Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
File:                     jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft (raw, json)
Hash identifier:          kwgBnuJP/BpZ2dv/LurkQ6KDlu4W2/PBB4gJEviNVBI=
Subject key identifier:   9F:0A:2D:BB:A5:C1:30:2B:B3:4B:74:F9:F9:AF:95:94:BA:29:75:32
Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
Certificate issuer:       /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
Manifest number:          AB
Signing time:             Thu 23 Jul 2026 09:14:05 +0000
Manifest this update:     Thu 23 Jul 2026 09:14:05 +0000
Manifest next update:     Thu 30 Jul 2026 09:14:05 +0000
Files and hashes:         1: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl (hash: mbTnrZiMLEifNZSwO2hVeh3+j/kXIiDNGQgrq79KJ7A=)
                          2: 14546D12FF3F11F0805DCCBD8DEE528E.roa (hash: Q1csuSiprpfO+YLO7DTZ4z2P7rX3W4WGdzmbPVATNiU=)
                          3: 65009C2C081D11F19944049E323D8C67.roa (hash: tE0/hZPJ/MXUNdrjbUTRpqb4i6ft44xl0fQQy9zLFzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
                          rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
        Validity
            Not Before: Jul 23 09:14:05 2026 GMT
            Not After : Jul 30 09:14:05 2026 GMT
        Subject: CN=6a61db5d-3167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:a5:4a:75:1c:d3:38:a7:f8:39:60:e5:d8:
                    0a:e6:14:a5:a5:56:2c:44:9c:85:e9:30:bb:fa:9e:
                    db:70:25:0e:a7:e1:c9:58:e6:6a:4d:79:20:d4:af:
                    6d:bb:1f:3c:b4:98:2b:2f:c8:c4:05:c0:7d:c0:6c:
                    48:60:d7:4b:5a:5b:ca:4a:c2:7d:36:54:53:a9:50:
                    b8:1b:11:10:ac:05:53:67:0b:ee:71:77:81:a5:29:
                    d2:2f:c6:6f:ae:d6:94:bf:d3:a7:e1:d1:22:42:a1:
                    2c:19:f8:97:51:86:f3:c4:2c:d6:70:50:9e:f3:3d:
                    63:ed:ec:4a:1d:bb:91:a0:06:62:1b:e3:28:f2:8e:
                    a9:a3:ee:d3:7d:0f:7b:00:8e:d0:36:ad:0d:07:70:
                    6a:6b:f2:76:10:35:68:d9:cd:64:ab:5d:fd:cf:a6:
                    f1:f5:7a:75:5b:71:db:f2:a5:3b:7c:c8:bc:d1:c8:
                    c2:79:c7:61:d6:55:34:bd:f0:61:7e:e1:65:3f:d1:
                    3c:69:29:9d:48:7b:c5:10:eb:84:16:7c:9c:11:11:
                    c8:96:8e:f7:2a:c6:f3:9a:c5:f6:73:80:d2:c6:ff:
                    b3:37:d1:c5:5d:03:e5:6e:74:c8:cb:22:42:63:6c:
                    53:d7:2b:40:9c:32:d2:35:67:a7:6d:12:04:e1:e7:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0A:2D:BB:A5:C1:30:2B:B3:4B:74:F9:F9:AF:95:94:BA:29:75:32
            X509v3 Authority Key Identifier:
                keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9d:ad:4a:64:ee:6c:36:da:d9:59:0a:81:ed:11:ba:87:68:
         62:8a:0d:75:e1:8b:67:db:78:3c:3f:bf:18:23:68:18:83:50:
         51:18:fa:a2:9f:ed:b2:2c:bb:96:c8:6d:49:f6:69:aa:96:38:
         59:ac:9c:5b:25:f0:e1:70:3f:dc:e5:41:fe:bb:e8:6d:b5:93:
         83:6d:e2:8f:19:73:62:31:9a:ac:d6:d7:0d:b3:7c:a6:ff:9f:
         18:83:c1:4f:c9:75:2e:b2:96:7d:23:7e:4a:95:52:28:a8:0e:
         a9:ee:a5:47:03:6d:1c:ca:bc:98:51:3f:76:bb:af:60:95:06:
         d4:cb:bc:f3:22:21:9b:a4:c0:a7:a5:26:be:8f:7c:e0:6c:80:
         cc:c9:53:5f:1a:eb:36:42:0f:0e:30:7c:49:78:88:c4:64:60:
         3d:61:ae:b6:0f:35:22:33:8f:e4:ef:9c:ac:ea:53:06:98:9e:
         3f:b2:66:c8:f3:7d:57:db:75:b2:c2:f9:ed:25:9e:23:df:64:
         21:af:bd:01:dc:ed:6d:c2:7e:13:f1:9f:d7:fd:da:85:48:18:
         9e:45:8c:78:b3:bb:6c:a0:ba:92:e2:9d:19:c5:d5:80:ce:13:
         dc:6c:85:5c:35:14:51:9f:de:15:54:c5:57:70:e2:c5:a5:33:
         b3:d0:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:22 2026 by rpki-client