Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File:                     JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier:          6W2/dngJ51zprnj74OC2PVAmXV3771Sj/C7gUx+P0mQ=
Subject key identifier:   55:E4:DE:98:60:FA:C3:B5:EC:87:52:F8:40:A4:92:5F:0D:AC:A1:AB
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer:       /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial:       1E10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number:          1DFF
Signing time:             Tue 28 Jul 2026 16:10:50 +0000
Manifest this update:     Tue 28 Jul 2026 16:10:50 +0000
Manifest next update:     Tue 04 Aug 2026 16:10:50 +0000
Files and hashes:         1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: XFtQyeOMi+P5TCn9bHKq9nZu/YizBZy+LIzemNP1cjA=)
                          2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
                          rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7696 (0x1e10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
        Validity
            Not Before: Jul 28 16:10:50 2026 GMT
            Not After : Aug  4 16:10:50 2026 GMT
        Subject: CN=6a68d48a-a588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:f1:48:48:77:8f:47:55:fb:9f:01:c2:9c:
                    ea:e0:76:7e:3d:14:eb:0e:f3:95:c8:fb:40:5e:29:
                    15:23:65:40:41:e6:40:93:18:86:7a:e1:9b:d0:6a:
                    5b:a5:6f:43:ad:1e:ee:a4:80:19:c6:5a:b3:12:5a:
                    8b:03:91:4c:83:ac:f8:4c:98:a8:26:42:76:3b:7b:
                    78:0e:92:68:e0:2b:31:1f:6b:12:ce:8f:ff:a4:a6:
                    d6:d4:f0:e7:69:e5:33:90:93:7c:c9:cd:e1:50:ab:
                    0c:38:bd:7d:cf:19:d1:4a:2f:ac:8f:a8:18:cb:0a:
                    65:8d:da:0b:44:a2:e9:21:dc:42:8b:f3:8b:65:77:
                    e3:85:9b:ce:37:f0:8b:51:40:6f:10:3d:cd:13:78:
                    71:68:b7:a6:7c:b4:2d:8c:74:1b:5f:93:bb:b2:22:
                    13:c7:bd:63:68:f8:6e:fc:ed:31:f0:ac:1a:c2:23:
                    4c:86:cc:28:3d:4c:60:dd:1b:bd:56:46:db:46:32:
                    ce:a3:fa:32:21:74:8b:da:c4:f4:10:13:1a:6b:74:
                    26:5e:6b:1a:9c:23:3f:4e:c5:92:40:24:b3:df:fe:
                    1c:e8:13:a6:60:43:a9:58:e8:c3:68:68:ee:53:ee:
                    ae:2c:8d:9f:5a:e5:11:6f:7c:c0:ce:03:09:59:0a:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:DE:98:60:FA:C3:B5:EC:87:52:F8:40:A4:92:5F:0D:AC:A1:AB
            X509v3 Authority Key Identifier:
                keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:58:a9:66:cd:bb:f2:09:61:78:7e:f0:01:1e:83:85:ff:0a:
         59:86:79:9a:d8:32:ad:18:3b:5b:00:22:9f:5c:42:0e:81:36:
         1e:83:65:68:80:e1:9f:55:6b:9e:6e:c2:f1:2b:5f:40:e1:7b:
         4b:3c:28:66:56:89:31:28:6e:3e:18:12:f7:28:a2:f6:07:f3:
         b5:11:f5:82:6d:e1:7a:71:10:5b:dc:c8:1f:0c:7d:67:60:a8:
         63:89:49:21:3b:9b:d3:f6:96:ae:48:11:f7:dc:6c:4c:4d:a8:
         67:72:bd:cd:d8:07:2d:94:88:63:85:a0:0c:62:3c:90:6e:56:
         40:0c:6b:c6:ca:5a:c7:a5:d6:9a:23:5f:ad:ce:6f:58:7a:85:
         fb:93:9e:b9:b2:db:70:fa:69:dc:28:10:db:65:69:7a:d3:c6:
         45:87:f2:d9:c9:10:9d:11:73:59:48:60:cb:57:a3:05:82:22:
         c4:d7:3a:93:60:be:08:fc:55:89:71:e6:73:84:25:58:23:8c:
         55:e7:b8:8c:b1:d4:27:73:8e:42:0f:36:11:ab:b0:53:f8:df:
         41:7d:2c:3f:3c:15:a3:fb:1a:76:ed:0c:91:ea:c0:cc:00:97:
         23:c6:af:84:1a:da:42:b0:c0:b8:54:61:b9:cc:95:cf:e0:b6:
         5f:70:15:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:43:29 2026 by rpki-client