Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File:                     JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier:          evs0+I86HOTx361I9wMRdkbS1H7TEKgIi+pOrr1QrIs=
Subject key identifier:   08:A6:E8:AC:41:70:0F:D4:F8:B9:A5:BD:33:78:3E:75:68:00:37:83
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer:       /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial:       0C4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number:          0C3E
Signing time:             Sun 26 Jul 2026 19:07:13 +0000
Manifest this update:     Sun 26 Jul 2026 19:07:12 +0000
Manifest next update:     Sun 02 Aug 2026 19:07:12 +0000
Files and hashes:         1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: MCfmTSqJlEuooZ3kB1BBurcJ3TkHY6oldmJ/YvxI6S8=)
                          2: A540A624378611EABE283384C4F9AE02.roa (hash: 1yVVaTk5UC50OXhaCy6kGOPkOAIAOZcq9zm6v1RWqvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
                          rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3147 (0xc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
        Validity
            Not Before: Jul 26 19:07:12 2026 GMT
            Not After : Aug  2 19:07:12 2026 GMT
        Subject: CN=6a665ae1-f2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:46:b3:39:7d:3c:01:96:9f:ca:e8:05:37:
                    8f:4a:ca:3e:30:b4:50:9b:5e:6f:ba:f1:11:81:02:
                    e2:5d:d6:bb:93:8b:b3:d4:57:9b:31:08:5b:72:2d:
                    9e:80:10:51:07:c7:ed:47:8b:81:44:6d:aa:c1:9e:
                    98:2e:9a:f4:65:38:db:d2:e7:a5:3c:50:1a:9e:5a:
                    1e:96:ff:a5:95:f8:52:e8:8a:c4:77:e5:6e:97:7c:
                    c9:c1:4f:8f:c3:dd:7b:8c:37:44:7b:0b:f4:5b:7b:
                    3d:88:21:65:2b:32:01:6b:f6:52:06:81:8a:d4:d2:
                    c3:42:6a:60:75:2b:40:23:78:01:7b:71:77:a3:e2:
                    de:9b:07:cd:60:4d:de:92:9f:6d:b5:7a:0c:d5:dc:
                    fd:95:24:97:85:bc:ff:7f:dd:61:94:af:51:bc:71:
                    e3:9a:42:ac:28:ed:73:35:2b:95:c9:46:d2:51:35:
                    e2:ef:95:e7:68:0e:30:c9:81:08:4c:5f:e8:2f:ca:
                    11:9b:f1:2d:dd:ec:00:a9:a7:10:bf:a3:45:49:a1:
                    12:23:a1:87:0a:a2:ce:aa:43:e2:e3:10:db:f3:e9:
                    2c:ad:21:10:0c:2a:00:c8:f7:40:85:ce:b4:47:86:
                    ce:f8:83:41:9c:d6:41:7c:2d:60:35:58:38:83:7e:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A6:E8:AC:41:70:0F:D4:F8:B9:A5:BD:33:78:3E:75:68:00:37:83
            X509v3 Authority Key Identifier:
                keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:18:4e:73:97:2a:80:7f:80:64:bb:4a:9d:ad:fa:34:96:b0:
         28:93:48:38:09:40:60:25:bb:05:52:68:18:48:11:29:d0:20:
         54:38:15:c9:50:89:ed:0e:11:9a:b6:f7:1e:d9:fb:e5:29:6d:
         b7:8e:9e:0d:80:07:9d:a7:6c:f6:c2:1f:fd:ed:08:87:5a:74:
         08:ed:22:54:18:d3:d5:d3:2d:fa:7b:9b:c3:a0:bd:6c:41:a9:
         2b:01:fc:79:78:d3:fd:23:5f:2e:ea:0a:70:7e:12:59:f5:46:
         c3:1e:48:2b:08:47:a3:62:95:95:5e:55:07:64:d8:aa:96:4d:
         e9:cd:19:97:90:4f:ec:db:1f:49:09:35:46:d7:ab:23:4b:1b:
         8b:6b:b9:86:0e:6f:fa:42:11:98:de:c5:d5:a6:bb:37:99:d5:
         fd:ff:2a:f7:a5:49:77:0f:d0:d4:08:80:6f:00:d2:69:a8:c9:
         36:91:8c:c6:6f:62:dd:39:f9:77:a0:9f:3e:55:a4:58:37:26:
         96:52:9c:93:4c:7e:3c:d0:50:c2:ad:1b:ab:c3:e9:ad:a8:ee:
         d3:2d:3f:b4:f1:97:13:f9:45:54:72:96:21:5c:c3:55:d3:87:
         ea:10:2f:d5:b6:ba:ca:62:93:e7:85:f4:f2:ce:29:65:84:9b:
         cf:fc:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:58 2026 by rpki-client