Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
File:                     jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json)
Hash identifier:          6wex2vz41noIyCDTZp3x5Eky3OfChLCRYAOFfkcx1cA=
Subject key identifier:   08:31:0A:AB:A5:24:B8:68:52:A5:32:C9:6B:10:7D:B3:47:E5:BB:48
Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77
Certificate issuer:       /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
Manifest number:          0222
Signing time:             Wed 13 May 2026 02:49:48 +0000
Manifest this update:     Wed 13 May 2026 02:49:48 +0000
Manifest next update:     Wed 20 May 2026 02:49:48 +0000
Files and hashes:         1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: lnqqYiYGMiYn4pqguuHLhD76SM0FzbqhWsLW81h1hRM=)
                          2: 27623F48040711F193DC81CA173D8C67.roa (hash: 4UQuwImlHbzxK5xAml0mOBA2CK1r1LRApTKclWV+/nY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl
                          rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
        Validity
            Not Before: May 13 02:49:48 2026 GMT
            Not After : May 20 02:49:48 2026 GMT
        Subject: CN=6a03e6cc-78b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:47:c7:45:88:94:e8:af:70:98:5c:00:90:
                    1c:67:b5:91:d7:8c:26:ae:12:eb:cd:6f:f5:15:97:
                    a9:b4:67:6d:f7:ce:d4:dc:16:56:2b:0b:d8:c0:b6:
                    f1:13:43:6c:aa:99:7c:cb:17:27:3f:84:f7:4c:c5:
                    60:77:06:a3:01:8c:46:d1:a3:a2:b3:39:bd:cd:50:
                    e3:6a:8c:41:cb:c4:3e:7c:69:69:16:67:4b:40:f1:
                    ca:49:1d:61:c9:b6:59:76:3c:6f:73:ae:e5:6f:de:
                    55:15:ee:e4:87:92:6b:d4:88:c9:1e:7b:48:ff:39:
                    83:7c:67:12:98:de:d6:c1:5c:6a:c4:67:d9:9e:5c:
                    b2:af:24:84:60:80:00:c9:4c:14:ee:f2:c5:99:f9:
                    c3:20:0c:56:04:cc:b3:cd:21:86:fa:2e:1c:ad:6a:
                    07:5b:42:48:f7:83:55:64:14:7e:0d:0a:9e:24:f5:
                    56:56:f3:b0:09:91:8b:a9:ae:ce:63:b5:2c:ca:f7:
                    1c:4c:3a:1d:c0:b8:f8:7d:80:d6:0e:f5:ff:88:16:
                    09:b0:48:36:65:47:36:07:79:56:b3:0a:1b:db:82:
                    34:f2:f3:28:7c:95:e8:8e:6c:4f:22:b9:b6:c2:4f:
                    7d:e8:b3:57:05:6e:30:a3:88:ea:37:5a:89:79:48:
                    b2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:31:0A:AB:A5:24:B8:68:52:A5:32:C9:6B:10:7D:B3:47:E5:BB:48
            X509v3 Authority Key Identifier:
                keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a0:65:5f:79:0f:e8:db:25:d7:fd:82:ec:6a:c8:90:9f:d4:
         34:48:27:77:d0:0c:a7:11:bc:bf:51:62:dc:ac:45:cf:e4:92:
         3f:b5:e9:85:5c:d5:3a:13:40:8c:00:6b:0d:68:51:88:2e:23:
         7d:3c:c8:3d:ad:4d:d0:fa:f1:40:cc:8e:de:9c:79:99:cc:ea:
         1d:fa:15:b4:8f:1e:d6:fc:38:f5:9b:62:c9:8b:8a:6d:11:0b:
         a2:49:13:36:eb:05:b2:bd:fc:fd:bf:a0:20:ea:09:fa:8c:5d:
         17:9d:dd:9d:a3:73:74:eb:fa:0b:07:68:7b:fb:06:98:fb:39:
         60:1d:c0:70:c1:d8:e6:e9:1c:b8:bb:c1:17:c6:28:a9:87:be:
         b4:95:7e:e1:85:9c:ed:ce:98:f3:07:47:7d:77:10:1a:06:9b:
         4e:27:1c:f3:2e:8c:f4:58:a7:34:12:6d:c0:c2:d1:58:4c:1d:
         11:ca:28:af:8c:62:08:0a:cc:83:53:65:ac:86:48:38:54:2d:
         98:bf:89:8a:06:92:19:bf:b2:2d:a1:b9:a5:8f:5b:7b:cc:7c:
         42:a6:a7:5e:b0:6a:e4:4c:36:fb:35:f8:08:99:8a:da:4f:ab:
         2b:30:e9:64:dc:03:2e:f9:96:8e:cb:2b:91:15:8f:1f:c5:d6:
         38:b1:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:10 2026 by rpki-client