Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
File:                     jprppXQf-n7Wju-jrYsFjQHMJRk.mft (raw, json)
Hash identifier:          GfB95MXhR3xizqCM532scmgaKlMJEb8+lhrOr1OT3HI=
Subject key identifier:   06:F5:AC:FF:35:F3:89:1E:A4:C0:8A:03:BE:ED:51:9C:B4:60:09:12
Authority key identifier: 8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19
Certificate issuer:       /CN=A91B0C2E/serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519
Certificate serial:       06BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
Manifest number:          06B8
Signing time:             Sun 26 Jul 2026 23:08:37 +0000
Manifest this update:     Sun 26 Jul 2026 23:08:36 +0000
Manifest next update:     Sun 02 Aug 2026 23:08:36 +0000
Files and hashes:         1: jprppXQf-n7Wju-jrYsFjQHMJRk.crl (hash: 25l/qvHP8dX1flsP7xbFDjPRJYPeMPnpj8dPZHeoJWc=)
                          2: F9C09A980A4C11F1AEEDD02C083D8C67.roa (hash: O7E0HU6IfCK8wRCd7EyA7GgJwMW/mnrLyl2Qj29TDiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0C2E, serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519
        Validity
            Not Before: Jul 26 23:08:36 2026 GMT
            Not After : Aug  2 23:08:36 2026 GMT
        Subject: CN=6a669374-57d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:56:e1:46:8d:7e:1b:5b:cc:2e:78:d9:17:
                    6b:b4:ed:7f:1a:a4:ed:50:4c:c3:7a:15:f5:47:dc:
                    07:c3:7d:c3:ee:2c:8f:78:0b:00:88:0c:d1:97:e5:
                    7e:47:f2:34:8e:ab:87:1c:ae:14:33:1f:f3:8c:3d:
                    ed:c8:64:57:de:95:da:65:84:10:e9:be:5c:a6:53:
                    19:69:6c:19:eb:26:5b:66:74:9a:ef:d2:57:a6:42:
                    f6:84:a7:94:b2:84:69:d9:ce:7b:7c:89:9f:b4:56:
                    93:23:10:75:8d:7b:4d:20:40:11:44:1d:de:f9:e5:
                    91:cb:e8:9d:ae:b2:5a:70:a2:d5:0d:e6:c0:10:f6:
                    ae:c0:5f:6a:8c:d6:2f:bb:e4:e3:af:5d:6d:1e:42:
                    1a:8f:10:3e:b3:de:e6:94:a9:b6:19:cc:e6:b3:a7:
                    70:9c:ac:e3:cd:c3:82:3c:18:96:85:00:8b:fc:97:
                    12:fc:d9:4d:89:f9:64:c4:9c:9c:99:fc:52:e9:99:
                    fd:28:6e:cc:88:08:1d:8d:71:68:9e:c9:a1:2a:d4:
                    65:2b:fa:3d:bc:a6:99:1b:1b:0b:0e:66:6d:bb:c3:
                    a3:eb:c8:c0:6a:fa:30:7d:0e:0f:80:d9:02:88:d1:
                    ec:d1:71:8f:67:b1:76:6e:ec:02:e2:94:ed:be:35:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:AC:FF:35:F3:89:1E:A4:C0:8A:03:BE:ED:51:9C:B4:60:09:12
            X509v3 Authority Key Identifier:
                keyid:8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:05:e2:dc:9b:72:2a:b3:9f:1d:73:37:be:cd:d0:b4:6f:
         52:69:26:a8:74:18:ff:7d:01:83:84:bd:f9:72:ad:a1:76:84:
         a4:00:33:14:ea:a5:f3:0e:7b:b0:16:af:8d:f6:10:ee:6d:d0:
         c0:37:92:86:18:17:15:ec:8d:f9:e2:5a:46:4e:55:a7:cb:39:
         57:ba:5b:ca:bb:68:93:68:dc:16:53:ad:57:39:84:0d:d6:8e:
         ea:9b:54:07:a4:89:b8:b6:aa:04:86:1d:c3:53:ff:b1:01:d5:
         16:56:b5:f0:f8:d5:39:46:89:9f:2c:30:ef:a2:0e:e4:f0:38:
         7f:0f:8d:6e:f4:81:83:d7:df:4b:a7:64:22:0a:02:8b:59:92:
         02:5d:0f:6a:4b:05:60:21:1c:b2:06:b6:47:eb:46:c0:17:77:
         26:9d:f6:fc:20:6e:30:a4:a4:af:0c:03:ed:a3:42:7a:90:b7:
         a3:73:c4:c3:97:80:0d:29:7a:7a:32:7d:08:f0:ea:20:ef:66:
         e8:d2:c7:68:77:59:df:fe:43:39:05:9d:77:70:aa:cc:e7:3e:
         d1:fc:c0:f4:60:5d:52:65:e4:1a:4c:82:d5:02:b4:4a:0a:7a:
         51:ab:4e:5f:a4:8a:09:de:45:80:a7:b0:d6:79:a8:20:72:2f:
         64:8f:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:48:38 2026 by rpki-client