Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
File:                     jpwcZNAr9AP0GtScU0AD52h3NPw.mft (raw, json)
Hash identifier:          5f+3+s5oJjFyE5tm51o0uoEqMYNn6tt7dqAsR7ctUp8=
Subject key identifier:   47:16:09:D6:85:2F:41:1D:5D:FE:3D:02:C4:8A:7F:EC:76:2A:B3:C8
Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Certificate issuer:       /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
Manifest number:          4E
Signing time:             Mon 27 Jul 2026 10:39:00 +0000
Manifest this update:     Mon 27 Jul 2026 10:38:59 +0000
Manifest next update:     Mon 03 Aug 2026 10:38:59 +0000
Files and hashes:         1: jpwcZNAr9AP0GtScU0AD52h3NPw.crl (hash: wYa4DYhyjTSibGGZkFYh7eZLJJyGVPLgqRe7obiJ/fM=)
                          2: 2804E38A1C9C11F1AD8EA332233D8C67.roa (hash: u2OsXEMfPPTe3z4VuZjxhuv1MslPKuUs4ik5meu7/sw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
        Validity
            Not Before: Jul 27 10:38:59 2026 GMT
            Not After : Aug  3 10:38:59 2026 GMT
        Subject: CN=6a673543-a2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:84:9a:11:60:d1:1c:c8:e4:e2:c9:bb:1c:
                    c8:e2:3a:81:03:51:78:a1:27:8e:33:4d:81:ff:01:
                    c5:3d:44:c8:12:d5:64:3a:b8:c9:cd:eb:78:99:0f:
                    9a:de:60:dc:dc:85:14:bb:d6:aa:de:2d:17:17:65:
                    7b:9c:5e:98:79:34:4a:46:01:ba:77:83:ac:ba:13:
                    66:42:b9:14:e0:c0:79:16:f3:9b:35:9a:bf:da:8c:
                    e1:ed:b4:46:8f:e2:c4:0b:18:05:a6:54:43:3d:24:
                    e9:dc:aa:5a:53:c8:8f:34:f3:c5:2d:5e:0f:a8:43:
                    20:8a:7f:d6:15:d5:41:54:6b:87:af:b3:15:3f:02:
                    c5:b0:d8:02:67:93:9a:85:01:de:55:d7:2f:1c:7b:
                    9f:34:37:0a:87:d9:bc:84:04:0f:b0:49:d3:69:dc:
                    52:2d:c3:7d:04:ce:aa:a5:80:3d:1e:4b:4d:03:aa:
                    7e:4d:87:00:99:ef:8d:2a:28:fe:e6:04:a2:7f:7c:
                    af:24:77:f1:4e:6f:8b:93:1a:48:49:8c:19:3a:ac:
                    67:db:2d:b7:61:56:73:a1:ca:65:28:c7:29:25:5e:
                    64:86:cb:ab:5f:fb:16:1b:71:6a:b0:c1:cc:60:d4:
                    3c:7b:fc:12:87:fe:29:51:d7:b3:03:b0:aa:51:3b:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:09:D6:85:2F:41:1D:5D:FE:3D:02:C4:8A:7F:EC:76:2A:B3:C8
            X509v3 Authority Key Identifier:
                keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:5b:fc:91:32:3c:a4:39:ee:02:6f:1d:37:1e:94:1a:af:
         7d:1f:fc:29:37:eb:9c:9f:bd:78:6f:f1:74:4d:21:3c:95:84:
         5f:f2:55:a3:1e:34:6e:c8:9b:42:58:af:44:c5:08:39:bc:ef:
         33:43:48:c0:f6:ed:94:e1:c9:d1:37:8d:06:2f:86:03:8a:71:
         8f:6c:3f:b8:06:17:92:cc:12:40:e7:82:4c:03:b7:f2:4d:bc:
         3d:bc:97:68:cd:a5:1a:73:73:22:ae:3a:6f:4d:c6:1e:d6:62:
         12:40:0d:2d:4f:05:b2:cb:53:c5:af:ff:92:8f:f7:2a:82:ba:
         f0:34:a5:ed:56:19:7f:97:95:aa:c1:f4:88:e3:91:c9:7f:eb:
         ad:76:7f:07:fb:36:48:e0:b5:6a:7e:df:44:6b:f4:8d:c9:f3:
         4e:52:b7:b6:cb:00:bc:e2:1a:9b:0d:25:9d:d6:92:03:99:ba:
         b3:86:ed:d1:46:98:34:81:19:ef:59:c3:82:10:06:eb:f7:0e:
         00:fc:09:6a:fe:9a:64:e0:0b:68:56:0d:ee:c3:74:de:03:a9:
         05:e9:3a:99:f4:a7:37:cd:bb:6a:3d:f2:f6:cb:ae:7f:19:6c:
         08:21:d9:94:b5:bc:26:a6:4d:fb:f9:d4:81:1d:b1:b4:31:21:
         b0:d2:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:40 2026 by rpki-client