Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
File:                     JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json)
Hash identifier:          3N6vw2ePW4ae1dtuydGkPlslSyIq3CdD/I4n2K2CBLA=
Subject key identifier:   6E:01:83:CC:C3:38:48:C9:6E:F4:66:52:6B:EE:B8:8E:66:AF:6B:1C
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Certificate issuer:       /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial:       17B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
Manifest number:          1788
Signing time:             Wed 22 Jul 2026 16:41:28 +0000
Manifest this update:     Wed 22 Jul 2026 16:41:28 +0000
Manifest next update:     Wed 29 Jul 2026 16:41:28 +0000
Files and hashes:         1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: +K9Ve1TEYm76VAVtP10Y28Qyk0mknOfaF2j1fJfRpjg=)
                          2: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM=)
                          3: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=)
                          4: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6068 (0x17b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
        Validity
            Not Before: Jul 22 16:41:28 2026 GMT
            Not After : Jul 29 16:41:28 2026 GMT
        Subject: CN=6a60f2b8-0622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:f4:d8:3a:1e:1c:99:3f:b7:25:32:93:7c:
                    73:34:f7:89:21:ef:1d:62:5c:0d:2c:cc:ad:55:f6:
                    5a:b6:8c:e5:1c:cf:ac:b8:d9:fc:4c:c9:82:0b:18:
                    9f:bf:ac:a8:a6:5f:ba:e9:5b:c7:03:6d:f8:e2:25:
                    26:d6:4c:65:f4:93:85:0f:36:5d:b6:86:e7:16:6e:
                    c5:89:fc:03:5b:2f:fd:b8:1b:a6:d0:32:b9:c7:7d:
                    53:0b:f4:b9:c8:d8:42:4c:e5:94:01:17:27:e5:b4:
                    89:82:29:c4:74:84:f4:e1:b4:78:12:db:9e:cc:d6:
                    02:41:29:27:73:b2:2d:d3:6d:bc:f0:ba:53:bd:a3:
                    8a:e1:4d:1e:df:77:3c:c5:b2:ce:ba:0d:eb:62:80:
                    32:26:ca:37:88:a9:13:7f:c8:c9:18:a1:64:2e:b4:
                    5e:00:3d:37:5a:5b:01:27:9c:23:48:7b:2e:a3:3d:
                    96:57:f5:d1:af:7f:60:e2:b4:23:1c:55:85:6a:af:
                    be:11:98:0b:10:62:9a:1b:0e:c7:63:48:a2:b7:49:
                    ca:b5:e4:5f:f8:a7:d7:90:4f:21:fd:db:cf:dd:45:
                    56:17:6f:85:f3:16:c3:73:10:ad:ea:38:f3:33:cf:
                    25:ed:1d:60:d0:c5:4e:7f:69:eb:f9:18:0e:a9:16:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:01:83:CC:C3:38:48:C9:6E:F4:66:52:6B:EE:B8:8E:66:AF:6B:1C
            X509v3 Authority Key Identifier:
                keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cf:67:bf:98:d3:e9:af:42:7b:d1:d2:99:dd:95:fc:01:a4:
         61:74:c8:e3:c9:83:da:22:35:24:9d:a4:21:8e:96:27:cc:4f:
         a1:5f:6e:20:67:aa:a7:48:9b:54:28:12:b0:de:17:c4:57:d1:
         a9:10:79:43:8c:7e:25:86:ed:f1:48:63:9f:32:a3:6a:2e:39:
         f4:3c:9b:63:99:a1:c6:21:59:d5:e3:8a:24:6e:89:69:6f:62:
         4f:66:ba:80:73:4e:5f:4e:da:82:b2:ea:af:0e:a0:33:4f:57:
         a6:ba:01:3e:b5:92:42:83:59:f4:c8:6e:95:8a:68:ce:ee:40:
         e9:a9:f3:59:74:01:8e:52:19:ee:be:8d:e9:f6:d8:5f:c6:da:
         83:80:d7:3c:76:e1:79:e0:08:5c:d9:dc:34:70:eb:c9:48:97:
         70:7b:5c:06:78:66:ac:d4:e1:29:1e:67:5e:03:8f:15:f8:ab:
         1d:0b:98:d3:53:e3:27:12:0b:eb:e6:c3:dd:d3:4d:c2:9b:3e:
         36:10:08:97:e9:de:b1:4b:a5:86:68:c6:72:bb:39:c5:90:57:
         78:ff:0b:82:9f:2d:d6:c7:99:5a:d5:87:e2:28:fe:41:ab:b6:
         5f:a3:de:90:af:ac:b8:b4:cf:8c:11:7a:47:98:27:2c:6a:39:
         c4:37:82:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey
Mzc2ODhERjIwHhcNMjYwNzIyMTY0MTI4WhcNMjYwNzI5MTY0MTI4WjAYMRYwFAYD
VQQDEw02YTYwZjJiOC0wNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3j02DoeHJk/tyUyk3xzNPeJIe8dYlwNLMytVfZatozlHM+suNn8TMmCCxif
v6yopl+66VvHA2344iUm1kxl9JOFDzZdtobnFm7FifwDWy/9uBum0DK5x31TC/S5
yNhCTOWUARcn5bSJginEdIT04bR4EtuezNYCQSknc7It02288LpTvaOK4U0e33c8
xbLOug3rYoAyJso3iKkTf8jJGKFkLrReAD03WlsBJ5wjSHsuoz2WV/XRr39g4rQj
HFWFaq++EZgLEGKaGw7HY0iit0nKteRf+KfXkE8h/dvP3UVWF2+F8xbDcxCt6jjz
M88l7R1g0MVOf2nr+RgOqRY3gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4Bg8zD
OEjJbvRmUmvuuI5mr2scMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw
Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL
R2JKQXdKTnBlY29qZG9qZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsM9nv5jT6a9Ce9HSmd2V/AGkYXTI48mD2iI1JJ2kIY6WJ8xPoV9uIGeqp0ib
VCgSsN4XxFfRqRB5Q4x+JYbt8UhjnzKjai459DybY5mhxiFZ1eOKJG6JaW9iT2a6
gHNOX07agrLqrw6gM09XproBPrWSQoNZ9MhulYpozu5A6anzWXQBjlIZ7r6N6fbY
X8bag4DXPHbheeAIXNncNHDryUiXcHtcBnhmrNThKR5nXgOPFfirHQuY01PjJxIL
6+bD3dNNwps+NhAIl+nesUulhmjGcrs5xZBXeP8Lgp8t1seZWtWH4ij+Qau2X6Pe
kK+suLTPjBF6R5gnLGo5xDeCnw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:18 2026 by rpki-client