Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
File:                     JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json)
Hash identifier:          nLn6iNA7Y6wmkxaKlTlpUAvJZxsQyKdSifdA6QByOdI=
Subject key identifier:   D4:2A:A0:2F:A7:5E:BD:D0:16:1E:83:8C:E8:F0:BB:6A:CD:4E:40:C7
Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB
Certificate issuer:       /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB
Certificate serial:       0E45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
Manifest number:          0E3B
Signing time:             Tue 28 Jul 2026 17:54:45 +0000
Manifest this update:     Tue 28 Jul 2026 17:54:45 +0000
Manifest next update:     Tue 04 Aug 2026 17:54:45 +0000
Files and hashes:         1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: zOC9PJItZZ0MpHmzz6OFUlVuQOxTTf/BhrlYMkCA9TM=)
                          2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: N1MxiNWDcRhs9V3+oDElXSu77YC7WZEZPRwCQu2D/KU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl
                          rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3653 (0xe45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB
        Validity
            Not Before: Jul 28 17:54:45 2026 GMT
            Not After : Aug  4 17:54:45 2026 GMT
        Subject: CN=6a68ece5-0f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:9a:a3:02:f7:60:83:78:81:14:d3:ff:f9:
                    3e:4e:81:20:4d:03:00:ed:17:f1:9c:82:11:1f:3f:
                    bb:9c:a7:f9:b6:3b:43:71:34:36:57:5c:d7:84:26:
                    a8:1d:da:71:0b:a8:15:70:88:a8:92:80:e2:9c:35:
                    7a:15:6c:17:14:3f:c9:43:1c:65:a9:67:6f:88:50:
                    10:ca:64:af:5c:20:67:bf:af:3c:66:41:bd:7b:48:
                    28:c6:5c:8c:d3:68:92:9a:08:3b:b2:76:e1:76:e3:
                    ee:11:c0:c9:d1:1c:a1:1a:60:93:6b:37:ac:6c:55:
                    7e:54:08:c9:b4:4c:4d:18:26:92:8e:d8:ec:f5:f4:
                    99:ca:d5:92:fa:67:67:0a:bd:60:74:7a:08:ce:08:
                    3b:b8:f1:b0:57:3e:eb:45:bf:27:a8:0b:c7:15:51:
                    30:42:bf:70:34:b4:69:78:cd:98:d6:e7:8c:8a:78:
                    d0:08:c5:ab:b3:e8:1e:e4:ab:5d:33:b0:ef:73:f5:
                    21:c7:3c:22:4f:0e:fe:2b:9b:bb:37:43:89:36:15:
                    bb:b0:2f:17:b3:a4:ae:69:c1:36:08:67:e0:5a:d2:
                    c1:a9:7c:f7:cd:a9:e1:31:a5:b0:82:f3:ef:58:5c:
                    49:a3:3c:93:7c:e1:b3:9f:f5:a7:7f:8b:e5:be:53:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:A0:2F:A7:5E:BD:D0:16:1E:83:8C:E8:F0:BB:6A:CD:4E:40:C7
            X509v3 Authority Key Identifier:
                keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:de:71:52:4f:ba:eb:69:46:ff:77:39:e5:f2:b5:0d:27:0c:
         7f:66:6d:01:c6:ae:57:c4:59:a9:04:be:a7:95:7c:b7:97:a9:
         bc:7f:07:28:d9:46:f9:0d:f9:9b:a7:7b:a4:91:f0:35:0f:cb:
         0b:2f:5a:f8:ed:17:dc:5f:12:ef:16:25:c9:23:ee:8c:94:c2:
         c5:be:29:ec:2a:8d:fe:62:05:48:2b:ff:32:13:a4:b0:e7:5a:
         b1:e8:d4:31:2f:a7:25:0c:67:5b:d0:a0:d9:9f:87:15:c7:2d:
         46:3f:6f:7c:11:e4:2b:87:d7:b0:6f:eb:d5:f8:73:e8:39:72:
         34:9f:9c:8f:71:18:5b:65:a3:0c:ea:ea:30:48:99:82:af:d6:
         ae:da:53:74:ba:40:ef:52:a9:f0:71:30:98:23:2a:06:3c:95:
         e4:25:e3:43:a0:cf:b8:bb:55:c2:dc:65:4a:ea:d3:33:a4:69:
         25:56:4d:e7:cd:bc:02:b4:95:50:a8:28:eb:8a:7f:5a:e0:c8:
         0d:d0:63:69:1e:3c:83:e1:35:29:f4:3c:bf:40:34:c3:7a:05:
         4f:3e:de:7e:80:0b:f8:71:1a:27:c3:32:60:1c:3b:b1:ff:f8:
         42:0d:73:c5:f5:e2:4b:3a:02:c1:22:6a:bb:4d:a0:60:ea:dd:
         49:54:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:52:52 2026 by rpki-client