Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
File:                     JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json)
Hash identifier:          OTTK8agynaZL7tRejerUTmrLz32QoV2cnGF27VnvAqA=
Subject key identifier:   98:C0:F8:BB:3D:31:69:F8:87:86:B0:86:63:32:D2:46:A9:BE:00:53
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Certificate issuer:       /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
Manifest number:          0253
Signing time:             Mon 27 Jul 2026 03:46:55 +0000
Manifest this update:     Mon 27 Jul 2026 03:46:54 +0000
Manifest next update:     Mon 03 Aug 2026 03:46:54 +0000
Files and hashes:         1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: D89J3zPlB496lxKEitAKmJcMJvbOqGsa1vbcxyrgNus=)
                          2: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: oB5JBkNKyPLzP2gSGsWtUBpF7gy+qEDEj6Z9Is4zAyU=)
                          3: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: mVpGi+39/Ahcjv+ekq0PpEG9jvYwKXVC4QVppE2Htr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
                          rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
        Validity
            Not Before: Jul 27 03:46:54 2026 GMT
            Not After : Aug  3 03:46:54 2026 GMT
        Subject: CN=6a66d4ae-fb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:a9:b4:d7:13:98:fe:19:84:27:f3:6c:92:
                    0f:65:3a:c9:a8:f0:28:33:14:8f:ac:71:50:04:29:
                    fd:80:86:5a:95:f8:d6:99:cf:66:06:f3:a5:1e:1c:
                    0e:bc:44:2c:02:3a:0c:bd:5b:86:3a:84:f4:ae:71:
                    e0:78:43:5f:ca:7f:eb:19:c1:d2:70:34:ac:0e:75:
                    57:16:08:40:80:2d:0b:42:3b:f8:aa:23:e8:3d:7a:
                    dc:e5:80:84:da:13:99:47:1c:25:c7:ce:bb:54:e7:
                    9a:54:d3:2d:4c:26:bf:fd:b9:f3:13:99:3f:a0:46:
                    c6:ad:5a:10:57:61:e4:c1:38:8d:94:27:50:fc:3f:
                    80:1d:e7:77:f3:c6:3c:f6:5f:ec:59:8b:32:b9:7e:
                    6e:2a:b4:16:58:e4:a2:ab:f0:58:b8:6d:a3:1f:c1:
                    0b:27:af:91:41:7a:ff:d3:95:a4:4d:ef:06:a5:cd:
                    ed:67:19:1c:1f:44:bd:ff:38:a3:f0:ba:3f:db:7b:
                    b2:25:8c:31:55:c4:c7:bd:d3:24:0f:fe:76:38:d5:
                    43:b2:c2:88:b2:4a:b2:f9:cf:b4:6a:c8:a5:d4:f4:
                    cb:21:de:cc:af:f3:d8:c1:36:5a:84:a3:5f:66:f1:
                    f9:f1:b1:a7:94:74:5a:c4:36:e3:63:47:0d:af:12:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C0:F8:BB:3D:31:69:F8:87:86:B0:86:63:32:D2:46:A9:BE:00:53
            X509v3 Authority Key Identifier:
                keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:bd:ad:cc:ab:82:66:4e:ea:7e:b1:5c:b9:45:37:52:de:
         e4:8f:88:ac:70:6f:6b:78:b9:7a:33:fb:77:20:f9:48:20:e7:
         ad:f6:f6:a8:76:bc:d4:cd:69:e3:95:95:e5:1c:e1:4a:6d:0d:
         df:17:b6:8e:ee:34:00:80:58:5c:ea:0f:73:fe:43:79:2c:91:
         1f:b8:89:4e:5b:f2:f2:f7:d7:44:46:4f:bf:87:14:c2:67:8a:
         22:84:90:9f:1a:94:de:3a:63:11:a3:53:18:59:9c:24:8c:ae:
         14:02:71:23:4f:b4:f6:96:d9:24:3c:c6:37:71:bd:01:22:dd:
         79:63:a3:ec:82:9e:0c:b6:a9:8e:ec:b1:3f:9b:f9:94:15:22:
         38:4c:b6:1e:d4:d6:b2:45:16:55:12:25:3d:a5:33:0c:53:8c:
         62:23:e9:5e:49:3d:e1:6b:5a:f6:84:c1:7a:b0:b3:76:fd:54:
         dd:52:42:5f:f5:c1:44:ac:9d:d6:bc:c9:5a:20:65:22:5a:42:
         cb:b1:1b:fc:38:01:d6:92:a7:e3:a6:2f:ef:1d:66:ef:00:54:
         40:de:32:62:57:e8:85:0f:81:37:0f:56:5a:86:40:32:dd:bd:
         57:36:2d:ca:d9:25:62:84:01:0c:24:3d:dd:f0:18:82:47:86:
         7b:e8:5d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:26 2026 by rpki-client