Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
File:                     JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json)
Hash identifier:          n+3MJQkZHXSz9DDDhg0DLUr8OCDbSErk+G75vppHcrw=
Subject key identifier:   56:02:FE:3C:1B:CD:EA:34:55:AA:30:E9:E2:CB:44:B5:F2:04:0D:4A
Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A
Certificate issuer:       /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
Certificate serial:       28CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
Manifest number:          28AD
Signing time:             Wed 22 Jul 2026 15:40:36 +0000
Manifest this update:     Wed 22 Jul 2026 15:40:36 +0000
Manifest next update:     Wed 29 Jul 2026 15:40:36 +0000
Files and hashes:         1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: CYDQbGvU276p+4LPRx9rnfkyfmRconIun8H5+8+t9CM=)
                          2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: K0qm2C6my4ztNffHz19Ct3P2GsiLgSawU1/2AuVC2UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl
                          rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10445 (0x28cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
        Validity
            Not Before: Jul 22 15:40:36 2026 GMT
            Not After : Jul 29 15:40:36 2026 GMT
        Subject: CN=6a60e474-dd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:26:3d:49:d4:bb:be:aa:e8:4a:8f:e3:2f:
                    ba:ba:7c:23:93:82:c7:70:37:57:f0:fa:49:89:53:
                    ed:56:a8:d7:17:e3:07:e5:53:36:92:e2:72:a3:38:
                    49:bb:fb:ec:33:f3:75:ef:ef:85:e8:47:d6:63:37:
                    cd:d1:d5:42:f4:b6:12:32:97:b6:69:ae:44:02:6f:
                    e7:57:d7:30:2b:84:7f:9d:c0:4e:87:01:0c:d0:d4:
                    e5:9a:18:90:3b:18:7a:f2:94:d4:86:bc:42:56:c3:
                    59:d0:d1:40:61:c7:d3:49:a7:8d:f2:f2:d9:c8:e2:
                    fa:64:c3:83:e9:38:fd:3b:fc:03:91:e8:d2:64:23:
                    0f:91:97:d7:5d:f9:9c:3d:2b:4e:20:8b:88:09:4d:
                    c7:44:1b:e2:36:9c:05:47:39:35:e4:ca:ae:c8:ed:
                    17:ac:aa:4f:b0:6b:23:0c:d3:06:9e:a0:b1:96:ca:
                    94:36:f9:5a:79:42:90:dd:5e:9c:5b:c6:b5:ad:17:
                    1c:96:fe:5b:a5:e6:6a:f9:2d:33:c7:4a:a9:dd:8e:
                    ae:cd:30:d2:83:75:64:22:17:95:ab:45:92:cb:c1:
                    d0:11:72:35:64:80:9b:aa:20:9e:2b:f7:70:e3:fb:
                    30:50:cb:7b:df:41:50:2d:b7:f0:f2:a9:a9:ed:d8:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:02:FE:3C:1B:CD:EA:34:55:AA:30:E9:E2:CB:44:B5:F2:04:0D:4A
            X509v3 Authority Key Identifier:
                keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d7:0f:6c:00:9c:44:22:56:b9:30:82:5b:6a:89:01:c8:76:
         f2:7c:d5:84:d2:fa:b6:55:57:55:6e:f4:ec:a7:cb:af:d2:e8:
         4e:5f:81:0c:7b:99:0a:d6:bf:52:5a:86:92:22:ca:50:0e:10:
         27:a4:df:94:27:be:4a:66:ad:94:88:15:0a:96:66:23:5f:76:
         02:d0:87:73:4c:11:7a:84:58:41:6b:a7:e9:0a:73:b1:e6:20:
         96:14:eb:21:32:e2:2b:70:82:2a:4b:1f:34:2d:4a:0e:28:31:
         3e:f4:dc:6a:50:9f:5a:c8:1a:e9:f8:18:0c:6f:11:09:66:82:
         72:cc:6b:2e:27:01:e5:c0:b8:d3:f2:5e:a2:e7:5b:12:d7:b0:
         6a:fd:04:7d:50:fb:0b:35:84:84:e9:06:55:c0:41:70:54:fb:
         5a:b1:40:2e:d5:c5:cc:36:ae:09:13:8e:ee:cc:70:33:a3:6d:
         75:80:16:5f:7a:3c:29:c9:45:0c:be:b8:c8:7a:9e:ee:c2:15:
         e7:86:a2:c4:db:d5:87:72:56:3b:3e:54:d7:8c:bd:0b:43:6d:
         69:7f:60:0e:37:86:31:34:fa:59:10:1d:c0:8a:4c:77:ff:ed:
         19:00:d3:e6:61:01:0e:ce:47:06:5a:a4:44:74:14:53:a8:85:
         ea:b6:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:58 2026 by rpki-client