Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
File:                     Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json)
Hash identifier:          wpYbwK406+HhBMqbCaOW0zjXrtnRaSrlFXBcl/YKQNU=
Subject key identifier:   05:9B:81:8E:11:97:AA:69:D6:AE:C5:BC:E0:E4:29:EF:D4:13:F9:58
Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
Certificate issuer:       /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
Certificate serial:       0658
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
Manifest number:          0650
Signing time:             Tue 12 May 2026 22:46:26 +0000
Manifest this update:     Tue 12 May 2026 22:46:25 +0000
Manifest next update:     Tue 19 May 2026 22:46:25 +0000
Files and hashes:         1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: G5Ki358DR/QcdAFdasAwPR9mToosb7GwsXZDw5CFXdk=)
                          2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: nyEjACdQQ3gUtN5WbVUDNxe876NOG369TAi+iHxyhOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl
                          rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624 (0x658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
        Validity
            Not Before: May 12 22:46:25 2026 GMT
            Not After : May 19 22:46:25 2026 GMT
        Subject: CN=6a03adc2-fa20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:65:48:8f:5b:f8:fb:c4:98:76:f0:46:79:
                    d8:1b:5e:41:24:6e:f8:d6:5a:ac:1c:1d:f2:19:45:
                    51:f9:0a:f4:48:65:49:9a:6d:a2:c4:1c:1d:fa:5b:
                    58:02:bd:b6:01:d3:dd:41:e1:28:75:e5:0e:b8:29:
                    b6:ac:b4:cf:3c:40:1e:36:d2:2a:c1:3b:e7:57:34:
                    30:25:db:23:31:ef:ec:0e:fa:57:ad:e3:02:af:e6:
                    c9:8f:c2:39:65:0e:ca:1f:57:2c:25:ab:20:3d:d1:
                    4f:35:0c:6f:46:8f:00:28:90:37:52:2d:48:7d:50:
                    cb:9d:9a:11:65:46:48:f2:0f:fa:55:76:34:92:47:
                    26:e9:4a:29:53:43:ce:10:34:65:2d:44:f9:26:85:
                    93:bf:a9:61:c4:4b:69:4e:45:e0:28:97:3e:77:02:
                    ee:d7:bc:70:44:db:8e:8e:fb:f6:5c:cf:52:89:ae:
                    24:3e:92:f2:0d:40:ce:37:83:13:93:c3:c8:df:78:
                    48:4a:5c:14:7d:a9:01:2d:36:dd:f2:b6:94:09:5c:
                    f0:c8:01:ef:6c:84:64:af:1f:55:0e:ae:1e:4a:59:
                    ff:1f:85:b9:0e:d8:43:5d:ea:4f:93:80:62:54:92:
                    c7:53:45:17:bb:45:3d:ac:fc:ea:01:99:1c:98:e5:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9B:81:8E:11:97:AA:69:D6:AE:C5:BC:E0:E4:29:EF:D4:13:F9:58
            X509v3 Authority Key Identifier:
                keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f1:36:3f:0a:ce:a8:39:d7:23:12:18:58:26:22:51:ca:ec:
         8c:91:c8:4f:ee:00:17:49:00:77:89:0d:7d:45:13:0a:4b:bd:
         0b:2b:cc:cd:92:03:a8:a9:88:75:58:c6:2d:69:06:eb:17:6f:
         5a:14:ec:3f:90:40:8d:a7:e5:70:fd:e0:c9:a6:50:5c:1b:37:
         35:54:c4:3a:65:a8:20:02:c1:37:85:b3:55:2b:0a:9b:a6:51:
         4f:4b:11:ff:b4:62:c0:88:8e:0a:88:ad:fa:ad:98:5c:12:d5:
         ff:26:6a:3f:50:9d:3a:00:1b:5d:aa:cf:ee:48:c9:d6:c8:71:
         2f:de:ff:0f:f6:dc:98:dc:2f:fd:6c:47:6a:54:00:a8:5f:0e:
         38:74:0a:a5:13:53:c0:81:14:f3:ec:a0:f5:f9:a2:94:90:85:
         09:70:09:1e:07:0e:d5:27:62:50:03:0e:7b:ab:7d:f4:fd:88:
         2f:cb:96:41:bf:6b:39:be:7b:b3:27:1a:af:06:00:f2:0f:6f:
         02:c7:20:9c:41:40:e8:29:ac:e2:b7:18:48:77:24:37:62:5b:
         b1:ec:db:c3:f2:f0:56:5e:8d:2e:bb:cd:bf:81:6b:52:90:3f:
         06:17:e4:89:d9:51:9d:9a:fb:90:a7:8f:96:f5:a8:61:39:c8:
         d2:0e:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:30 2026 by rpki-client