Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
File:                     JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json)
Hash identifier:          iA0F99fYR41DoJNicGCY79LeoOPu84UCjLS1mq8LC9M=
Subject key identifier:   CC:B3:86:C5:81:84:EB:AF:E4:C4:E9:8A:D1:F8:DF:B7:42:37:8A:75
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Certificate issuer:       /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
Manifest number:          0293
Signing time:             Wed 29 Jul 2026 02:43:28 +0000
Manifest this update:     Wed 29 Jul 2026 02:43:28 +0000
Manifest next update:     Wed 05 Aug 2026 02:43:28 +0000
Files and hashes:         1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: 7AABXiOO7gOPxlaD6z4tQQg0W+yS9T4V+7evFs7+pVk=)
                          2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: d/K2kBr8KtXE/HLaEOgUfuFdhAxsaOPQXuuLatAvwbE=)
                          3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: 8U4Uf80/OAxTrV2ftWLJpLvo7ffxfI5RfEjHBvwsn7k=)
                          4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: xApx4i0OfbuhIT4DYm6zHS1IKgNvPDZO0S+xq3g5g+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
        Validity
            Not Before: Jul 29 02:43:28 2026 GMT
            Not After : Aug  5 02:43:28 2026 GMT
        Subject: CN=6a6968d0-f6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:a7:e0:8b:f1:e9:55:6c:90:eb:af:81:c5:
                    9f:27:88:69:f7:1e:9f:85:56:87:5b:f0:c6:3f:1f:
                    1d:49:a7:43:27:44:75:8a:8e:f7:6e:b6:0d:88:6a:
                    dc:8f:63:b2:4f:a3:ef:04:70:c4:44:3d:36:5c:d8:
                    fe:f3:42:e1:c8:4a:0b:3e:aa:26:df:ba:b8:40:38:
                    4d:a4:ab:f8:ae:17:23:6d:4b:0c:60:a8:ac:ae:1a:
                    78:e8:0f:9e:60:e0:8d:03:ff:33:ae:0c:43:ff:e8:
                    70:dc:f7:69:e0:f8:e4:1c:31:24:5a:82:36:e1:ff:
                    70:bb:7b:47:f7:d9:2a:e5:76:dc:a0:f6:4e:7c:c5:
                    5a:ed:27:c5:2d:13:2f:09:63:08:5c:17:6e:aa:8e:
                    d1:6c:da:fe:d0:75:8b:61:ed:57:2a:7a:19:78:3e:
                    b6:30:0c:d8:af:a9:c0:ae:33:0c:4b:ef:a8:c8:38:
                    67:aa:d8:be:97:62:8b:c7:fe:b2:54:b2:71:81:69:
                    bd:3c:da:1a:c2:59:69:54:0d:85:94:7c:f5:51:13:
                    fd:75:af:f7:7d:13:da:f5:73:11:3a:58:50:a8:ae:
                    07:1a:73:04:4f:6f:8a:f4:43:e1:aa:c2:a1:e2:07:
                    1e:33:a8:43:6b:d1:5d:b7:7a:76:54:2b:ac:6c:78:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B3:86:C5:81:84:EB:AF:E4:C4:E9:8A:D1:F8:DF:B7:42:37:8A:75
            X509v3 Authority Key Identifier:
                keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:48:7b:b1:66:99:3c:92:c1:88:9d:a5:8e:d7:49:a4:c4:2a:
         43:70:70:db:90:6f:33:0e:1c:fb:11:d1:e3:97:15:2c:a3:2a:
         a5:d0:ee:4f:40:25:31:30:f9:9c:6f:ef:76:9c:ad:1f:48:55:
         b4:ea:04:2b:48:1b:61:1d:10:71:0b:54:97:4a:5e:bd:de:36:
         e4:2d:3d:5b:7e:66:de:7e:70:8d:83:ba:30:7b:50:a2:f9:67:
         e2:36:9d:20:f0:50:93:48:91:7b:54:fe:6e:be:dc:df:1f:42:
         2a:04:88:fd:4c:1a:df:a2:22:d3:ef:41:c6:89:97:26:d8:0d:
         c6:11:c6:e3:69:bc:26:7b:2f:5e:ec:ac:5f:be:9e:7a:c3:ca:
         2e:36:cf:da:e4:94:2b:b3:fc:c2:d3:46:1a:dc:3f:34:85:87:
         c1:8e:c3:83:cc:09:47:a5:90:f7:5f:31:51:4a:f0:a6:c4:b5:
         1f:06:c8:76:fe:1d:fa:ed:3f:40:5d:0a:13:75:3a:88:0b:1d:
         b4:de:c2:dc:95:3b:79:44:52:33:3d:e6:14:12:18:dc:20:2c:
         6b:ed:61:f9:6d:0a:13:56:46:fe:6f:28:a0:41:71:23:44:2e:
         68:24:3e:ed:4a:d0:7d:cd:2c:1f:f7:87:6b:74:05:66:f2:aa:
         4f:1f:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:18:55 2026 by rpki-client