Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
File:                     JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json)
Hash identifier:          HlyARs1EizBAX/5L+U25xpbhxuKSQaYAF/1Y66T+3e4=
Subject key identifier:   36:98:E0:8D:93:70:D4:66:B7:8C:97:F2:65:A7:E8:93:88:ED:20:DF
Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
Certificate issuer:       /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
Manifest number:          01CB
Signing time:             Wed 17 Jun 2026 03:49:02 +0000
Manifest this update:     Wed 17 Jun 2026 03:49:01 +0000
Manifest next update:     Wed 24 Jun 2026 03:49:01 +0000
Files and hashes:         1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: 5uvI6jehIlyFD/Olk27PYLeKuhCAUEeFpkaWckTVNFg=)
                          2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: 8g6DGym5X06XbbSD/tbM94k9PEbw+g3fC0hmurAHwv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl
                          rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB
        Validity
            Not Before: Jun 17 03:49:01 2026 GMT
            Not After : Jun 24 03:49:01 2026 GMT
        Subject: CN=6a32192d-f9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:43:d0:84:9c:8e:6c:fa:35:d2:cc:f8:b6:
                    b7:47:76:39:72:99:6a:fc:80:d4:a3:0c:17:29:c6:
                    a5:8e:f5:54:7f:49:fa:35:16:21:55:72:9d:11:11:
                    47:95:54:0c:e4:df:10:08:01:42:3f:46:9f:a4:eb:
                    5b:ad:c9:8b:b9:32:e8:bc:9e:34:c8:5c:95:4a:8d:
                    55:29:32:d6:a7:69:78:08:34:a9:0a:b9:bb:3f:9d:
                    ab:06:8b:12:6b:f3:bd:51:8a:a5:6d:7d:bb:d3:e2:
                    88:31:1d:39:d7:49:fe:ab:26:c1:40:d7:98:4f:56:
                    97:01:0f:ed:fc:58:77:ae:98:d3:27:63:b3:22:42:
                    07:c1:1d:12:dd:fe:82:f8:f5:eb:c2:62:11:3a:7e:
                    d4:6f:3d:74:58:76:7d:f0:5e:06:40:b2:63:69:b3:
                    5e:c5:ae:21:11:87:25:4f:37:4b:21:41:90:ed:6a:
                    fa:00:02:79:dd:a4:e1:02:26:58:9e:ae:f7:48:84:
                    5e:86:34:c2:5f:20:02:9a:41:11:27:fb:34:91:30:
                    bb:a8:9a:9c:d1:88:4d:62:7a:4c:5d:87:14:8b:33:
                    77:6c:36:91:cd:f1:87:f5:4d:df:50:50:6d:cf:dc:
                    c1:23:3a:1f:d5:ab:4a:81:a8:5d:82:de:a9:4b:7f:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:98:E0:8D:93:70:D4:66:B7:8C:97:F2:65:A7:E8:93:88:ED:20:DF
            X509v3 Authority Key Identifier:
                keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:be:ea:2b:73:32:97:f8:52:64:0b:41:56:d0:82:67:97:
         8d:b0:e2:de:0a:b7:31:ff:7c:ec:30:43:ef:21:c9:bb:41:63:
         72:61:e9:49:aa:d6:96:de:8f:df:56:79:c5:23:f3:a3:53:0c:
         33:89:b1:ae:0b:25:4d:85:5f:1a:57:05:cf:63:a5:21:e4:d7:
         c5:f3:b9:76:39:b6:74:27:e4:75:38:a8:82:4f:dc:99:b2:e5:
         00:1b:7c:9c:9e:fd:e9:9c:d2:d4:c5:87:89:fc:fb:23:f5:45:
         f8:07:ba:31:57:56:c6:4a:7e:80:ca:ec:19:c1:98:7a:5c:e3:
         98:51:49:6f:ba:42:8c:70:25:1a:8d:ed:60:28:2d:9b:89:f8:
         57:e5:d2:e8:48:d4:9d:9c:18:4a:0b:41:31:83:6c:d6:b0:64:
         67:b8:2e:f1:ec:3f:55:f8:49:ee:3c:62:e1:18:0b:a7:bb:0b:
         ed:16:e8:60:72:0d:09:67:76:87:32:82:8c:21:4e:8f:41:fc:
         30:e7:b2:9e:01:f3:95:2e:85:03:fd:9c:6f:bf:da:d1:4c:2d:
         1f:d7:34:1f:38:30:7d:1d:e6:b4:d9:24:27:50:a1:c3:15:e8:
         e4:6f:2b:70:d9:9b:7a:b1:e2:3a:4a:67:11:1a:cf:a3:25:48:
         1c:a3:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:01:05 2026 by rpki-client