Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File:                     JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier:          b1tL2K9RpSVSHaSDoqyout/QHrNINklyIKAH5rIcUF4=
Subject key identifier:   E2:99:64:CF:88:60:19:27:C7:FF:EC:23:B1:01:23:ED:66:88:B3:57
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       08BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number:          0896
Signing time:             Wed 22 Jul 2026 21:10:58 +0000
Manifest this update:     Wed 22 Jul 2026 21:10:57 +0000
Manifest next update:     Wed 29 Jul 2026 21:10:57 +0000
Files and hashes:         1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: U2NB7RrQPvECOrmXkxJIeY9eMHnJYRlQ9UAurtA1bQA=)
                          2: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: m0VczHunCUj3NnxAFWU5QA67YBiWaVQ6jnViwqflf+8=)
                          3: 7AE0B322AFEB11F08458536FC4F9AE02.roa (hash: 9sJCZKKfgfjBQ9o8IhmGd8UYq/aKs+NwoAZL/4isg5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Jul 22 21:10:57 2026 GMT
            Not After : Jul 29 21:10:57 2026 GMT
        Subject: CN=6a6131e2-3511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:52:a4:37:14:33:96:8b:f1:ed:6d:d2:1d:
                    f1:7d:b9:b0:27:65:5a:f8:fa:04:7d:85:fe:a7:bb:
                    84:c7:de:1b:8e:20:b0:8f:9e:b8:0e:30:7b:33:3a:
                    b8:14:cc:59:81:c2:f1:15:bc:f1:28:65:78:07:f7:
                    2b:4c:b7:e4:20:ea:e1:38:5b:7e:b4:90:29:78:bb:
                    57:26:e4:da:ca:a0:92:e0:57:75:85:a3:d0:44:cc:
                    fc:b8:5e:2a:fa:36:f3:02:16:08:a8:d2:20:48:f6:
                    48:56:d7:ee:0f:68:d9:fd:26:7c:59:01:a2:6e:d2:
                    79:9a:e8:f6:6c:e4:7b:a1:d8:05:89:5c:a0:eb:c7:
                    f5:25:65:f5:a8:d0:b2:ef:37:bb:83:d8:65:4a:1b:
                    ed:e9:e8:03:db:6e:40:d5:c7:ff:79:3b:4e:be:bc:
                    c2:04:82:00:b4:1e:95:84:8a:0f:47:81:e6:82:46:
                    07:9c:40:da:69:97:80:90:23:58:16:8e:d7:53:c5:
                    df:c6:27:81:c1:b8:78:bd:1e:b6:33:58:c7:5c:36:
                    f4:d7:9e:75:59:d1:3a:01:9c:0a:15:b4:c2:94:bd:
                    8e:ca:fe:23:af:d3:8b:d0:ee:a6:f5:21:34:0e:a8:
                    46:e9:a7:06:b7:d4:bb:af:38:ef:5d:f0:76:41:56:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:99:64:CF:88:60:19:27:C7:FF:EC:23:B1:01:23:ED:66:88:B3:57
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:76:d7:54:30:4b:c9:ef:1e:6d:68:6d:7d:32:bb:2b:be:e8:
         42:d7:01:d8:ed:f6:59:07:48:c8:82:00:84:1c:2e:d6:89:ae:
         52:18:bf:73:68:c7:9a:44:74:33:30:20:bd:14:86:07:f1:0d:
         4e:5d:e3:fc:96:0e:11:98:9b:e8:7a:89:08:11:39:d6:72:1a:
         bc:cb:bb:b5:49:64:17:67:52:28:10:15:a4:cb:a7:04:e9:7d:
         a5:9e:44:a5:b9:b1:d7:b5:59:59:f7:15:e1:76:76:65:60:4a:
         61:97:bb:8c:a4:9b:a5:37:f4:c2:65:c0:7f:1d:0b:27:da:44:
         c0:2d:89:a4:09:6f:a5:07:f4:d4:91:8d:f6:a7:41:c3:be:e4:
         51:3e:5e:88:d4:ae:e9:e9:0d:94:48:70:f9:27:2f:f5:ae:63:
         f9:16:46:19:dd:6d:a2:cf:1d:c9:af:be:a5:d4:4b:4b:e9:c9:
         56:1c:b3:84:e5:dd:7c:0e:3f:7b:fa:c7:54:89:62:bd:ee:5a:
         c5:7b:08:df:60:9a:c4:55:2c:e3:1d:d6:e8:2b:1e:60:06:b2:
         a1:38:44:db:af:61:c5:69:2d:e8:7e:98:52:2e:ea:da:71:21:
         e9:7f:02:aa:b3:a2:97:fa:ba:56:46:49:d6:0b:e1:67:eb:e4:
         3f:a1:b0:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0
OTg2RERGMDgwHhcNMjYwNzIyMjExMDU3WhcNMjYwNzI5MjExMDU3WjAYMRYwFAYD
VQQDEw02YTYxMzFlMi0zNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlgBSpDcUM5aL8e1t0h3xfbmwJ2Va+PoEfYX+p7uEx94bjiCwj564DjB7Mzq4
FMxZgcLxFbzxKGV4B/crTLfkIOrhOFt+tJApeLtXJuTayqCS4Fd1haPQRMz8uF4q
+jbzAhYIqNIgSPZIVtfuD2jZ/SZ8WQGibtJ5muj2bOR7odgFiVyg68f1JWX1qNCy
7ze7g9hlShvt6egD225A1cf/eTtOvrzCBIIAtB6VhIoPR4HmgkYHnEDaaZeAkCNY
Fo7XU8XfxieBwbh4vR62M1jHXDb01551WdE6AZwKFbTClL2Oyv4jr9OL0O6m9SE0
DqhG6acGt9S7rzjvXfB2QVatawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKZZM+I
YBknx//sI7EBI+1miLNXMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx
NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f
eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlnbXVDBLye8ebWhtfTK7K77oQtcB2O32WQdIyIIAhBwu1omuUhi/c2jHmkR0
MzAgvRSGB/ENTl3j/JYOEZib6HqJCBE51nIavMu7tUlkF2dSKBAVpMunBOl9pZ5E
pbmx17VZWfcV4XZ2ZWBKYZe7jKSbpTf0wmXAfx0LJ9pEwC2JpAlvpQf01JGN9qdB
w77kUT5eiNSu6ekNlEhw+Scv9a5j+RZGGd1tos8dya++pdRLS+nJVhyzhOXdfA4/
e/rHVIlive5axXsI32CaxFUs4x3W6CseYAayoThE269hxWkt6H6YUi7q2nEh6X8C
qrOil/q6VkZJ1gvhZ+vkP6GwEA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:16:03 2026 by rpki-client