Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
File:                     jM-30IneJP53MO8rXFeIrgdEhCk.mft (raw, json)
Hash identifier:          JzYsgf5R4sbgBMqLq+2ShFBCVi+i4HrF1ZZIaIvfijU=
Subject key identifier:   7B:E6:3C:04:5B:AD:41:4D:0D:4C:42:6B:0A:C2:42:DC:10:91:40:65
Authority key identifier: 8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
Certificate issuer:       /CN=A91EEBD4/serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
Manifest number:          53
Signing time:             Sat 13 Jun 2026 08:17:11 +0000
Manifest this update:     Sat 13 Jun 2026 08:17:10 +0000
Manifest next update:     Sat 20 Jun 2026 08:17:10 +0000
Files and hashes:         1: jM-30IneJP53MO8rXFeIrgdEhCk.crl (hash: MefKLiuMQnQadOHNDPWABykJ6ESxz74A3Osav4GULMc=)
                          2: AEB081C8EB7D11F08F2DA3C6506F56BC.roa (hash: TKMj0SGDDWUO45H6UFrKS0aoJO0l9h24Ptk33swY28A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
                          rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEBD4, serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
        Validity
            Not Before: Jun 13 08:17:10 2026 GMT
            Not After : Jun 20 08:17:10 2026 GMT
        Subject: CN=6a2d1207-f85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:6e:32:ab:9e:a2:8b:ea:30:ca:be:29:a1:
                    13:4c:a1:32:49:6b:4d:e6:9b:1e:a1:7f:37:b0:3c:
                    ed:6b:7d:63:43:0f:7a:6d:0b:c9:cf:a2:24:84:57:
                    f3:c7:3f:4f:05:09:5b:62:2f:dc:08:16:3c:91:ce:
                    80:e1:36:ef:e1:2f:91:6e:54:51:25:5d:03:1f:bc:
                    16:66:1b:60:fa:b9:97:2c:58:4c:e7:5b:12:a7:29:
                    37:59:16:1f:20:11:9a:ae:51:74:4c:d2:d2:f2:e1:
                    59:9b:0c:56:e1:71:f1:c4:a1:22:f8:e0:a0:0e:40:
                    38:8c:50:56:83:af:54:fb:f7:a5:5d:c7:24:f4:3b:
                    a5:47:43:3c:da:aa:ee:95:f8:bc:79:09:b3:22:16:
                    6f:5b:58:58:20:ec:ad:97:6c:3a:6e:04:7f:e4:48:
                    4c:e2:32:a1:ac:ed:8e:86:cb:93:85:7a:7d:6a:37:
                    a5:98:99:31:cf:ca:b9:68:d9:d9:70:de:19:de:2a:
                    88:5c:81:51:df:f8:33:9c:2a:f2:06:98:d7:6e:cd:
                    b1:d0:1e:6e:14:b6:8d:3d:a0:f7:a6:62:f2:50:22:
                    ae:64:4f:66:f1:09:34:92:b8:52:0e:1c:42:a8:a3:
                    4d:7b:62:9c:d9:bb:45:3f:23:68:90:29:e9:14:07:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E6:3C:04:5B:AD:41:4D:0D:4C:42:6B:0A:C2:42:DC:10:91:40:65
            X509v3 Authority Key Identifier:
                keyid:8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:79:f4:f7:ba:9b:8e:ba:3f:15:dd:e0:a7:83:01:22:68:54:
         5e:21:cf:59:08:47:f6:30:dc:8f:67:ef:31:5d:ef:4d:ba:74:
         31:86:b9:b2:a3:d4:a3:d6:d4:57:7d:81:d1:ec:db:ab:96:ed:
         88:4c:47:f6:c1:11:d5:09:87:a8:24:e3:02:81:fd:37:2b:79:
         5e:ed:4d:56:e5:fb:d1:67:ae:e4:74:66:38:0b:c3:55:15:ed:
         9b:58:b4:d0:6d:2f:94:db:14:c0:f8:02:fe:fd:53:51:d3:3a:
         4a:8c:65:2c:9d:7c:91:1e:da:e0:80:86:7a:df:03:5b:f2:77:
         ce:d8:19:41:f1:5f:d8:2e:93:9b:e8:fd:2f:dc:03:a0:c3:10:
         18:c7:02:87:b6:95:3f:c2:13:5f:33:b2:42:be:9f:ad:9c:59:
         5e:7a:f5:d3:1e:42:3d:41:41:53:40:25:f8:59:50:95:94:e6:
         77:0f:85:30:72:84:0b:88:f0:fc:3e:d6:35:ea:76:df:fc:df:
         8e:94:aa:f3:8b:03:1e:45:a1:96:8e:86:ee:b1:ed:46:5a:a3:
         7c:25:b1:f4:ed:87:ac:5a:9f:05:e6:77:75:a2:09:97:25:9c:
         73:65:3d:b6:bd:35:85:eb:2a:79:84:c4:44:a6:5a:31:b3:09:
         5f:78:4c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:39 2026 by rpki-client