Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
File:                     8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft (raw, json)
Hash identifier:          gLyebFNYKDwE2wu0r3pKthK9ZDLLC5AijFSZOiviaUM=
Subject key identifier:   FA:DE:F1:32:8E:A3:12:59:48:59:3C:D7:46:6F:6A:53:0B:D8:BB:64
Authority key identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50
Certificate issuer:       /CN=A91E855B/serialNumber=F232408485CC1A4038BDB31BFAF3261540310950
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
Manifest number:          51
Signing time:             Sat 13 Jun 2026 08:19:41 +0000
Manifest this update:     Sat 13 Jun 2026 08:19:40 +0000
Manifest next update:     Sat 20 Jun 2026 08:19:40 +0000
Files and hashes:         1: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl (hash: OLeDb352FGAESvgpitp3cX6o0y8UMiyEdo62mqhFksE=)
                          2: 2D933FE8EF6711F0AD461381586F56BC.roa (hash: WqJt9JtnWtmIMdrj3ZxaQ9KA33C7zxy15e8t9pWBnaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl
                          rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E855B, serialNumber=F232408485CC1A4038BDB31BFAF3261540310950
        Validity
            Not Before: Jun 13 08:19:40 2026 GMT
            Not After : Jun 20 08:19:40 2026 GMT
        Subject: CN=6a2d129d-8798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:6e:53:c1:e1:a2:59:ec:10:e7:da:dd:20:
                    9f:07:38:9d:50:98:48:12:c1:7f:e6:42:fa:f6:6c:
                    af:0f:5a:82:33:19:8b:f0:d5:30:0a:9d:bd:67:c3:
                    64:4d:4b:66:c7:93:ae:a6:fd:07:fe:fd:a8:55:c7:
                    69:e6:79:b7:b1:37:c9:2d:5e:fb:38:3b:07:01:ab:
                    ee:36:4a:63:6b:c2:7c:a1:b0:7c:d3:38:a2:25:61:
                    81:c1:83:8c:5d:b1:be:da:ef:c7:a6:70:9a:2b:cf:
                    e1:5b:45:c6:36:97:a5:93:f0:51:6c:b8:5c:21:38:
                    38:71:a3:4f:05:c7:e4:7d:57:0d:61:9b:4d:1b:96:
                    53:27:09:52:df:c2:bc:10:b8:b7:bd:b6:26:9a:0a:
                    24:03:33:8c:e6:62:ad:b7:56:5a:67:88:79:17:a5:
                    0b:ea:a9:6e:50:ec:b6:fc:8f:7c:de:a0:d5:9f:a3:
                    ac:9a:3d:f6:55:cc:e8:1f:9d:e8:ce:ed:45:11:00:
                    cb:f9:88:9b:85:85:d6:ca:33:d5:9f:28:d7:42:35:
                    88:93:3e:dd:50:54:d8:ac:81:5d:d7:99:d9:78:3f:
                    dc:e4:f9:cb:ad:4e:2c:58:42:13:62:cb:07:7e:56:
                    16:a2:9f:cd:6f:d6:63:5f:d3:d5:27:dc:ed:16:fa:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:F1:32:8E:A3:12:59:48:59:3C:D7:46:6F:6A:53:0B:D8:BB:64
            X509v3 Authority Key Identifier:
                keyid:F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:43:b1:04:a1:2d:60:b3:20:41:a9:3a:80:f7:c9:ae:12:e4:
         24:dc:5f:3d:ca:4e:8a:6b:09:01:27:d5:5c:32:9d:5a:53:e7:
         72:e5:ad:ca:c5:da:16:27:d7:85:e7:ce:aa:dc:2f:ef:49:f6:
         09:c8:ce:08:9e:84:0f:1e:89:7a:03:2e:b2:a2:10:f5:73:b1:
         ba:fa:af:94:7f:26:95:cc:e3:bd:8f:23:7d:29:18:43:0c:be:
         36:ea:0f:90:24:aa:80:d9:76:e8:3d:2c:af:73:b2:b8:7e:eb:
         2d:fd:aa:e0:2a:13:e5:50:01:fd:05:1c:9f:24:42:98:06:cb:
         f0:ed:11:7c:f0:e1:e4:dd:66:d8:22:10:20:94:91:62:7b:a7:
         ed:81:f2:53:65:96:af:69:f6:c3:14:06:06:d7:1f:5b:dc:fd:
         c5:37:20:65:2e:9b:17:5c:0b:c1:70:7b:eb:26:78:d9:66:cb:
         5a:43:29:5a:64:04:6b:5e:c1:a1:6f:f2:5c:51:f0:7e:6f:06:
         dd:d7:20:04:59:4f:23:95:0b:df:6d:ad:71:a1:74:42:0a:ae:
         c0:74:23:fc:70:58:5b:7e:ea:c7:0c:d3:b7:78:94:d3:c2:d5:
         ba:cd:3c:61:55:fa:2d:39:9e:a5:c3:85:b2:67:48:93:1e:03:
         85:0a:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:23 2026 by rpki-client