Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File:                     JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier:          JbA2khpgExjqQT5Elul4aZ+6JShHsh9z8AwaBOPaYI8=
Subject key identifier:   01:27:1A:3E:3D:9E:62:5E:5A:B0:D5:D5:E5:DA:17:5E:2E:CB:0C:6F
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number:          021D
Signing time:             Mon 27 Jul 2026 04:22:53 +0000
Manifest this update:     Mon 27 Jul 2026 04:22:53 +0000
Manifest next update:     Mon 03 Aug 2026 04:22:53 +0000
Files and hashes:         1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: 292U/nqQ0DDDP+OFa3DKgFzqnHvvtQwsV1xG8MG2JSc=)
                          2: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: PoM2r//Vc5483ybqcOELC8XLItw50pda51BtS9kgSIk=)
                          3: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: O33e2x2bsJnVnZYzmgRVq6OSe4Uls0Q88mgSA9qXJfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Jul 27 04:22:53 2026 GMT
            Not After : Aug  3 04:22:53 2026 GMT
        Subject: CN=6a66dd1d-0a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:64:71:77:a3:c6:8a:a5:ae:cb:ec:a4:1e:67:
                    17:8d:3f:0a:d5:66:34:d9:78:97:de:d6:cf:2e:94:
                    6d:62:f4:8b:f3:0f:8f:60:dc:c3:53:ce:ef:94:25:
                    70:6a:ee:83:48:bc:6b:9f:e8:80:37:7d:5d:4a:b6:
                    80:d0:98:c9:34:57:0b:1a:d4:6c:69:91:3c:bb:c4:
                    a2:b2:7f:f6:ea:6c:dd:76:57:88:3f:61:34:6e:15:
                    9b:c5:a6:a2:3d:bd:b2:fb:f1:65:b8:67:58:e4:0e:
                    3b:80:bc:6e:4d:b9:4c:f1:3f:c1:fc:a7:11:41:d8:
                    25:15:3d:d1:08:78:60:b0:a7:2d:8d:ec:11:49:19:
                    27:b4:cf:b5:63:c3:5f:07:d0:93:e3:1a:85:a9:63:
                    59:ca:a4:db:1a:b3:6c:9c:0b:69:bc:ad:8a:b9:4e:
                    c8:51:48:a1:24:28:3a:15:d8:56:f7:91:15:9e:af:
                    96:6a:70:1b:99:f7:be:2e:3d:90:ae:88:8a:4f:cc:
                    9d:f8:b4:90:0c:8d:46:6b:87:4c:20:ea:f5:b0:59:
                    fc:26:d0:a3:eb:fa:29:0f:0a:76:6f:e1:8a:bb:75:
                    3d:52:de:bc:d6:d6:99:86:19:6e:1d:93:75:33:ec:
                    e0:73:c8:a6:b0:34:6b:22:ba:12:24:59:c4:3a:b2:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:1A:3E:3D:9E:62:5E:5A:B0:D5:D5:E5:DA:17:5E:2E:CB:0C:6F
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:91:0a:5c:48:a0:5e:2d:3e:c6:d8:54:b0:a0:bc:03:5d:81:
         1f:e6:e9:5a:51:dc:4f:eb:1f:d6:0d:49:45:88:88:74:8d:ff:
         58:90:b4:09:91:df:49:ff:e7:2b:a6:96:e0:dc:d1:20:64:74:
         1d:04:77:1f:72:0a:80:69:a0:79:04:1e:a4:7f:4e:2b:e4:5a:
         3d:82:50:3e:5d:80:ab:36:c7:bf:c8:f0:56:de:90:09:ff:b9:
         3e:73:2a:b3:19:fb:f3:4a:b4:f8:fa:51:ac:07:29:b6:98:fb:
         da:ec:5d:15:79:28:2a:27:35:40:a8:22:5d:27:d0:48:13:35:
         82:ab:9b:c2:5c:65:4d:4c:7c:90:34:ab:c2:fb:3d:be:80:6d:
         15:22:eb:78:21:ca:a0:50:fc:63:54:8c:61:48:fc:78:85:bd:
         4e:4d:2f:20:d5:c9:c4:c1:67:e4:3b:e9:ec:9f:6a:ac:7b:13:
         1f:50:1c:1d:14:99:73:ee:32:78:62:96:d6:41:b4:82:ca:59:
         2b:bc:7a:8f:22:74:b6:ca:49:cf:9c:6d:74:d5:b9:3a:10:3e:
         5c:5b:c7:17:0e:9d:48:61:bb:47:89:98:9c:1f:23:5b:4f:5d:
         9b:6e:4d:79:47:72:c2:da:89:87:ae:89:19:31:dc:d5:74:f1:
         00:f7:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:23 2026 by rpki-client