Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File:                     jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier:          wKO9Q4khmiYnheT9hyKJp11aYz33Q9QEc5ScBlwAZw4=
Subject key identifier:   F6:BC:CF:33:EA:67:B6:39:6D:1E:C8:F9:9B:A9:94:33:80:12:B4:53
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer:       /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial:       35AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number:          3585
Signing time:             Wed 22 Jul 2026 15:19:22 +0000
Manifest this update:     Wed 22 Jul 2026 15:19:22 +0000
Manifest next update:     Wed 29 Jul 2026 15:19:22 +0000
Files and hashes:         1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: gl9tgfKxsPxLTZpgXaFLF/jiMuZC6U5w0WlpKoIQkrk=)
                          2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
                          3: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
                          rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13743 (0x35af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
        Validity
            Not Before: Jul 22 15:19:22 2026 GMT
            Not After : Jul 29 15:19:22 2026 GMT
        Subject: CN=6a60df7a-b0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:44:df:e9:c2:99:fe:22:9f:bc:a7:c9:1a:
                    b8:fe:d4:51:5a:9e:0f:31:07:12:9c:41:f9:93:ba:
                    33:b6:7e:eb:a3:e8:81:c8:cf:6a:2a:0a:2c:b0:d9:
                    ff:cd:59:d6:a3:8e:e0:29:ce:a2:dc:ea:43:2b:09:
                    ae:51:3d:82:84:45:dc:b3:8d:3b:9f:63:59:67:dd:
                    81:12:7b:ef:6b:ac:b3:26:48:28:c1:f8:e1:a0:6a:
                    49:ae:b8:1c:f0:44:9e:99:8f:be:76:df:d2:79:9e:
                    7d:36:69:70:b4:9d:89:90:22:eb:f8:4a:1b:63:ff:
                    60:ff:55:bc:d3:83:09:fc:66:f2:51:d2:61:68:65:
                    e9:8d:df:61:62:fa:4d:4e:a4:9b:e4:c1:43:68:a1:
                    c1:fd:bd:17:e5:50:2b:34:6b:8f:7c:a6:f8:10:b3:
                    89:fd:54:4d:b3:4e:f4:3a:bb:bf:91:54:af:55:ba:
                    12:bc:22:06:ae:e5:e7:36:69:21:9a:e2:9b:44:9a:
                    70:7b:30:5d:2b:8c:95:5f:b7:8c:5d:4e:d0:0c:5a:
                    2d:1f:a1:54:c8:c9:a3:6a:0a:c5:b9:bc:71:58:6c:
                    ae:8a:44:56:c8:17:bc:2a:eb:af:b5:5f:ee:44:3f:
                    8f:c4:ae:f2:a3:e4:d2:28:70:59:31:90:fc:eb:57:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BC:CF:33:EA:67:B6:39:6D:1E:C8:F9:9B:A9:94:33:80:12:B4:53
            X509v3 Authority Key Identifier:
                keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:64:8b:ab:07:d5:3d:5f:5a:69:cc:77:4e:34:d2:ab:9d:fe:
         58:45:2f:fc:55:44:43:a4:85:fe:4b:66:5f:04:a0:ba:42:72:
         71:02:87:cb:f8:3e:eb:07:e8:6f:b4:d1:8a:6d:b4:22:73:4b:
         3f:3d:f0:fb:15:f8:6a:0e:30:ba:d2:c6:4f:31:43:41:49:37:
         de:08:3b:d2:2a:7f:3e:6b:ce:95:3b:b1:b1:b0:7d:df:a3:68:
         35:6d:ed:88:3b:9d:2d:33:de:07:31:4c:a0:b0:24:50:7e:fe:
         df:64:d8:35:14:30:8a:1d:ef:0d:2b:a8:83:a3:ae:36:09:81:
         e8:7d:3d:b4:9a:a2:4f:ca:2f:01:60:e0:7f:02:53:9f:bb:5a:
         cf:06:bc:16:2e:98:b0:0c:dc:a0:cf:3d:ca:cb:b0:d0:54:07:
         a1:95:2e:51:3f:b4:9e:ba:e3:8c:4b:91:3a:a2:b7:ac:a0:58:
         f8:81:d5:fa:e9:af:1a:1c:db:05:d9:36:fb:82:cb:b5:a0:e4:
         c9:a7:af:7c:71:f7:00:33:13:c0:50:2a:6f:54:9d:99:86:9f:
         a2:85:a1:25:61:5d:a3:13:4b:ef:c1:17:f1:ed:1e:e6:6a:99:
         37:c0:f3:68:e2:98:e1:9b:a8:37:64:0a:ee:85:72:5f:10:5f:
         d6:c2:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:05 2026 by rpki-client