Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          PxhV5zSRElAmt9aXOYD2Di8PLci7ZanvdjCpbTHTmCc=
Subject key identifier:   96:ED:94:D8:03:1F:42:2A:DE:7E:5A:8C:7E:40:4C:A9:DD:FA:10:42
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          022A
Signing time:             Thu 23 Jul 2026 04:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 04:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:46 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: enL5eCx7gkORcvCQtugiPCx5Ok+RqmTpA+z86IlY1K4=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: I5QliwvYU+6XY3uLDux2ljdugQkjPvN8suXRu5XZZMM=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: QXAEGZzwRw0h1gNPZ7PlUf/rgAFsJhEDsbChop9gPBY=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 5f3PGGQ4lIHquQnRshVK4NbBoJAP65xZO5Xtmj/sUr0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Jul 23 04:00:46 2026 GMT
            Not After : Jul 30 04:00:46 2026 GMT
        Subject: CN=6a6191ef-3a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:24:f4:3c:07:08:2f:d4:1b:ae:0d:ee:d8:
                    82:b0:89:79:9f:86:3c:fe:67:ac:4d:2a:d0:b1:8c:
                    13:9c:d2:52:8f:0f:4e:52:e5:0c:77:d7:0f:f5:f8:
                    00:da:1c:b0:ef:c2:e0:5c:4a:8c:51:9c:e9:e0:5d:
                    04:d1:f5:f3:e0:cd:78:b1:ec:bb:26:47:4c:93:12:
                    aa:97:16:d8:16:ed:83:be:17:11:87:30:dc:97:d9:
                    48:a7:5a:3b:cf:ac:68:ed:df:e5:98:56:37:de:4a:
                    bf:9e:ef:2d:f3:69:e7:33:27:ab:71:97:bc:57:48:
                    46:12:aa:e3:21:e0:ef:be:af:da:4e:28:a5:3d:93:
                    04:3c:91:00:c0:a2:77:b1:f3:ec:e1:ec:c2:7e:90:
                    14:93:cd:e2:74:4a:01:c6:ea:9a:9d:bb:ec:01:0e:
                    74:ea:13:a9:1b:0e:f2:95:8d:a5:0b:1a:ae:0e:1e:
                    e8:ed:74:58:f9:d1:62:b8:6e:4d:3e:07:c8:bc:9b:
                    39:2f:a0:6f:be:17:5a:63:b0:89:bf:58:10:26:d5:
                    ea:9b:34:96:fb:75:58:0d:a1:4e:72:70:5e:11:77:
                    ad:9b:ed:c1:d1:5e:d3:d2:f6:cc:c7:3d:ce:6e:c9:
                    ed:9c:5b:09:5f:37:b9:ce:54:86:d6:24:76:fc:d0:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:94:D8:03:1F:42:2A:DE:7E:5A:8C:7E:40:4C:A9:DD:FA:10:42
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:8c:0f:25:27:92:1e:14:b9:b3:c8:da:ea:62:63:9d:ec:
         81:49:87:2c:7a:9f:4c:20:4c:b2:f2:a1:84:ea:df:63:66:dc:
         d3:87:d1:35:c5:df:0d:6f:89:1c:ee:f2:90:e4:58:1f:93:01:
         7a:57:7a:21:2a:71:14:9a:38:6a:63:e7:84:bd:18:94:86:88:
         f4:ab:3f:dd:ab:e3:d6:7c:15:73:f9:93:81:47:8b:2a:25:0b:
         6e:1d:cc:35:3b:11:80:29:03:2a:ce:29:bf:13:16:1f:b8:a0:
         ab:73:c7:44:91:99:10:71:3a:8e:16:85:23:ee:d6:7e:1e:80:
         0c:ec:a1:70:ad:a5:5d:d4:a7:4c:0e:b8:93:59:c6:d7:31:70:
         34:9b:6e:57:51:0d:ad:75:ec:29:94:b5:d7:8c:cb:73:dd:ee:
         b6:28:64:ba:b2:36:06:f2:3b:01:30:ef:69:8e:89:cf:f2:af:
         33:44:3b:58:8c:ef:86:0d:d0:76:b3:77:0c:97:8f:50:99:c7:
         37:2b:8a:56:a2:86:a8:76:99:72:89:50:39:d1:a4:c1:a6:79:
         9f:e3:5b:b3:ab:57:8b:22:62:2d:ed:84:79:e3:e6:c0:61:8c:
         88:f1:0c:b8:33:41:a2:a5:0b:f3:e7:42:8f:f9:f6:31:10:72:
         bf:49:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:23 2026 by rpki-client