6kleJyA1NEdHm23XCPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
        Validity
            Not Before: Jul 28 19:58:52 2026 GMT
            Not After : Aug  4 19:58:52 2026 GMT
        Subject: CN=6a6909fd-d0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:4d:63:9f:00:44:20:b4:bc:dc:59:e5:64:
                    e7:16:76:0e:fb:6b:ca:ef:50:dd:80:17:79:e7:0f:
                    de:b6:fe:97:31:7b:11:66:ff:7c:35:0c:a1:80:5e:
                    72:f3:b1:3b:8a:5d:ea:57:29:b0:4a:eb:78:d6:9e:
                    7d:99:3c:81:b8:51:12:0c:17:aa:32:39:01:60:5e:
                    f9:5a:56:d6:ab:34:27:03:55:29:12:53:82:07:02:
                    72:de:78:46:70:7a:f5:3d:44:bd:bd:ad:26:a6:ab:
                    b5:88:a2:79:27:0b:ea:25:2a:93:ca:da:78:6e:e2:
                    15:9b:eb:f7:3b:5e:ff:46:1e:1c:d2:77:10:40:d5:
                    74:14:60:8e:8b:fc:8a:3b:27:e2:2f:23:30:f3:69:
                    84:26:a8:a3:0b:bc:e6:42:26:7c:bd:4c:8c:75:e2:
                    54:8b:ce:ea:38:b6:04:ac:e4:74:7e:4e:eb:bf:51:
                    69:c2:a0:0d:41:ff:00:b3:4c:e1:ab:97:07:79:fa:
                    17:77:a8:fa:7d:55:19:96:a1:c3:8c:36:a6:d4:5b:
                    b1:d3:b1:72:29:3b:1f:84:06:2c:c7:7c:77:c0:9a:
                    5e:0a:3b:9d:33:57:3e:68:34:5f:3d:a5:cd:b3:80:
                    3c:ed:0b:ea:fe:26:93:88:7e:ca:2a:a7:c9:be:66:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:2A:E6:00:8E:A7:ED:3A:9A:A2:68:23:DA:85:75:2E:E0:7B:A2
            X509v3 Authority Key Identifier:
                keyid:8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:7f:19:dd:fd:0b:c7:ca:28:18:60:99:91:19:f3:95:e8:
         d7:e7:0b:da:f5:a8:96:a3:7f:38:53:fc:1b:d8:73:08:87:1f:
         8e:7b:89:0d:8c:be:38:3d:ba:ca:3e:80:a7:9f:79:0b:5e:53:
         e6:de:36:14:67:b8:b8:83:43:04:82:09:0b:c3:e7:45:47:81:
         c4:03:54:f3:20:d9:ac:40:c4:3a:ea:9a:5c:48:ec:0e:9b:e6:
         02:02:7b:12:65:28:80:3d:34:19:f7:d8:81:75:1b:03:08:f5:
         12:e1:d1:f0:91:54:13:6e:0a:ce:49:9b:1b:db:08:f1:31:49:
         94:3e:90:71:93:4f:08:ef:29:10:58:87:18:6d:c4:2b:97:73:
         22:a7:aa:13:78:d1:41:f0:5b:87:c6:f6:09:ec:f2:1e:a1:d7:
         20:b2:54:78:30:01:05:44:be:3a:94:71:c9:1c:e0:ad:b5:d3:
         15:1a:99:8c:7a:fb:0e:b1:07:c4:6d:17:5e:e0:31:88:da:60:
         21:93:83:4e:94:64:92:f6:f7:5c:f3:63:0b:29:cc:0f:e7:00:
         3d:f3:34:d6:27:09:39:94:03:11:80:60:93:bf:82:1f:1a:72:
         7a:53:f1:35:e9:82:d5:d6:71:57:d7:d0:1c:51:3b:86:f4:2b:
         f7:c2:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:20 2026 by rpki-client