Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
File:                     jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json)
Hash identifier:          VN9Yv6443yPw9lvb4/dON14n3h4y1FQGydiDXAQexy0=
Subject key identifier:   B7:C8:4E:39:5B:B3:F2:74:87:AE:9B:8F:71:BA:19:E7:46:DA:C7:C5
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Certificate issuer:       /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial:       0338
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
Manifest number:          0319
Signing time:             Sat 13 Jun 2026 01:13:51 +0000
Manifest this update:     Sat 13 Jun 2026 01:13:50 +0000
Manifest next update:     Sat 20 Jun 2026 01:13:50 +0000
Files and hashes:         1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: 1gVsXPaULvt1EJEBm16CHd/rTmEJ+r/s67b+eb5id8w=)
                          2: 984E33E4E01F11F0913A4E89646F56BC.roa (hash: OcYvm4nslT9HEXifrXrZRqsFAS3xrQM7cYF+95ESEVE=)
                          3: E1870478616C11F0A254E10BC4F9AE02.roa (hash: thzu/t+qYSRYUbFk3e1FVK1vtAgWZIhclmN6XWz4ZNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
                          rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
        Validity
            Not Before: Jun 13 01:13:50 2026 GMT
            Not After : Jun 20 01:13:50 2026 GMT
        Subject: CN=6a2caecf-b5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:b8:92:83:d4:0c:69:53:56:35:c9:23:ed:
                    16:22:5f:b3:7a:3e:ea:ff:bd:c1:45:1c:f5:63:87:
                    0d:22:e2:b3:b8:d9:bd:a0:67:c2:e5:e9:46:3f:d2:
                    f6:8c:3c:47:bd:34:1f:5e:a1:1a:30:9a:13:7e:60:
                    67:f8:0c:4c:97:d5:2f:16:5a:7e:da:7a:4c:c4:fd:
                    4f:c9:ab:63:23:fc:1a:77:61:2a:3c:8f:16:34:75:
                    ef:56:d5:21:87:4b:d3:35:5a:4d:93:fe:e6:fc:c9:
                    d0:33:fb:4a:57:bb:56:85:15:97:b8:c7:53:5f:6a:
                    4b:5b:31:b1:c0:57:94:9c:54:a4:a5:1a:ef:cb:5b:
                    42:b8:65:a0:cf:d4:b1:b7:98:cc:a0:15:10:27:a3:
                    72:06:10:90:9d:74:e2:70:36:83:f3:f8:31:47:f7:
                    b2:4c:23:3e:0f:bf:c0:54:3f:71:24:af:1e:70:62:
                    70:c3:22:63:4e:00:62:46:2c:19:49:c6:14:f4:1c:
                    b9:e4:27:c8:3d:8f:44:0b:8c:6f:a0:e2:f9:4d:46:
                    09:3a:71:e7:88:a7:ff:15:25:df:a6:55:44:1e:d0:
                    e6:94:72:87:3c:da:59:49:5e:d0:6f:5f:2b:71:30:
                    28:5f:31:8e:1e:84:85:eb:4b:83:90:66:e6:45:f5:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:4E:39:5B:B3:F2:74:87:AE:9B:8F:71:BA:19:E7:46:DA:C7:C5
            X509v3 Authority Key Identifier:
                keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8b:1c:10:5f:48:e7:a3:3c:a5:c7:9a:6f:a0:f9:f3:e5:d6:
         90:3e:cc:e1:d3:ac:b2:89:88:02:cd:2b:30:95:61:00:93:14:
         74:b0:59:ac:44:9d:67:f1:ce:ee:a3:9f:ba:79:24:2c:5d:ff:
         0c:6f:84:7f:f7:ee:90:8f:fd:83:35:eb:0f:4a:8d:a5:c6:e9:
         a6:05:e2:64:a9:2a:9b:66:2f:91:e2:8d:a2:0e:1a:fe:83:d9:
         58:4a:05:02:6a:a2:ef:e5:4c:78:c5:55:06:a6:2b:b8:f5:bb:
         6b:7f:75:c1:db:ff:27:94:49:b3:88:e8:4f:22:2d:4a:5e:a1:
         f0:dc:4a:8a:3a:aa:46:ac:02:25:31:0c:0a:8e:98:a2:dc:52:
         ea:9a:19:93:d5:1a:9e:f6:d6:64:13:e9:36:42:a3:04:d6:92:
         81:57:5e:cd:38:14:11:4e:53:1d:56:f8:ed:56:cc:e5:08:00:
         8a:82:f5:e4:4c:bc:f2:22:86:34:01:62:f8:ea:68:85:aa:4c:
         ad:ef:ec:a7:d8:b6:aa:91:ab:71:6b:bb:3d:bf:ca:55:1e:3d:
         cc:60:be:f4:9b:f9:84:91:38:40:07:73:a8:96:43:97:e6:8a:
         e5:e3:0a:09:c2:12:27:85:cb:42:d8:79:9c:88:13:3d:73:28:
         01:35:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:03 2026 by rpki-client