Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File:                     jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier:          ncb9iumYgqJewrBSzviCIcE3Q78RWL2DlVzhiT7uQKA=
Subject key identifier:   67:77:41:C4:50:CA:D3:17:0A:00:41:2B:8C:43:37:66:90:B7:3D:BF
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer:       /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number:          015D
Signing time:             Thu 23 Jul 2026 06:37:24 +0000
Manifest this update:     Thu 23 Jul 2026 06:37:23 +0000
Manifest next update:     Thu 30 Jul 2026 06:37:23 +0000
Files and hashes:         1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: v1/qf+gqv2hK97V3a760ZM+v843sqxXjnleLKGCmNsU=)
                          2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
        Validity
            Not Before: Jul 23 06:37:23 2026 GMT
            Not After : Jul 30 06:37:23 2026 GMT
        Subject: CN=6a61b6a4-ca53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:2d:d8:34:0e:66:34:73:79:c0:83:37:20:
                    b7:34:21:e1:2b:6f:6f:bb:58:2d:15:b3:35:24:79:
                    3e:a8:a8:72:7a:84:47:60:6c:5a:6a:88:0e:d2:0d:
                    c9:80:5c:c0:15:4b:77:b8:b1:e3:6a:87:17:71:4c:
                    a2:9c:76:ba:51:9a:57:fd:d6:22:7f:56:6e:b5:ae:
                    a4:4b:3f:29:a4:24:31:c4:73:a6:2f:86:6d:b1:7f:
                    d4:82:3f:69:30:87:67:d0:b7:63:a4:30:d4:3e:90:
                    01:ea:fe:db:10:f9:c5:2e:af:74:36:3e:98:13:52:
                    83:b0:6d:f5:a8:01:05:63:88:23:fc:fc:9c:f0:d9:
                    dc:bf:68:9f:34:f5:32:d0:2f:79:72:c9:50:64:1e:
                    da:20:70:e2:11:6c:6c:00:ed:ba:f2:e2:ac:c1:37:
                    11:8e:40:ba:b3:3d:77:56:74:d0:ba:d5:dc:c7:6b:
                    66:f2:98:58:9f:c2:82:58:39:a8:2c:4b:25:d8:c5:
                    f2:d3:ca:95:74:7e:bc:01:74:8c:2f:7e:d2:87:ad:
                    e0:9f:e2:48:70:74:71:48:9a:75:d0:bd:16:1b:77:
                    c8:9f:68:cb:b9:b6:35:23:98:f7:83:f8:8a:fa:2a:
                    af:d1:d7:20:bd:7a:1b:5b:f1:bf:3c:dd:57:f9:c9:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:41:C4:50:CA:D3:17:0A:00:41:2B:8C:43:37:66:90:B7:3D:BF
            X509v3 Authority Key Identifier:
                keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:dd:de:e2:f6:d5:8d:6a:f3:16:37:fc:df:55:3a:72:75:
         89:cf:70:a7:24:c3:ca:67:c4:aa:38:ef:a0:16:43:9b:1b:21:
         54:b7:b3:d6:77:4b:f9:ea:03:86:e7:b4:ba:3e:98:10:2a:48:
         91:e2:38:4d:71:a6:8a:b5:59:5b:23:ba:9e:d5:f5:ab:72:6d:
         fd:ce:91:64:9f:f1:ec:4c:4a:ed:42:56:11:93:fc:be:f7:71:
         26:e6:92:7c:0d:c4:8c:3b:07:95:99:32:94:f1:15:e8:e5:f8:
         53:66:9e:80:00:fb:d8:f6:23:8a:39:d4:92:d2:de:2b:3d:c1:
         a5:04:d7:d9:d2:35:ce:f2:37:a6:83:fa:e7:d4:59:f6:a1:de:
         4d:e3:f4:b0:bf:b5:03:fe:6e:22:11:5d:68:eb:19:d0:6a:69:
         46:2d:74:96:9e:94:df:35:7c:98:e9:47:d4:da:c7:a7:67:3b:
         d2:ce:ea:c6:8e:96:91:43:7b:44:f7:42:6c:8d:32:05:6a:1d:
         7e:63:12:8c:a3:7c:8a:2e:72:30:66:26:5d:19:08:23:2f:d3:
         37:d1:ff:dc:87:f7:7f:c3:cf:fb:7a:e4:4d:fa:4f:b0:14:ca:
         5f:01:15:23:e0:33:91:d2:8b:2d:a2:a7:c8:cd:19:f4:1b:cf:
         ec:34:39:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:18 2026 by rpki-client