Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
File:                     Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json)
Hash identifier:          2W5oBFefbjT1IKdzvRVhzsRXcafgqappTl3zhrAC9LM=
Subject key identifier:   89:CB:33:C8:81:B1:1F:5F:E9:A9:48:D3:E5:FF:BC:6B:EC:32:01:6F
Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
Certificate issuer:       /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Certificate serial:       0675
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
Manifest number:          2086
Signing time:             Tue 28 Jul 2026 16:26:22 +0000
Manifest this update:     Tue 28 Jul 2026 16:26:21 +0000
Manifest next update:     Tue 04 Aug 2026 16:26:21 +0000
Files and hashes:         1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: uPgmnk+/82CCLQcUnth5yGvaXBYJhmcehLByeZCqYtM=)
                          2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: ng5bgbFugCpJCI2PYFWeSfminEhUjB176PVU+n+Eszk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
                          rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
        Validity
            Not Before: Jul 28 16:26:21 2026 GMT
            Not After : Aug  4 16:26:21 2026 GMT
        Subject: CN=6a68d82e-9efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:c9:df:45:4b:ee:5f:23:de:a3:a0:86:1f:
                    81:48:5d:2f:11:65:5b:35:79:fc:9d:b2:b7:d9:49:
                    3c:6b:70:77:29:bf:27:50:45:a1:f8:5a:47:ae:4a:
                    2a:16:ae:48:02:fd:60:bf:61:fc:a0:c4:75:17:1e:
                    5b:1b:8e:4d:e0:4f:b2:a6:78:cd:84:69:4c:0f:d4:
                    dd:a2:c3:da:64:79:59:db:23:4f:58:4c:b5:93:c9:
                    1a:b5:d0:ca:e8:02:39:42:97:4a:ad:c3:96:ef:30:
                    9c:4e:82:1c:80:9a:5a:a0:c5:a8:50:9a:c2:11:7f:
                    3b:12:ab:c7:23:a9:3a:c1:0f:07:78:84:61:9c:c0:
                    a5:f7:98:3b:49:cb:b6:2d:cb:7a:89:03:75:ff:38:
                    73:84:5a:9a:e2:58:85:31:34:8a:a8:26:63:4f:17:
                    b6:e1:cb:41:e7:9c:a6:31:13:30:83:a5:48:99:a9:
                    d8:52:60:32:1b:1e:d9:63:6d:09:13:c8:59:17:10:
                    a7:ac:18:5c:66:10:6a:72:ef:55:9b:72:2a:bd:28:
                    15:21:d5:da:47:d3:46:00:f5:9c:2a:d7:62:6a:10:
                    63:fb:59:86:80:a4:95:50:a5:42:eb:69:00:1f:d8:
                    98:bb:ad:14:08:10:d7:32:0c:b8:1b:eb:15:b1:1e:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CB:33:C8:81:B1:1F:5F:E9:A9:48:D3:E5:FF:BC:6B:EC:32:01:6F
            X509v3 Authority Key Identifier:
                keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cc:1c:5e:ab:84:b3:a7:3c:63:45:3a:29:47:36:37:60:bc:
         1f:0d:c2:94:88:bb:5b:de:51:63:30:e4:50:1e:c9:7c:6c:8a:
         66:5e:66:97:be:20:13:e3:90:73:75:19:f2:c1:01:05:5b:56:
         83:1b:6d:6a:05:7b:50:6c:c4:98:d6:a8:4a:f9:fc:bf:70:d5:
         ba:73:3b:c4:d1:ca:7b:16:9a:c5:ee:d1:7e:02:23:3d:22:a2:
         d0:de:62:27:1b:13:bb:5b:0b:3a:a0:4c:78:aa:d8:9e:01:39:
         23:66:e9:a5:85:fa:5f:c7:35:7c:10:86:8f:0b:87:ae:20:cd:
         44:a0:dc:28:63:b7:3a:15:39:14:cf:46:8a:c2:6d:2f:23:37:
         85:1c:ee:93:f8:e1:e9:d6:20:28:e9:b6:c2:0f:d6:2d:30:21:
         f2:04:56:de:06:71:92:e0:43:3e:ea:d1:a2:cd:85:e7:4c:f4:
         aa:be:9d:4e:a3:45:60:94:e7:a9:6e:33:5c:81:57:fe:0b:72:
         91:77:58:d7:b5:53:68:0d:67:9d:22:e5:0e:55:b1:a9:87:8b:
         0d:66:b5:95:b6:ca:98:56:ee:b2:ac:27:78:25:b5:13:92:58:
         ec:a7:96:b8:e2:c1:7f:64:5f:43:95:b4:31:bd:25:9a:f6:61:
         d6:5a:cc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:01 2026 by rpki-client