Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
File:                     JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json)
Hash identifier:          fM/Tj/c2ry61kgsgnoXET2IvWV/Y3f8x4zheL66JrTw=
Subject key identifier:   60:DF:70:20:54:6C:2E:9F:3B:92:65:DA:4A:B3:C5:4C:D3:59:15:C7
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Certificate issuer:       /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
Manifest number:          01A0
Signing time:             Thu 23 Jul 2026 05:39:05 +0000
Manifest this update:     Thu 23 Jul 2026 05:39:04 +0000
Manifest next update:     Thu 30 Jul 2026 05:39:04 +0000
Files and hashes:         1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: LKr0I2ZYmvPbfI8hbFRhXGAz+2cywYv5qL8MUCT4INk=)
                          2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: SdoiMB3cI4u8HjKrMgLLjZnLcpnFdg9nX+E7fYNcKQk=)
                          3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: GMH8Mkw5UtCZ2ecpJ5boAvlU18bo2a/WaY9Trybc1hM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
        Validity
            Not Before: Jul 23 05:39:04 2026 GMT
            Not After : Jul 30 05:39:04 2026 GMT
        Subject: CN=6a61a8f9-0a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:be:fe:f1:47:9b:8e:bc:7a:e7:88:e5:78:
                    29:54:5c:ac:ae:93:03:fd:68:75:2c:5f:2c:cc:ad:
                    d7:93:6b:13:93:65:d3:ff:23:8d:7b:07:ef:db:59:
                    09:d6:1c:4e:7b:28:2a:da:25:74:0b:f3:f6:61:c1:
                    74:15:6e:10:bd:73:fe:bd:78:8d:3f:74:f1:71:ba:
                    27:5d:28:7d:d5:96:ee:d3:e4:c2:18:43:b2:6e:56:
                    55:23:e0:9d:0c:df:b7:30:d2:26:c4:20:0b:18:75:
                    72:0d:ea:03:6f:b6:97:43:02:c9:72:76:a4:6d:85:
                    ca:3b:3d:b2:52:6b:cb:60:1c:04:a5:65:23:71:a5:
                    4f:e4:39:6c:65:d4:76:fc:23:97:0a:91:2d:43:43:
                    1f:09:80:b3:aa:a2:be:b6:71:7e:d2:8b:32:85:70:
                    31:5c:e9:3b:1f:f7:18:c3:f6:b8:03:99:8a:4d:d7:
                    1d:01:83:dc:3e:3a:55:ea:a1:fd:d8:23:ee:98:f5:
                    3c:ff:04:af:ae:f5:3b:cc:06:a4:33:a0:3f:dd:58:
                    c7:53:86:83:2c:6a:a0:54:89:67:a3:95:83:77:a1:
                    f1:bf:81:74:ab:a2:37:60:93:9e:22:4e:ea:c0:a4:
                    c8:f5:d5:41:7b:cd:13:ae:3f:a4:ef:d1:ab:95:77:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DF:70:20:54:6C:2E:9F:3B:92:65:DA:4A:B3:C5:4C:D3:59:15:C7
            X509v3 Authority Key Identifier:
                keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:80:b8:9e:36:f1:14:f2:86:92:57:93:b2:84:d8:9a:62:
         54:44:28:f2:17:a0:6c:5d:bb:09:02:84:96:5f:5a:a8:75:d7:
         fc:bc:60:15:82:47:a7:9f:f9:a6:e9:5a:5b:08:78:eb:50:b5:
         01:de:69:ab:2b:cf:bf:6b:5e:11:12:47:42:c6:34:53:b7:f1:
         55:bb:cb:fe:65:f3:a4:c5:c8:91:3f:b1:e9:d9:6c:a7:da:67:
         d2:81:42:02:fc:25:bb:b7:de:47:b1:00:96:90:16:f7:be:b2:
         72:d3:1e:3c:db:7b:f3:e6:81:56:4a:ac:22:95:f2:1b:0c:9f:
         ea:c2:b9:89:82:d8:72:1d:66:47:74:0e:32:6c:76:a2:03:bf:
         f6:6b:b7:2a:6f:e2:90:8a:8b:48:6d:01:40:54:b5:e4:2d:f6:
         ae:5a:61:12:73:79:39:ba:dc:4c:f2:46:9a:d1:0e:cf:25:a2:
         ed:12:a3:78:d3:60:66:26:33:4d:4b:60:3c:57:2c:bb:f7:f8:
         c4:6d:4d:81:c4:3c:c4:f3:3e:c4:ee:ae:e5:40:7f:2c:ec:bd:
         8c:b8:f5:64:22:b5:b7:e9:a0:d6:6f:3b:54:83:f1:0d:65:c1:
         9b:97:e3:f7:00:49:eb:8f:57:e7:f4:8e:41:2c:e0:16:f3:d3:
         77:36:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:25 2026 by rpki-client