Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
File:                     JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json)
Hash identifier:          y8VMLX4nOnYb5ZSRDNjyPpcH/nHsaIV8VEm4LhjvH/Q=
Subject key identifier:   C7:AC:35:E5:03:AC:3E:69:A4:5B:D4:8D:CD:7B:FE:D3:A5:6D:52:55
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Certificate issuer:       /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial:       08EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
Manifest number:          13F9
Signing time:             Wed 22 Jul 2026 19:39:12 +0000
Manifest this update:     Wed 22 Jul 2026 19:39:12 +0000
Manifest next update:     Wed 29 Jul 2026 19:39:12 +0000
Files and hashes:         1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: ZWwcw5kcSrm1aQLDsfaWHe0hu181HwuvWIiLmVjlVjw=)
                          2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: vM0V/shhUOo/yI8LQ9Ql73pjesyven5lDiLBb4Vn1tU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
                          rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
        Validity
            Not Before: Jul 22 19:39:12 2026 GMT
            Not After : Jul 29 19:39:12 2026 GMT
        Subject: CN=6a611c60-e73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ec:22:92:4f:39:b9:9c:45:7e:6b:b5:72:55:
                    ab:36:87:77:f5:eb:5b:7f:b0:fd:5c:5f:f5:81:92:
                    bd:60:20:bd:90:3f:22:98:d3:0a:89:b1:0b:16:48:
                    95:94:e1:b3:3b:0b:94:a2:9f:1b:af:d1:33:9e:85:
                    8a:01:3a:a2:ee:48:bf:76:97:60:da:26:9a:10:c7:
                    5b:38:0a:b1:94:98:4c:c4:32:40:6c:6a:e3:53:f4:
                    3a:36:65:ac:28:ac:8f:bd:8d:b7:4e:69:77:a8:09:
                    7d:b8:e9:e3:03:bf:09:6a:66:7a:11:79:dc:b3:cb:
                    d8:af:59:4d:07:0b:7e:6e:e7:52:68:51:af:7a:5b:
                    f3:c0:76:5c:28:b4:ec:e0:ac:bb:70:33:a5:55:8d:
                    05:ce:9c:8e:e3:a4:cd:24:ad:07:a3:9a:3c:3a:ec:
                    bc:ff:91:a5:12:34:b7:04:d8:b2:e0:77:ff:81:5b:
                    70:35:eb:5d:7d:b4:52:a3:2a:0b:8c:d2:c1:04:de:
                    17:bd:71:ff:ad:57:c1:42:0b:3d:f4:19:5d:f1:ee:
                    7b:65:c2:10:96:9f:a8:b0:c3:fb:63:5a:a3:e0:25:
                    f8:5e:47:a5:95:35:76:4f:c9:95:a0:7e:72:e4:31:
                    fd:29:ce:f4:6a:ad:c5:7c:9c:63:55:76:49:04:93:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:35:E5:03:AC:3E:69:A4:5B:D4:8D:CD:7B:FE:D3:A5:6D:52:55
            X509v3 Authority Key Identifier:
                keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0c:7a:ed:0f:8f:10:00:91:5b:ef:8a:f5:d4:7a:22:c0:3d:
         72:29:c9:d3:e0:9a:69:48:5a:16:3f:bf:75:07:c9:3f:b6:f0:
         54:c0:ae:54:d1:80:f7:d8:d0:c6:0b:93:aa:a1:6b:9d:82:c1:
         0b:73:8d:0c:6a:3e:ff:6c:54:9d:57:cc:ef:d2:9e:ea:39:f0:
         30:3e:53:50:fa:e0:d4:e5:bc:04:e7:7f:a1:2c:cc:cd:76:d3:
         7f:bb:21:1c:17:17:c5:77:6e:56:81:60:53:98:be:28:bd:fa:
         08:39:b0:fc:d3:b7:7d:ec:2a:14:b6:d1:c1:0d:c6:67:bd:d7:
         1c:89:51:06:1b:7d:49:f0:74:0b:c8:29:65:19:3e:84:17:fa:
         79:b4:d2:02:df:4c:e4:31:2a:25:15:38:b4:97:ae:e4:71:9b:
         f7:41:81:a9:c1:9f:ce:5a:43:2a:ed:b5:ad:8f:fc:8e:5c:b5:
         37:bc:fa:31:d8:ee:26:ac:c4:35:da:eb:b9:50:86:08:2a:a8:
         cf:cf:94:b7:ea:1a:4a:db:77:2d:40:b5:2a:6a:52:ec:33:0c:
         d2:f4:92:3c:d4:26:e7:a4:f2:cb:2e:e7:27:61:3d:53:0c:ae:
         f3:44:e4:83:2b:d4:5a:af:76:6f:84:e6:88:88:28:27:fd:59:
         ec:b8:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:47:13 2026 by rpki-client