Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
File:                     jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json)
Hash identifier:          SNSL0/IUsuH0A0tsbOGVIiqzfIPi1Jc7HDehmGVhiT0=
Subject key identifier:   08:95:AC:94:7D:DE:26:21:92:6B:45:0F:2F:B3:9F:70:AC:A6:5C:BB
Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
Certificate issuer:       /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
Manifest number:          017A
Signing time:             Thu 23 Jul 2026 06:09:25 +0000
Manifest this update:     Thu 23 Jul 2026 06:09:24 +0000
Manifest next update:     Thu 30 Jul 2026 06:09:24 +0000
Files and hashes:         1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: qPRfUB4QY50SD5c1UUEb7Bs1RgIKdYjLMRKaMW/hC/g=)
                          2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 9bbDY8F7VTJe7fWMHNRwEy390EAPlvg4QCMeRuahlMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
                          rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
        Validity
            Not Before: Jul 23 06:09:24 2026 GMT
            Not After : Jul 30 06:09:24 2026 GMT
        Subject: CN=6a61b014-7662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:8b:7f:51:dc:98:0d:bb:53:16:f2:a0:bd:
                    b1:1d:64:82:a9:2e:d6:cf:cb:a9:47:1e:ff:c2:a2:
                    09:16:92:90:e5:fd:c9:4e:6f:c5:82:c8:ae:56:75:
                    78:79:3e:cf:6f:79:f8:6b:55:5b:3b:62:fc:23:57:
                    b5:30:fc:33:6f:97:33:19:fc:a7:3d:c2:a8:d4:eb:
                    d8:76:48:a9:49:6c:d7:aa:62:ef:57:10:f5:99:6b:
                    8a:8f:79:b6:b3:cd:a8:3c:59:13:a8:95:89:55:75:
                    1d:f2:84:c9:49:f9:f2:d3:3b:62:5b:9f:21:32:4d:
                    38:16:7d:bb:26:6e:7a:1c:9c:86:76:a5:3f:aa:53:
                    83:ee:39:f9:13:92:42:e5:5d:fd:71:5a:59:e5:5e:
                    7f:86:41:70:2b:c9:0f:44:4c:71:11:4c:01:f8:d4:
                    2a:fa:19:19:b6:f7:01:0c:c0:0a:ce:45:12:f3:c1:
                    86:6e:4f:3c:b8:2f:60:d1:d7:8f:ce:2d:2c:5b:76:
                    d1:65:fa:7f:5a:a3:da:f1:25:da:b0:1f:84:1c:cb:
                    b6:e7:65:58:da:7f:a6:b1:cf:e8:e7:86:a8:db:f2:
                    c0:b3:02:c8:5a:1b:31:67:51:37:c7:dc:8d:06:9c:
                    59:fb:46:cf:17:25:80:8f:3e:06:e0:73:10:c3:08:
                    ac:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:95:AC:94:7D:DE:26:21:92:6B:45:0F:2F:B3:9F:70:AC:A6:5C:BB
            X509v3 Authority Key Identifier:
                keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:98:91:92:77:cb:00:ef:c6:fe:cd:67:91:3a:33:8e:ef:
         a7:20:f3:2d:ff:90:4e:4d:2f:9b:de:c2:8c:5b:3e:4c:70:22:
         39:76:dc:75:6f:24:aa:0b:e2:b8:43:08:f1:a7:6a:bd:28:04:
         03:06:3f:26:ee:68:dd:97:5a:7a:c4:c8:fb:ad:a5:04:dd:e5:
         5c:77:21:23:c2:a9:bc:38:45:d8:7b:c7:f1:7b:16:21:c9:68:
         2d:97:04:26:0f:fa:01:fe:45:42:ff:99:10:ec:fc:cf:57:d9:
         a8:b8:d7:d0:d1:e1:e5:9f:0c:10:ae:05:f6:f7:50:ce:3b:96:
         d9:61:17:75:7b:5e:8f:7a:93:ec:bb:22:c4:0d:ed:d7:5c:86:
         19:89:93:c4:4c:4f:9e:75:91:28:f6:8e:23:9b:67:b7:dc:9a:
         ab:78:a9:c9:48:22:f4:b1:47:64:17:2c:14:10:0f:3b:cc:3a:
         00:84:b2:c9:c3:ee:9d:2e:fe:b7:f2:ea:3a:9d:86:b0:09:b2:
         c0:4a:21:18:b5:67:b1:ab:48:be:aa:73:10:b4:a6:c0:4d:2b:
         29:f4:31:47:d7:7c:ec:6c:40:91:c2:27:43:45:a3:01:49:1b:
         3b:74:b6:62:41:66:a8:f5:9b:5b:c3:80:40:a2:95:a9:a9:85:
         d6:fb:ac:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:14 2026 by rpki-client