Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
File:                     JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json)
Hash identifier:          y8uP/U2FbuHHPGfK89vtyqpgmIARXc+gHcv5LwmSmTE=
Subject key identifier:   CB:E9:68:BA:95:D4:45:97:69:52:08:62:D2:BD:15:15:13:33:FC:08
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Certificate issuer:       /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial:       1139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
Manifest number:          112E
Signing time:             Wed 22 Jul 2026 17:22:53 +0000
Manifest this update:     Wed 22 Jul 2026 17:22:53 +0000
Manifest next update:     Wed 29 Jul 2026 17:22:53 +0000
Files and hashes:         1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: ovL3RDKniqgNZTme0UZG0tY+V1iykC8Ehmqtq3XFARU=)
                          2: B70383D6385411E9A0023656C4F9AE02.roa (hash: 7vWFkGFq5uxVXCbfQZ/86ifw+qgZ8YrPvE/ofrwS5C0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
                          rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4409 (0x1139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
        Validity
            Not Before: Jul 22 17:22:53 2026 GMT
            Not After : Jul 29 17:22:53 2026 GMT
        Subject: CN=6a60fc6d-63d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:02:3f:60:ae:33:7b:e2:fa:54:4b:30:05:
                    6c:7c:35:e6:aa:70:2e:ad:da:80:8e:ff:30:81:3f:
                    68:dc:26:1e:52:28:81:59:1b:b6:77:95:0e:a6:5e:
                    95:2b:46:97:08:5d:4e:c2:4e:c1:d0:b8:7a:b9:49:
                    de:e8:64:3b:0a:62:8e:50:6b:42:72:62:d6:cc:da:
                    28:3b:3d:ea:81:0b:9a:18:78:f5:33:50:00:78:d6:
                    59:a6:66:7b:e3:7b:22:32:e1:be:90:52:31:be:f6:
                    1c:8e:8a:d5:88:2a:1c:30:76:7b:33:25:00:9a:17:
                    7d:78:d8:f6:4a:ae:79:c5:fd:4a:dc:2e:48:8a:d5:
                    ec:9f:4b:2c:a6:90:cd:10:cc:b6:6b:c2:16:03:6b:
                    52:76:70:b2:72:60:ef:b2:af:86:91:de:7c:97:f8:
                    a0:41:25:bc:77:8e:13:e3:f2:7c:66:6c:d9:3a:10:
                    dd:5b:ce:fe:53:78:64:c6:55:10:b4:88:50:54:16:
                    ef:f6:6d:db:c9:64:f6:df:cf:1a:88:23:dc:53:12:
                    91:08:85:9d:27:ce:22:f6:5f:54:b2:f2:43:21:48:
                    c9:d3:dc:b6:f7:0f:ad:16:5a:d8:2a:e0:44:4f:21:
                    5b:9c:6e:d7:8c:fb:c8:8d:93:9c:12:14:a9:6e:93:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E9:68:BA:95:D4:45:97:69:52:08:62:D2:BD:15:15:13:33:FC:08
            X509v3 Authority Key Identifier:
                keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e6:58:7a:d4:b1:20:02:83:fc:5e:1f:b1:d0:30:84:34:56:
         e0:94:99:3f:2e:45:42:a8:af:b9:9f:9d:14:7b:a7:80:a0:f3:
         4f:cb:32:5a:70:d0:55:69:5e:6d:e6:70:93:21:4b:20:bb:85:
         e5:96:df:41:6e:e7:10:27:57:33:e4:29:df:e8:3e:fe:73:38:
         64:79:c4:b3:f4:26:e8:d3:a1:27:7f:11:98:8e:6e:75:b7:b9:
         9f:6a:05:9c:70:ca:59:d4:21:9d:b8:e2:2b:d6:f4:7c:e4:ff:
         52:8f:dd:fb:20:3a:59:99:59:a5:aa:53:cf:2a:ec:65:52:05:
         55:4d:e8:e3:0b:a6:9c:ef:32:fd:58:82:2e:89:55:15:5c:07:
         ed:5b:99:c9:30:94:93:18:34:cc:37:2d:7f:9a:6f:ee:9f:ef:
         22:05:d4:66:b4:3f:ed:bf:1a:1f:ad:31:a8:27:ca:a6:49:13:
         e2:06:6f:78:9a:37:1e:9f:33:ae:36:41:bc:c3:a4:53:05:0d:
         68:60:80:53:83:75:6c:fc:82:1d:e3:24:5c:4b:7d:15:be:21:
         c8:21:0e:7d:a2:af:e1:03:dd:e4:d3:be:56:9f:e8:1a:70:65:
         c4:4a:85:b6:01:d1:72:a5:b1:61:0b:98:e3:2e:47:13:5f:d0:
         6c:fd:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:48:08 2026 by rpki-client