Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          xKPpzu2f70QX67gpOZB5w4Oz7i9O+YALe6LRq4cMU5I=
Subject key identifier:   03:F9:DE:26:A2:04:D4:B4:BD:2C:E8:71:64:FE:40:E8:AB:06:AE:1A
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          0136
Signing time:             Thu 23 Jul 2026 07:20:35 +0000
Manifest this update:     Thu 23 Jul 2026 07:20:34 +0000
Manifest next update:     Thu 30 Jul 2026 07:20:34 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: vS74V6LMleACtRb7funQw0Ot8jQCuU5UIlfrrk2blIs=)
                          2: 5090FDECFF2E11F099E36B6D89EE528E.roa (hash: SVmKKWgD8wzJ//9zHCIQvh7qq3NDelAnKECCPch2U6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Jul 23 07:20:34 2026 GMT
            Not After : Jul 30 07:20:34 2026 GMT
        Subject: CN=6a61c0c2-31ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:8d:9f:0a:74:e4:b9:95:66:df:98:b8:cf:
                    c9:d2:82:2c:28:23:34:51:a0:39:10:9f:3e:36:89:
                    71:07:5d:cd:27:52:ad:31:95:62:22:fb:03:8f:13:
                    00:70:87:31:20:9f:a4:ae:5b:90:f8:00:d6:a1:e9:
                    28:eb:06:fb:a7:cd:e5:ca:12:9a:d3:3f:72:f1:9c:
                    be:2c:4f:71:e1:8f:dc:9a:87:fd:8c:e8:01:1b:ea:
                    f3:00:71:c3:3a:ff:7a:3b:da:67:de:40:e6:07:fe:
                    8e:28:e8:72:77:c4:0c:33:4d:da:40:e2:d9:a0:de:
                    6d:e0:2f:81:b7:4b:84:83:f5:5e:84:1d:e6:f8:37:
                    3a:37:88:fa:9a:05:8b:02:01:39:ec:4e:e3:7f:a7:
                    64:d3:61:b6:af:50:27:df:d8:9e:29:5d:1e:0e:29:
                    88:82:79:de:79:fa:28:89:cb:36:4c:1e:42:85:b5:
                    bd:82:49:4f:14:d6:ea:49:b5:39:db:bd:74:a4:41:
                    c9:61:9b:08:27:d0:d6:86:59:99:7a:d8:6b:15:df:
                    65:14:dd:de:53:7b:17:27:e8:55:01:c5:59:d2:69:
                    6e:17:2f:02:82:98:b3:a5:39:26:4f:c1:c4:1c:37:
                    7f:89:36:dc:0d:b8:11:34:a2:7f:c7:aa:6c:4f:54:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F9:DE:26:A2:04:D4:B4:BD:2C:E8:71:64:FE:40:E8:AB:06:AE:1A
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:26:8f:62:ad:a2:6d:0e:0b:c1:66:b0:13:06:c3:20:7d:05:
         76:6d:96:2a:73:7a:4b:20:65:6e:88:1d:3d:d0:cf:ef:eb:1d:
         16:3f:e3:2d:dd:41:05:e6:2a:e2:b1:c1:4f:e9:1f:87:70:66:
         0e:6d:42:ad:7c:5e:bb:79:23:0f:a0:ee:ec:a0:1d:44:11:99:
         3b:76:36:73:7c:26:65:56:38:64:80:59:71:aa:e8:3e:4c:47:
         13:c6:01:ae:1a:90:87:87:ee:a5:51:4b:3d:be:f3:7f:98:22:
         36:72:96:4f:82:52:92:82:91:36:a3:ab:56:a2:2c:0b:55:aa:
         e9:49:63:e4:19:e9:40:ce:c3:d5:2a:4b:97:83:95:28:a0:f7:
         20:44:84:13:53:1c:cd:41:cf:17:d0:14:93:e3:8a:0e:34:91:
         d9:4e:09:b6:92:a7:55:df:20:31:c0:92:c6:f4:28:48:4b:56:
         45:a9:75:c2:4b:9f:4f:e1:35:6f:5b:1e:78:cf:98:ea:bf:de:
         20:3b:10:63:fb:be:ba:19:70:2e:f3:a2:66:4b:ca:e6:83:38:
         db:f4:98:d4:05:d7:d7:bb:40:fe:87:c7:09:10:79:61:6e:b9:
         7e:50:dc:9a:19:36:b8:3f:44:76:b5:cb:6c:cf:0e:c3:b1:7d:
         f6:d7:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:13 2026 by rpki-client