Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
File:                     JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json)
Hash identifier:          Lto+v1uTpqL2i3AZzAnmj10Yj5uBjimvCqjGB1SaUmE=
Subject key identifier:   AD:CB:0C:90:22:EA:86:08:9C:DE:23:B8:72:97:F3:7F:F6:DC:15:F8
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Certificate issuer:       /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial:       1DAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
Manifest number:          1D7E
Signing time:             Wed 22 Jul 2026 16:11:47 +0000
Manifest this update:     Wed 22 Jul 2026 16:11:47 +0000
Manifest next update:     Wed 29 Jul 2026 16:11:47 +0000
Files and hashes:         1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: kxNwyvQtXHh45NQcHuS70ODW6Zz6QHlW7zwo7aRgx5A=)
                          2: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: GqVSysEStyyTYZvIjsTnjfhM2c5KJJEiabWbXtomulo=)
                          3: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: 5BzxW+L4vSDnf3Mt8f4xne60eMyftYTFgf6t3n4xIJQ=)
                          4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: xTllv0TZOEMAn/qQnLiwyozD3bbL+lexznwQYHXLWKU=)
                          5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: HaArSzXQPWVclTurOjmYRFehXALwDSZqwgKX4Y1qn/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7594 (0x1daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
        Validity
            Not Before: Jul 22 16:11:47 2026 GMT
            Not After : Jul 29 16:11:47 2026 GMT
        Subject: CN=6a60ebc3-8cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cb:10:04:d9:40:d8:fe:db:58:01:2d:ce:ca:
                    93:35:56:68:bb:b0:a7:f8:58:05:86:f4:79:01:51:
                    f3:3e:90:87:cd:41:3a:20:72:bd:cc:a9:b4:69:a7:
                    3e:82:bc:84:01:0c:dc:8e:92:5e:bd:c4:10:da:cb:
                    28:66:31:66:12:4d:f0:42:7c:f4:f8:24:58:61:27:
                    87:6c:87:e2:d7:27:85:da:56:46:f0:de:e3:45:49:
                    d1:40:78:68:22:50:c5:85:b2:6a:11:4c:71:80:01:
                    89:8f:92:43:01:65:e5:0c:fd:6d:82:0f:3f:83:88:
                    e9:6d:54:e7:af:c9:90:97:e7:b7:d6:c1:5d:ef:80:
                    d2:ae:04:b0:c5:45:b5:3a:bb:90:bd:be:68:d3:87:
                    bd:01:6c:84:8a:47:8a:02:d4:b3:cb:8b:8c:3d:9a:
                    99:42:7a:b3:70:81:cb:58:d0:65:de:8e:3b:97:f6:
                    d0:54:f8:0e:a5:a7:77:25:52:0a:c8:8b:f9:a1:41:
                    20:7b:37:05:01:64:df:1e:51:31:2a:18:9a:d2:34:
                    3c:1c:02:fc:4f:65:62:2e:5c:d8:85:e5:6a:c8:8a:
                    fb:e0:30:e9:93:94:a9:d6:b4:b3:9c:c5:15:74:8f:
                    a8:ce:34:b3:78:44:bf:49:79:8a:5f:ad:38:2b:4f:
                    b7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CB:0C:90:22:EA:86:08:9C:DE:23:B8:72:97:F3:7F:F6:DC:15:F8
            X509v3 Authority Key Identifier:
                keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8b:ef:8c:11:f4:2a:59:27:9d:33:0a:52:5c:24:3e:8f:21:
         3e:f4:3c:a6:0e:11:f6:ec:4f:a1:75:70:7e:6c:10:0c:f3:16:
         8d:29:1b:b1:0f:59:39:e4:8f:b4:2f:9b:77:05:e1:f4:29:7d:
         18:bf:e7:c3:b2:c7:38:f7:54:83:13:55:13:f1:a1:d8:0f:14:
         c8:af:39:ec:b3:7d:f3:b7:55:f4:a2:c9:96:ed:87:b7:7d:0c:
         2d:49:f3:a0:55:62:d3:d4:21:c6:db:e1:f1:6a:e7:a3:5e:a9:
         60:e5:1c:01:30:91:0d:d9:09:00:93:b7:b9:8e:06:a7:73:23:
         ef:12:59:b0:38:83:ea:82:cc:7e:4d:04:d6:1e:72:d4:f3:8d:
         3c:0d:ca:c5:ac:a8:56:cf:5b:ae:e6:47:55:cc:c9:f7:72:a3:
         31:44:32:23:77:16:b5:c9:bc:e4:d5:1a:6b:3a:f5:6e:c4:cd:
         83:ed:86:3e:78:be:91:ce:cd:67:75:0c:6f:68:aa:ee:71:7c:
         1e:57:4e:c0:f9:fa:82:4b:bc:c3:62:d8:34:fb:db:a2:10:f4:
         cc:c7:93:fd:9c:b4:57:dd:52:d3:28:d5:e0:56:e1:28:85:11:
         0f:ae:e0:f1:74:97:ec:f1:ec:eb:e2:5b:de:19:66:c3:cc:a8:
         b2:22:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:01:14 2026 by rpki-client