Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File:                     JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier:          oQt2FpsSosgm5bKPmlU7G1SkgsjqQ7IbLDz9g0BCfGA=
Subject key identifier:   EC:C1:3C:47:B6:40:FA:B9:AD:A7:53:6F:17:3F:BF:60:E9:18:62:F6
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer:       /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial:       070F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number:          06F8
Signing time:             Wed 22 Jul 2026 22:52:19 +0000
Manifest this update:     Wed 22 Jul 2026 22:52:18 +0000
Manifest next update:     Wed 29 Jul 2026 22:52:18 +0000
Files and hashes:         1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: 7cQnWmQcCsfu4bsDSJB4sK7EJQ+xeyMl8CSMlIFphi8=)
                          2: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: nYcIeQB9IcGgvExSEHIx6oDpzX1PN/jNpepkPKnRr64=)
                          3: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: Tsypd5PAGds9yTda5JDqiyaHkJ9ezgmOq8JDQWBskdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
                          rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
        Validity
            Not Before: Jul 22 22:52:18 2026 GMT
            Not After : Jul 29 22:52:18 2026 GMT
        Subject: CN=6a6149a3-9f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:07:44:95:17:16:2b:99:94:bc:c0:7e:8c:
                    01:9b:dd:bd:b5:7a:63:f2:5e:a3:89:9f:b6:4d:30:
                    30:f3:7d:f5:f2:97:94:26:7e:94:ad:c0:e1:e3:f7:
                    9a:c9:47:1b:c7:da:bf:af:43:42:ad:b2:1d:b9:08:
                    1d:2d:3d:b1:d2:2d:cb:17:2e:d5:bd:d9:6d:df:6d:
                    78:a5:ff:02:ff:6a:40:91:64:e4:b7:d1:4c:b6:7d:
                    ae:12:4a:0f:dc:41:c3:0d:75:76:7a:7e:92:98:56:
                    30:d0:b2:93:1d:ac:b7:e1:c9:0c:f4:6f:7b:02:e9:
                    95:9f:37:7f:08:5a:68:67:0f:5d:a8:bb:85:92:f8:
                    c7:87:1b:7e:ba:12:56:83:c8:9d:96:63:55:ca:de:
                    7a:85:c6:3c:2c:6d:7d:4f:db:6b:f9:29:6e:cb:71:
                    b0:d6:d3:e3:1a:8d:37:1a:da:6b:dc:11:a5:15:6f:
                    ac:2d:9d:31:dc:9a:79:d8:06:d9:5a:9d:62:91:ac:
                    47:16:5f:17:c1:7d:f2:69:60:0b:71:44:a0:4b:71:
                    d5:59:5a:9f:83:aa:f7:f6:53:0e:ab:47:31:f4:48:
                    40:d7:97:02:50:69:33:e6:50:c5:f1:2a:6f:42:57:
                    00:b2:48:f7:d2:1c:47:b9:63:10:a1:af:10:6d:1b:
                    1d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:3C:47:B6:40:FA:B9:AD:A7:53:6F:17:3F:BF:60:E9:18:62:F6
            X509v3 Authority Key Identifier:
                keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:70:6c:2c:77:94:ab:ff:d0:f3:b9:44:85:7f:e6:fd:38:ca:
         10:07:3d:09:f5:b5:0f:2d:fc:b8:ec:7f:64:ca:74:59:97:84:
         9f:ba:c8:85:7f:58:c4:8a:ff:ae:37:98:53:2f:86:94:4e:7f:
         bc:d0:cd:cb:cc:67:b0:5e:e2:61:d8:c4:1c:dd:69:27:f4:a6:
         5d:9c:e1:f1:3c:8b:dd:b0:d3:6c:31:32:d1:d8:37:a5:0c:24:
         c0:09:0e:04:5c:6b:92:9f:36:cd:c5:eb:ff:c2:c1:19:12:75:
         87:f7:fa:60:18:c6:e8:e3:70:79:10:eb:36:f9:19:80:e1:21:
         1b:f5:a6:c2:91:20:7e:4d:6f:52:28:f5:52:94:98:4b:0b:86:
         6e:d4:11:d2:a1:30:07:6c:eb:ac:e4:3d:4e:ac:fa:35:27:15:
         a9:a7:e9:36:23:31:71:31:e6:a2:71:30:e6:00:28:80:67:e9:
         c0:11:a1:77:c2:82:73:2b:3c:e1:9b:70:d3:00:38:a6:db:38:
         90:18:bf:22:1f:6d:61:f0:2b:29:7f:f1:66:d1:3a:3c:af:ed:
         32:67:c7:5f:db:1b:f5:5f:c7:52:3e:b6:30:f8:19:c3:e0:a7:
         6f:62:56:ad:7a:6d:a7:5d:d5:c1:35:61:2e:75:2d:16:05:fe:
         d7:fa:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:06 2026 by rpki-client