Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
File:                     jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json)
Hash identifier:          +3EOhdbBM6Fu+oxVI+fyFvFnkeoo05vj9KLA5ZHkhYE=
Subject key identifier:   40:9B:91:38:90:CB:FF:96:8E:39:5E:BD:10:5D:33:5D:A4:7E:18:97
Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65
Certificate issuer:       /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65
Certificate serial:       0DE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
Manifest number:          0DD2
Signing time:             Wed 22 Jul 2026 18:05:54 +0000
Manifest this update:     Wed 22 Jul 2026 18:05:54 +0000
Manifest next update:     Wed 29 Jul 2026 18:05:54 +0000
Files and hashes:         1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: tMofZhBwq7BUeNfmeUEUqDDWQ5JjuvJzHldPvEVUJ1s=)
                          2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: pbKdsMeBsvOeSomjFM8j6Bm6hC7ndk/6YYGFv0c3ANY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl
                          rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3552 (0xde0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65
        Validity
            Not Before: Jul 22 18:05:54 2026 GMT
            Not After : Jul 29 18:05:54 2026 GMT
        Subject: CN=6a610682-a0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:b6:1d:66:9e:1e:64:14:76:85:b1:18:2b:
                    bb:4e:74:5a:17:81:b3:72:c3:05:d0:7b:48:11:55:
                    10:e6:5c:88:ef:2e:9d:61:60:0e:d3:b0:4b:96:7f:
                    27:a7:4a:b2:58:4b:ac:76:2c:0a:6a:5d:bd:55:27:
                    34:e0:66:23:30:fd:ab:33:06:b4:7f:65:85:cc:ad:
                    ee:95:39:87:9f:fb:a4:b7:f4:57:90:ee:95:20:4e:
                    25:3f:a5:c6:73:68:3a:c5:ee:2c:62:80:0c:94:ee:
                    36:08:51:ff:b3:48:bd:65:03:b0:86:32:63:7c:86:
                    bb:0b:61:a9:7b:16:46:da:99:f2:2a:77:b0:40:23:
                    56:84:48:bc:54:5d:63:a6:e6:21:c8:d4:28:c1:8b:
                    0e:ad:17:fb:71:f8:0f:e6:5b:22:ac:f3:26:fc:2e:
                    16:99:e6:76:91:9d:bb:44:2b:23:c1:d9:f8:1a:a6:
                    c9:37:80:a1:16:e6:1d:b1:a2:b0:8a:81:91:70:50:
                    5c:e1:8e:60:ad:4d:07:d3:02:1a:4f:67:26:2d:8c:
                    d6:ab:f7:fd:ec:31:b1:1f:77:33:26:e8:10:0e:32:
                    91:ae:7b:f0:e9:05:45:32:7e:f5:fc:8c:a7:6e:23:
                    a1:45:db:38:f8:e9:1c:2f:00:60:ad:08:c5:fb:99:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9B:91:38:90:CB:FF:96:8E:39:5E:BD:10:5D:33:5D:A4:7E:18:97
            X509v3 Authority Key Identifier:
                keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:96:45:87:ff:8c:4c:ca:92:8f:85:b2:e4:03:00:23:d2:
         5a:3d:5c:f1:f3:e9:c0:c6:ad:51:8a:5f:70:d1:e5:dc:7e:fd:
         ca:3d:fe:dc:17:a8:93:40:d0:99:f8:3a:8c:73:67:86:d7:0f:
         17:0c:9a:b3:2c:a3:fc:fc:1b:ba:cc:84:01:e0:97:07:9a:3d:
         cf:a3:72:00:97:01:64:3f:8c:1e:fe:23:9a:0d:78:bb:be:44:
         ca:65:d4:6f:f4:14:a2:f4:93:f0:05:6f:16:a6:f9:f4:6b:5c:
         e4:ed:6c:71:9d:7f:d3:de:b3:b9:5b:fd:e6:00:95:d6:1a:54:
         ab:01:4b:b4:cc:d7:01:a3:3a:59:ea:18:ad:b5:a1:13:8d:5d:
         db:15:89:e3:72:11:a5:72:62:d6:3c:42:42:fe:53:d3:1a:1d:
         19:78:af:7c:4e:ca:83:01:a6:e1:70:1f:c8:c3:75:f5:2b:36:
         f2:0d:8b:14:8a:cc:06:49:84:3d:38:5c:a8:30:16:c0:34:28:
         b8:d7:96:fa:df:be:5a:c5:83:45:9f:a7:92:bb:70:52:ed:58:
         e6:b7:a1:d5:2e:dd:31:ee:47:f9:a9:8b:02:99:e6:f7:6d:8a:
         fc:cf:fb:41:c1:01:b2:dc:5b:d1:8f:fa:ee:9c:40:30:c7:50:
         6b:93:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:51 2026 by rpki-client