Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File:                     JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier:          7lHz24jV9vPjhOz63B2QuH8hWMOMK1EbIfxECWdmpB0=
Subject key identifier:   DA:65:72:5F:EB:22:83:C1:4A:84:C7:4F:8A:C4:AE:DE:D4:6E:95:1F
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer:       /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number:          0196
Signing time:             Mon 11 May 2026 04:27:24 +0000
Manifest this update:     Mon 11 May 2026 04:27:23 +0000
Manifest next update:     Mon 18 May 2026 04:27:23 +0000
Files and hashes:         1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: 1pHALUMdokdnCZY8wYsVkWOd+EQkHE6MT2tq4Yfqq8A=)
                          2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
                          3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
                          rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
        Validity
            Not Before: May 11 04:27:23 2026 GMT
            Not After : May 18 04:27:23 2026 GMT
        Subject: CN=6a015aac-523d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:13:44:fc:d5:37:df:ec:f9:8f:57:55:dc:
                    ce:48:d6:92:27:9a:50:b8:c9:31:ca:05:5a:f0:2b:
                    e9:e4:78:4a:df:64:d8:50:02:e5:59:c0:c4:b8:dc:
                    d8:35:35:e6:cf:c9:ca:32:0e:53:0e:76:e0:59:7c:
                    22:70:3a:77:13:c1:06:ac:35:97:94:db:e8:37:1a:
                    b6:6d:16:69:dc:28:45:52:2d:0c:e4:33:a2:86:89:
                    dc:2e:03:70:e4:04:5f:11:6a:6e:fa:b9:cf:06:aa:
                    49:61:c0:e3:8c:eb:b4:a2:3a:9a:32:f4:42:35:48:
                    df:24:fc:7c:53:ee:8f:20:5a:f7:ae:3f:5f:77:0a:
                    46:1d:e1:01:ce:27:0e:cb:a5:06:56:b9:3e:1a:51:
                    15:6e:0c:83:72:e9:19:88:77:25:c8:5b:2b:62:87:
                    cd:25:0e:28:cd:f7:98:c1:72:2b:f6:67:17:84:02:
                    f3:11:99:50:68:14:93:05:94:7a:7a:39:59:ce:d9:
                    5e:22:1a:1b:8b:a4:81:50:be:af:4d:55:98:54:a1:
                    e8:3b:cf:d5:63:cf:16:29:cd:da:ae:97:34:e6:26:
                    ac:4c:35:a8:5c:22:c7:bc:ab:02:4d:29:ac:e6:11:
                    8a:03:fc:b7:04:33:90:56:c6:1e:96:2e:a2:b3:36:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:72:5F:EB:22:83:C1:4A:84:C7:4F:8A:C4:AE:DE:D4:6E:95:1F
            X509v3 Authority Key Identifier:
                keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:be:8d:d5:de:9c:61:09:61:5c:15:3a:c3:e1:8b:c7:84:b7:
         7e:f5:a9:56:16:84:83:42:83:b8:d4:3a:31:96:c7:a1:e8:fb:
         e4:4a:6a:b5:9d:44:e2:48:8d:b0:90:12:ef:6f:e0:41:7b:c2:
         0e:a8:7c:14:04:3a:99:df:3a:4f:d9:54:1c:c9:30:d9:58:fd:
         d6:ca:5e:ca:be:11:0b:bf:58:51:e3:db:1d:fe:84:88:b5:1f:
         ad:61:30:b8:36:25:7d:ed:28:44:68:69:9a:22:1a:06:57:bf:
         fd:8d:64:d1:48:f1:4b:3f:30:dc:ce:21:02:b9:cb:63:c8:b9:
         34:2d:51:62:8b:b5:55:33:05:92:2f:87:fa:96:8c:bc:d9:0b:
         35:0d:d9:b8:a3:38:76:b3:87:ce:ce:57:c2:a8:a0:b7:1b:12:
         78:3b:ed:99:92:50:2e:51:36:1e:b4:14:ce:69:bf:65:b0:e7:
         0e:9c:be:c4:f4:a9:a7:97:23:52:4b:38:94:4e:00:50:a1:8a:
         75:be:7f:a0:23:aa:f7:b8:4e:a1:ae:4c:72:e0:5b:99:2e:be:
         02:6b:84:2b:18:d1:cc:c4:d4:ac:1a:68:1f:25:83:5a:96:82:
         7f:3c:c9:f1:50:94:7b:db:71:73:da:9e:6b:39:20:36:c0:3a:
         69:32:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:28 2026 by rpki-client