Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          Fx9WGTLJYtU1FqdjMjTEyMVZRL3KmI6wQcw4ncO5www=
Subject key identifier:   97:45:78:90:00:6F:23:06:DB:C0:5E:51:E2:E1:96:15:1C:B7:BF:55
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          0206
Signing time:             Mon 11 May 2026 03:08:46 +0000
Manifest this update:     Mon 11 May 2026 03:08:45 +0000
Manifest next update:     Mon 18 May 2026 03:08:45 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: L+pbM/i3uclwZYwXCNMzOA8jBabtUa0HQElra/DA0yk=)
                          2: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 5f3PGGQ4lIHquQnRshVK4NbBoJAP65xZO5Xtmj/sUr0=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: QXAEGZzwRw0h1gNPZ7PlUf/rgAFsJhEDsbChop9gPBY=)
                          4: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: I5QliwvYU+6XY3uLDux2ljdugQkjPvN8suXRu5XZZMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: May 11 03:08:45 2026 GMT
            Not After : May 18 03:08:45 2026 GMT
        Subject: CN=6a01483e-6fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:53:3f:bd:22:90:1d:b0:35:fb:33:79:04:
                    1e:55:c2:9e:76:a1:eb:a9:0a:08:c5:f2:1f:b7:2b:
                    80:db:60:75:ee:6d:6c:06:36:8d:b0:17:2e:24:79:
                    40:1b:fa:68:0f:bf:58:49:8a:d4:82:be:98:0e:71:
                    c5:4b:27:f8:70:35:f2:66:a5:63:bc:ae:d3:94:ba:
                    a6:e1:4f:16:ee:db:f8:40:9b:d6:9a:4a:99:46:3f:
                    53:52:20:c5:b8:9b:18:0b:47:d6:b5:a8:12:eb:bb:
                    ef:bd:61:63:f0:38:cc:da:ce:c5:a1:1a:cd:c0:a8:
                    11:bf:80:4d:21:42:0e:75:79:5b:86:7a:b3:ff:dc:
                    c2:43:a9:59:64:ca:31:a3:0b:2e:50:83:21:ed:4c:
                    74:f5:1d:86:99:11:12:5e:20:2e:8d:c5:1f:c8:06:
                    b6:8f:96:e8:a5:6a:0f:93:8b:d9:d9:bb:3d:ba:74:
                    45:61:14:51:d0:69:02:a0:2e:2b:53:86:0d:84:ee:
                    37:3a:07:85:d7:8a:67:b4:d6:5a:44:0f:ac:e7:56:
                    86:2e:0f:d0:62:1a:8f:74:1e:8c:a8:ee:bd:b4:a7:
                    30:d7:df:6b:42:96:4a:b3:62:cf:72:d9:20:03:41:
                    6e:16:69:91:80:a0:8d:90:c9:62:0a:b7:0a:f5:19:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:45:78:90:00:6F:23:06:DB:C0:5E:51:E2:E1:96:15:1C:B7:BF:55
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:7d:b6:f6:a9:b5:39:8f:22:f1:1f:47:75:88:61:4b:e2:
         2e:50:f8:73:57:89:eb:79:a0:b1:47:73:1f:4e:7a:8e:1b:91:
         32:d2:4c:e8:be:d7:17:3c:8d:e2:f6:fc:b6:a1:e5:ee:02:76:
         cf:5b:af:db:69:b8:0b:9f:83:ca:54:d1:3a:94:d5:4e:19:aa:
         53:e1:13:1b:bc:53:ad:e7:3d:9b:11:93:e2:83:01:de:46:e6:
         48:46:ba:5b:ff:69:01:9c:3e:41:c6:22:42:c4:af:d1:c9:2b:
         74:f4:a9:b2:61:63:fd:cc:89:78:57:ea:39:5b:2c:f1:db:d7:
         65:4c:f4:6e:4b:f1:92:97:54:0d:42:8a:01:af:1e:43:01:2e:
         f7:28:8f:ae:03:8c:4f:fd:e0:c1:17:83:30:d0:b7:ba:ba:44:
         72:f2:6b:2b:26:08:38:ff:30:d3:e3:04:1c:76:b8:b0:66:2c:
         8b:c5:b2:1b:f0:93:5b:60:3f:b5:79:3a:1f:80:c2:31:4f:8f:
         d4:d3:21:fe:7b:b5:66:92:f0:9c:a2:dd:ae:32:e3:4c:d2:e5:
         c0:c0:20:54:0b:4a:37:d2:35:4e:b3:78:66:62:1b:60:72:33:
         48:4a:65:21:9f:91:7a:df:0e:c3:6b:3f:44:94:4c:71:8f:ae:
         e8:c4:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:58 2026 by rpki-client