Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File:                     JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier:          /YZnHDP0HeJzDA3tQoByR3GVEXU2927Mk9M8vArzxGc=
Subject key identifier:   B2:A5:FD:AB:96:DF:C8:EF:52:19:58:B1:36:4C:6E:AC:87:94:15:26
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer:       /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial:       25AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number:          2593
Signing time:             Tue 12 May 2026 15:44:39 +0000
Manifest this update:     Tue 12 May 2026 15:44:39 +0000
Manifest next update:     Tue 19 May 2026 15:44:39 +0000
Files and hashes:         1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: pg/po4DTC8BzqF6rbRx0JQYdLTaPw9yOTTbuoHo6MLE=)
                          2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: hS+s1nIXItEij56ye/fB0UYF3lqIxxiOI5UAFSDn8N8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9643 (0x25ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
        Validity
            Not Before: May 12 15:44:39 2026 GMT
            Not After : May 19 15:44:39 2026 GMT
        Subject: CN=6a034ae7-e542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:4a:e9:ff:c1:3c:60:d8:59:53:25:21:e1:
                    f1:70:0d:b3:85:5b:e7:16:f0:72:7e:9b:71:3d:db:
                    e9:4b:8f:75:79:5f:40:b5:54:f9:58:f3:68:95:2a:
                    97:78:a5:bd:a1:4c:e4:0e:57:fe:23:c9:2a:14:41:
                    ca:e8:68:c0:5d:1d:59:fe:18:20:f9:1a:82:55:be:
                    8d:6d:30:8d:8c:4e:28:c5:0f:1a:0b:da:4f:b9:93:
                    5f:34:0f:01:9f:60:b2:23:14:f1:91:f4:2f:a5:ed:
                    2a:10:d2:e1:0b:43:22:18:cc:5d:ee:f6:60:60:4b:
                    1f:e9:35:b4:0f:d8:fd:69:20:8e:8d:53:e1:d7:94:
                    8d:9f:61:91:3f:3e:e0:d5:c6:26:15:dc:51:24:92:
                    60:75:3c:90:36:0d:eb:67:dc:dd:b1:c4:4f:b4:46:
                    4c:24:c3:c9:52:96:a9:95:16:0b:6b:db:b5:f9:e6:
                    4e:15:44:79:b3:48:de:c9:02:38:f7:fc:a2:85:da:
                    63:24:63:dd:7a:a9:6f:3e:8f:48:a5:4b:60:06:fd:
                    db:0e:1c:6c:53:be:f1:64:e1:52:cd:86:c1:0b:d2:
                    ea:8d:8d:06:e4:e4:34:20:4c:b9:37:7f:f2:24:25:
                    e9:a4:bb:a7:00:ce:3b:05:9f:d7:35:1e:dc:10:96:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A5:FD:AB:96:DF:C8:EF:52:19:58:B1:36:4C:6E:AC:87:94:15:26
            X509v3 Authority Key Identifier:
                keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:74:d4:df:2b:a8:4f:57:06:25:e0:4a:a7:20:3d:b1:75:6d:
         e2:89:fb:ee:25:64:c1:bd:17:0e:b9:2a:23:ec:86:49:b5:d8:
         74:12:3b:cc:01:9f:48:94:25:2b:8e:5e:3a:22:67:b5:2e:14:
         72:45:5a:6b:7b:11:9b:ec:48:ac:c6:7d:af:9f:af:4a:51:99:
         73:ee:56:38:b7:c1:d6:62:8f:1f:4a:91:fd:fa:73:4e:d4:f3:
         33:b1:87:97:ac:e0:54:28:d6:cf:75:e7:34:d5:bb:a8:d0:63:
         8f:e5:fb:6d:a9:e4:25:d0:a1:bb:ab:6e:bf:23:55:cc:13:5f:
         3e:17:c4:b5:b3:80:29:37:43:30:78:d4:84:77:45:c8:cd:dc:
         9f:e1:8e:86:30:4e:e6:d8:a2:3f:8f:aa:ca:e2:60:a9:45:01:
         7c:c2:cc:23:8a:61:56:4f:92:33:ea:20:6a:1d:1b:07:9c:8b:
         3b:16:dc:2b:c9:6b:71:cf:67:31:87:e1:47:2c:e3:63:44:8e:
         b0:57:80:63:15:ff:15:fe:0d:28:34:a3:dc:77:b5:07:c7:56:
         22:12:83:74:00:2c:a9:1f:97:2e:48:38:fb:47:92:c0:34:cc:
         53:23:af:6b:3b:f2:29:69:67:3a:98:8a:c8:63:cb:00:c7:17:
         fb:61:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:47 2026 by rpki-client