Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File:                     JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier:          fVMz55DpuoOTh+dcXgPoBnN0mxF4iP7ldhH0e1u/YEs=
Subject key identifier:   BC:71:A7:13:B5:CC:8F:DD:75:28:6E:A8:76:79:67:2C:7F:51:1E:29
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       2FE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number:          2FD2
Signing time:             Fri 12 Jun 2026 15:26:52 +0000
Manifest this update:     Fri 12 Jun 2026 15:26:52 +0000
Manifest next update:     Fri 19 Jun 2026 15:26:52 +0000
Files and hashes:         1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: /agVUC8kdDLz7N3BgKQ6v9DBUzPJtpB3k06Fp9KSqF8=)
                          2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: qMI0+qSJUDBOM2XBKVGT0iY5F9iduz0xMqXjCiho+4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12264 (0x2fe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Jun 12 15:26:52 2026 GMT
            Not After : Jun 19 15:26:52 2026 GMT
        Subject: CN=6a2c253c-2cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:4a:b3:12:ba:f7:81:6d:1e:b6:51:47:31:
                    ea:af:3c:ef:68:42:25:80:2f:35:e5:78:9d:24:92:
                    67:62:cd:50:c3:d1:d7:aa:99:4a:9b:78:55:bb:2e:
                    d0:49:ed:e1:a6:0f:24:ba:bc:bf:81:ea:1a:9f:bf:
                    e9:2a:8f:f2:84:6a:8d:27:8f:46:18:18:71:27:4d:
                    b5:7a:bd:b9:9c:26:6d:c8:64:77:ea:cc:73:91:ed:
                    59:f5:46:45:a0:39:ce:bd:bd:ee:a8:12:9a:9f:df:
                    ae:79:3f:ae:99:f5:3f:6c:c5:0c:62:e8:1b:4b:8c:
                    3d:00:b8:f1:48:b5:98:a1:b9:e2:cd:3e:a7:23:a5:
                    f8:44:77:41:28:f1:57:b0:66:d0:77:8a:fa:24:87:
                    ac:52:be:9c:a3:d0:e1:75:03:4b:3c:49:e1:72:cb:
                    e8:47:99:24:f4:71:2a:a3:06:1e:b5:23:41:05:9a:
                    90:1b:9a:08:d3:e8:48:91:03:ba:90:83:0a:bc:b8:
                    b1:cb:5e:b8:9a:cf:1b:88:7e:57:45:3a:18:e0:29:
                    ef:84:f7:c5:1e:94:74:de:9f:bc:02:36:73:17:25:
                    98:9a:a9:26:44:0c:60:4e:74:fd:16:1d:7d:c0:7d:
                    32:1d:3f:57:1e:c6:18:e6:b9:3e:02:be:30:05:ec:
                    4e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:71:A7:13:B5:CC:8F:DD:75:28:6E:A8:76:79:67:2C:7F:51:1E:29
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:96:48:52:28:3f:a9:c9:a0:79:1f:2d:ff:3d:9d:bb:a5:
         8b:1c:76:10:37:4d:a2:b0:01:ef:d1:75:0d:62:2a:52:ba:59:
         b6:cb:ea:e8:ba:26:29:76:4b:f2:c8:6e:02:bb:7d:45:6b:a1:
         f1:c7:c2:62:aa:3d:1c:c7:e9:fd:cb:ef:d4:88:dd:14:19:5d:
         96:a4:7e:6e:09:ee:2a:fc:57:49:7d:5d:97:e0:ca:19:65:ac:
         12:ef:d3:91:9e:2e:13:b5:b4:2f:27:02:cb:66:6f:8c:4f:e9:
         2c:43:bd:0e:1d:f9:ac:2a:f0:b2:73:f0:f5:93:6d:c0:22:df:
         b1:a6:d2:5f:e9:b6:60:cf:d7:eb:b4:14:fc:cb:88:65:a6:5c:
         ad:0a:f7:6d:85:ba:d3:0e:10:5c:af:39:ac:77:3f:7f:da:87:
         11:13:b9:b2:76:17:ca:25:0b:06:f9:83:e0:36:2f:e5:6c:74:
         e8:5e:e1:25:86:cc:f7:a3:3c:26:4f:4b:bf:7a:e0:2b:4c:0c:
         36:d2:5e:f0:5b:47:77:7a:d2:2d:e1:59:de:59:9a:2d:4f:78:
         78:ea:db:e8:d1:69:2f:a8:28:0b:92:8e:8b:30:e9:c2:c2:1c:
         57:20:6f:99:b6:05:ad:da:c5:a8:76:bf:6d:58:85:74:46:d5:
         bf:ec:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:14:16 2026 by rpki-client