Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
File:                     jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json)
Hash identifier:          fz5M/8UlpeTDfWJZyCWqRQfvwFy4V8fbrrRUhp+nTq0=
Subject key identifier:   78:43:64:43:44:89:11:F6:79:09:D4:C5:95:42:CB:2A:CF:80:F3:2E
Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76
Certificate issuer:       /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676
Certificate serial:       12DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
Manifest number:          12CF
Signing time:             Tue 28 Jul 2026 17:08:41 +0000
Manifest this update:     Tue 28 Jul 2026 17:08:40 +0000
Manifest next update:     Tue 04 Aug 2026 17:08:40 +0000
Files and hashes:         1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: icweyyWGGbtTbhd0CO6lKAoox5VQbze+ct+LXwzYjRQ=)
                          2: A295F860E71011E8899C3917C4F9AE02.roa (hash: 0mtH92tidj+S9C8pEF1gtwl/Ps40TYHu37CLwgbwKxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl
                          rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4827 (0x12db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676
        Validity
            Not Before: Jul 28 17:08:40 2026 GMT
            Not After : Aug  4 17:08:40 2026 GMT
        Subject: CN=6a68e218-cadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:5e:6d:2b:ce:17:fe:6b:e1:5e:3d:8d:91:
                    ea:35:7f:72:d2:59:96:d8:bd:fe:94:71:f1:5c:12:
                    02:44:74:ed:1f:86:ea:61:d6:fb:6c:0c:13:ae:92:
                    13:88:0e:4e:ef:a3:60:a1:40:42:72:24:ec:5a:fd:
                    27:b9:40:bf:88:be:22:c1:22:31:91:71:74:be:d2:
                    85:30:79:2a:f7:af:88:07:fb:da:be:e8:f1:44:68:
                    99:fd:be:1b:d5:db:ec:ec:78:88:34:40:97:39:e8:
                    51:14:9a:23:48:ce:b2:b6:12:16:db:80:27:4f:ad:
                    37:05:d1:29:a1:4e:fc:df:50:42:6f:9f:1b:56:5c:
                    66:82:d8:9b:85:76:10:59:df:ab:18:5d:0f:ea:31:
                    7b:d8:79:b9:5d:a9:1b:d7:37:44:00:53:83:1f:ae:
                    56:74:97:f0:c8:ea:d1:82:12:79:ee:bf:0e:be:d3:
                    72:c7:44:70:63:91:8d:4b:a4:cd:a3:76:7d:e8:f4:
                    ce:e2:30:4d:5f:81:f7:e9:71:ee:d3:c0:50:1e:93:
                    2e:33:50:22:f1:c8:a5:08:54:c0:38:fb:60:92:1b:
                    1e:1d:86:bb:af:5f:24:34:fa:9c:5a:49:f5:81:c9:
                    21:8c:8d:4e:3a:e5:08:b9:6e:a2:f3:65:57:bd:ad:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:43:64:43:44:89:11:F6:79:09:D4:C5:95:42:CB:2A:CF:80:F3:2E
            X509v3 Authority Key Identifier:
                keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:4a:37:2a:91:36:5d:3b:e3:1c:d2:13:6f:ba:4b:ca:83:
         70:31:c4:86:91:a8:cd:de:48:99:f8:64:d5:ec:89:2f:32:ea:
         65:ce:e6:46:7a:ba:ac:81:a7:f2:8e:82:07:4d:f7:55:4e:7d:
         49:3e:45:fe:1d:17:41:2a:97:01:2e:a4:77:f1:98:64:9c:7e:
         bc:7a:ab:1d:2a:96:25:a1:47:d4:5e:92:f8:dc:c9:6e:39:de:
         e3:ec:68:0a:d9:bb:75:3f:b5:c4:3f:86:0b:c1:28:8d:79:ad:
         84:00:99:79:6a:b7:46:5b:de:1d:c0:b7:cf:ae:c1:af:55:6f:
         61:b2:1d:c1:19:12:25:72:d2:b0:86:3e:d1:bd:90:f5:4b:e8:
         80:b2:7a:c8:2c:bd:74:ee:e2:e2:05:bc:af:b4:96:f8:28:7f:
         27:45:69:d1:bf:1a:2f:5c:9a:01:38:00:a5:da:a6:90:48:b5:
         a0:ba:0f:08:2e:ec:5b:ee:b5:8e:1e:c1:d7:e3:b8:31:f2:56:
         08:02:b9:a6:52:91:55:ef:46:ca:c8:d5:13:e7:20:50:6a:a3:
         6d:5a:1a:1c:7f:dc:de:4e:7a:f0:e3:67:f3:66:2e:df:a7:c8:
         40:20:0a:96:67:3f:c0:70:3a:5a:dd:85:36:17:42:ad:3b:58:
         9b:b3:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:10:42 2026 by rpki-client