Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
File:                     CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json)
Hash identifier:          tu0Ih7BojScXtnwhGXr0I0XVaflOfiGWqUyoOz/3d78=
Subject key identifier:   D4:A8:46:4C:2D:59:CB:E9:6B:CE:4A:96:1F:69:D1:DE:1C:E8:61:67
Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
Certificate issuer:       /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
Manifest number:          02CB
Signing time:             Mon 27 Jul 2026 02:29:40 +0000
Manifest this update:     Mon 27 Jul 2026 02:29:39 +0000
Manifest next update:     Mon 03 Aug 2026 02:29:39 +0000
Files and hashes:         1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: lj/iYJbMSETI470m3/2/A4+9kKlBYKZcCsXOm6ifvwk=)
                          2: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: 4oINYtmMIJAI0qB/zgs7eJ/PHXiHCKVBi4RA5fWevZs=)
                          3: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: ZQQmEapOEB8hbnYD2748C5/tVDyFBuYad9v0XjI6Mok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
        Validity
            Not Before: Jul 27 02:29:39 2026 GMT
            Not After : Aug  3 02:29:39 2026 GMT
        Subject: CN=6a66c294-a73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:af:15:26:c0:d5:ec:55:1c:45:1e:68:12:
                    8e:3c:c3:fc:81:48:9f:d4:03:4b:48:37:bc:99:d0:
                    70:69:a7:e8:9c:d4:8e:73:4c:02:d7:8c:d5:e8:aa:
                    f2:3f:c5:46:d8:79:dc:f7:78:78:38:28:e1:83:44:
                    aa:8d:8f:55:d4:97:ed:df:f9:0d:b2:2c:96:e3:82:
                    4b:6d:5c:f4:41:c4:e9:90:b1:a1:66:0e:83:17:ec:
                    4f:b1:e8:be:df:b3:55:70:1c:f1:b9:4d:1b:c9:04:
                    07:b7:14:8c:3d:0b:49:c0:3e:fc:c7:c8:28:c6:7b:
                    36:8e:5f:af:fb:4d:aa:45:2e:fd:95:c4:a2:71:66:
                    d8:0a:2e:7f:9f:26:eb:ff:cb:3c:de:b9:e4:12:25:
                    ca:51:ee:db:e0:d0:84:87:43:73:c7:fb:19:3a:4c:
                    2b:b7:e4:38:e2:c5:51:b6:27:15:c0:a4:b2:62:2f:
                    86:9f:e3:97:c4:b3:ab:87:04:14:a5:e7:d5:00:dc:
                    3e:47:e2:e9:da:b3:84:1a:5f:1a:39:88:82:a3:2c:
                    de:a9:f7:89:66:c2:08:41:bb:cc:e6:31:e7:bc:44:
                    53:fa:85:0c:55:d4:38:57:6b:71:6c:06:f5:66:83:
                    a7:8d:d6:04:aa:0a:f6:27:4b:73:3b:f9:05:9c:95:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:46:4C:2D:59:CB:E9:6B:CE:4A:96:1F:69:D1:DE:1C:E8:61:67
            X509v3 Authority Key Identifier:
                keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:5a:33:89:a7:1a:ef:b4:84:7c:1f:bf:73:44:d0:93:68:
         2f:cb:b8:d8:ca:9d:1f:db:d1:10:34:6f:4c:28:2a:61:42:a2:
         95:26:28:df:7b:91:c7:7a:e4:5b:cb:b0:5a:da:4a:56:52:51:
         27:c1:a7:a9:e3:c7:65:12:e7:aa:65:8d:52:2c:f5:31:c9:64:
         6d:6c:08:e7:4f:6e:a1:84:68:1c:4d:70:b8:15:26:57:64:48:
         b5:86:1c:53:0a:fc:24:96:a4:2a:f1:74:6f:25:e4:c3:ac:d0:
         08:87:c6:8d:77:42:cf:c9:4f:a6:28:79:61:3e:15:0e:4d:bb:
         3b:37:d4:14:e7:38:36:bd:8b:55:e8:8c:95:cd:d0:fc:9e:5a:
         be:8c:48:f3:c2:94:d1:fd:aa:ec:7d:cb:74:66:a5:73:c3:e8:
         8c:22:7b:ee:97:a5:7f:1d:67:fe:69:d4:19:e4:96:82:8e:f5:
         87:3a:74:60:49:d2:a3:9d:76:2d:d1:bc:20:04:cb:6f:dd:61:
         8e:34:f9:1a:9c:21:c5:b0:2f:01:8e:d3:fb:96:37:2c:79:21:
         68:11:5f:89:16:db:41:15:d8:17:04:6c:9c:94:69:43:e4:30:
         63:4e:6a:1c:d0:14:6a:4d:85:7d:a6:33:c5:e0:8e:10:59:c2:
         6e:e4:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:10 2026 by rpki-client