Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File:                     jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier:          86XVnqykgFPgBn7GWSMC8ZzYMVtxfb482lt71rzTZGo=
Subject key identifier:   CF:61:52:5C:F3:69:51:FE:F4:7D:D3:1F:EE:B7:BC:1D:1B:35:C1:C3
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer:       /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial:       1CAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number:          1CA2
Signing time:             Wed 22 Jul 2026 16:15:30 +0000
Manifest this update:     Wed 22 Jul 2026 16:15:30 +0000
Manifest next update:     Wed 29 Jul 2026 16:15:30 +0000
Files and hashes:         1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: ObMPZgMjfMYq6QB87bqEyrEGyumuz1tKNyh8LeABgtk=)
                          2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: k4TlMYilN23yIOsOzxylamYG8qpDaep1a1zgx1W7uB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
                          rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7343 (0x1caf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
        Validity
            Not Before: Jul 22 16:15:30 2026 GMT
            Not After : Jul 29 16:15:30 2026 GMT
        Subject: CN=6a60eca2-2c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:7b:68:52:6c:6e:f4:0c:6e:04:0f:52:c1:
                    49:6d:0c:34:3d:84:8e:fb:bf:75:da:d6:8b:40:5d:
                    0d:d2:b3:d7:cc:99:85:7e:f1:3a:84:7f:36:09:4c:
                    1d:c3:1f:12:ba:56:61:4a:9c:45:63:63:2c:8f:6f:
                    36:e1:73:fb:d5:8d:9b:6f:45:78:23:9b:bd:d4:ec:
                    80:b4:7b:81:25:c7:1f:8f:39:bc:3e:91:f7:38:1d:
                    5a:d7:09:41:1d:35:e1:9b:23:9a:50:3e:af:31:8e:
                    d4:c5:7f:6a:9f:04:ff:11:4b:d2:70:64:e7:cd:23:
                    a6:48:34:aa:a8:ba:7a:b5:f1:1c:2b:f6:39:20:38:
                    a0:57:b7:ea:e5:ef:e4:d5:6f:ff:26:45:04:bf:6d:
                    5e:57:2b:fd:9c:27:1a:1f:db:35:84:2d:d3:38:78:
                    65:08:67:e8:f1:e0:2a:ac:e0:b5:03:1c:99:99:a0:
                    ef:8f:82:54:62:34:10:5a:56:1e:1e:92:c2:3c:fc:
                    18:3c:7c:94:09:71:9c:5e:91:6a:f4:ce:a4:d6:76:
                    bf:86:01:b1:c3:0f:41:8e:e2:d9:62:54:89:e2:6e:
                    3b:c1:7e:79:33:83:d8:e3:8e:07:40:8b:14:f8:5b:
                    70:32:af:76:91:60:fc:cf:7a:c5:24:a7:e0:4c:13:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:52:5C:F3:69:51:FE:F4:7D:D3:1F:EE:B7:BC:1D:1B:35:C1:C3
            X509v3 Authority Key Identifier:
                keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b2:85:18:89:d8:b5:bd:fd:b9:25:0e:50:a2:2f:86:02:64:
         7a:d8:67:e4:f4:7c:22:b0:c7:75:c7:eb:c7:47:80:66:a4:29:
         08:70:70:f4:0a:87:14:83:1c:ed:17:69:9e:30:b8:a4:35:b6:
         1c:b6:9a:69:76:20:c9:41:3e:25:5d:8d:b2:f9:4a:2e:c8:fb:
         7c:45:c7:4f:41:42:47:13:1f:cc:c2:04:c6:1b:53:f6:79:73:
         0b:ca:f4:5a:bf:6d:7c:3a:d3:e3:29:f1:3e:a2:49:ba:35:84:
         bb:35:67:a6:15:99:32:b5:f6:af:7e:46:df:79:d1:b7:39:92:
         92:68:4d:3a:f6:27:8a:ef:29:d9:f6:77:3b:18:0e:ec:05:2e:
         f7:a5:ed:a7:3c:ba:9d:87:14:5c:5c:81:0e:d9:ec:cc:1c:d2:
         c8:ff:42:85:a0:c0:f4:d8:89:59:8a:be:50:40:1c:ff:ee:93:
         9d:74:b3:b3:9f:a5:f8:70:19:43:00:e7:c0:62:d5:00:62:71:
         e8:7b:68:85:12:ff:b0:79:c0:3a:d5:17:00:a0:15:e3:83:ba:
         63:28:62:ba:14:7f:a9:a5:2c:33:14:b6:20:a7:1b:0c:67:13:
         eb:97:30:7c:c1:8c:28:fa:42:c7:1b:17:8d:76:33:69:82:86:
         7e:26:67:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:41 2026 by rpki-client