Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
File:                     J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json)
Hash identifier:          RlatymcQX28Ena+o6aARjMXKLui3duBYcUDpnJ1QLTo=
Subject key identifier:   D7:56:D7:80:F0:1F:DE:57:50:47:77:BA:23:88:A9:BC:1F:4B:4A:A8
Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
Certificate issuer:       /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Certificate serial:       1080
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
Manifest number:          1076
Signing time:             Wed 22 Jul 2026 17:32:11 +0000
Manifest this update:     Wed 22 Jul 2026 17:32:11 +0000
Manifest next update:     Wed 29 Jul 2026 17:32:11 +0000
Files and hashes:         1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: 2AkSpHPVnk1vdNF3256Txrhy2z8U/NFGa2hVrhkxMgA=)
                          2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4224 (0x1080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
        Validity
            Not Before: Jul 22 17:32:11 2026 GMT
            Not After : Jul 29 17:32:11 2026 GMT
        Subject: CN=6a60fe9b-0dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:1c:7c:28:b3:91:0b:2c:92:6f:9f:5e:7f:
                    c5:49:40:8a:23:46:35:9e:1a:87:8a:2e:a5:23:2a:
                    15:8b:5c:10:0d:2a:d1:f4:d6:da:e9:ef:12:3c:af:
                    e3:18:c1:ac:d8:16:e1:8a:ad:a2:c7:73:00:32:3a:
                    91:16:7f:71:5b:af:b4:72:ec:d9:5c:32:41:6d:48:
                    3d:b5:50:45:0a:12:6c:bb:0a:27:08:f9:65:13:02:
                    90:90:a5:42:ce:c1:ef:f4:1d:2f:5a:a6:e5:3f:f0:
                    3d:46:bf:f2:18:1c:13:79:16:14:21:44:f4:a0:41:
                    f9:3b:bf:ee:9c:6a:87:f5:62:31:09:10:02:33:07:
                    17:bf:d3:a1:66:86:6a:76:2a:f6:80:51:e7:ce:7a:
                    9d:21:14:ad:ad:f7:3c:9c:f4:12:05:f3:7a:76:ee:
                    ae:2b:11:2c:e9:e2:c7:36:29:82:49:bc:d4:87:c6:
                    e7:85:75:97:ff:63:8e:f5:c5:60:9f:de:ff:7b:8f:
                    8e:bd:c9:90:7b:96:be:71:04:b3:9c:7b:c3:69:22:
                    d0:79:fc:5a:bc:c0:ac:7a:21:8d:7a:ed:52:9a:36:
                    14:a5:e1:19:fb:6b:60:0c:dd:6e:fb:0e:66:e9:4e:
                    0c:fc:7b:76:49:6e:ac:f4:89:a3:c3:8c:5f:e3:82:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:56:D7:80:F0:1F:DE:57:50:47:77:BA:23:88:A9:BC:1F:4B:4A:A8
            X509v3 Authority Key Identifier:
                keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9b:c1:96:af:cf:74:a2:d0:75:64:15:ff:5c:19:d8:85:6c:
         b6:bb:c9:c6:42:00:96:1e:77:22:73:24:f5:ab:81:27:40:59:
         7a:80:15:8e:19:bb:58:8e:19:3e:ab:3e:f7:19:04:6e:95:55:
         03:31:e7:1b:7d:c7:32:b5:15:4f:e1:aa:c2:0c:3e:08:86:f2:
         9a:11:df:b1:0e:bc:b7:00:ff:67:56:8e:c9:70:f6:c0:fb:9b:
         bf:2c:af:6e:b5:e4:3c:92:35:cc:43:e7:eb:24:26:49:b1:79:
         5e:70:1a:2a:20:9d:51:98:d3:bb:c4:70:d4:14:f7:12:9b:7a:
         7f:51:50:75:5c:d7:02:75:01:9c:17:e1:5a:bc:bc:e6:9a:17:
         1b:f3:90:d0:71:a5:c3:68:91:5c:5c:35:0c:50:90:7c:55:fd:
         84:91:af:a0:cc:92:0e:3d:7b:f3:83:cc:c0:bf:d1:63:c7:96:
         44:b8:c4:7c:2a:33:91:85:3c:b2:29:89:e2:53:7a:d2:52:a8:
         87:ef:62:a1:68:c8:af:74:79:93:8b:11:25:78:3a:41:2b:e0:
         2a:af:0f:0a:12:1b:6d:3d:86:64:9e:f1:81:fe:91:28:9b:ad:
         04:64:a4:b5:37:6d:7f:94:62:f4:ab:ec:04:e7:07:e1:83:9f:
         3c:f9:1c:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy
RjkyRTZCRTgwHhcNMjYwNzIyMTczMjExWhcNMjYwNzI5MTczMjExWjAYMRYwFAYD
VQQDEw02YTYwZmU5Yi0wZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5scfCizkQsskm+fXn/FSUCKI0Y1nhqHii6lIyoVi1wQDSrR9Nba6e8SPK/j
GMGs2Bbhiq2ix3MAMjqRFn9xW6+0cuzZXDJBbUg9tVBFChJsuwonCPllEwKQkKVC
zsHv9B0vWqblP/A9Rr/yGBwTeRYUIUT0oEH5O7/unGqH9WIxCRACMwcXv9OhZoZq
dir2gFHnznqdIRStrfc8nPQSBfN6du6uKxEs6eLHNimCSbzUh8bnhXWX/2OO9cVg
n97/e4+OvcmQe5a+cQSznHvDaSLQefxavMCseiGNeu1SmjYUpeEZ+2tgDN1u+w5m
6U4M/Ht2SW6s9Imjw4xf44I9pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdW14Dw
H95XUEd3uiOIqbwfS0qoMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD
MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P
dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqJvBlq/PdKLQdWQV/1wZ2IVstrvJxkIAlh53InMk9auBJ0BZeoAVjhm7WI4Z
Pqs+9xkEbpVVAzHnG33HMrUVT+Gqwgw+CIbymhHfsQ68twD/Z1aOyXD2wPubvyyv
brXkPJI1zEPn6yQmSbF5XnAaKiCdUZjTu8Rw1BT3Ept6f1FQdVzXAnUBnBfhWry8
5poXG/OQ0HGlw2iRXFw1DFCQfFX9hJGvoMySDj1784PMwL/RY8eWRLjEfCozkYU8
simJ4lN60lKoh+9ioWjIr3R5k4sRJXg6QSvgKq8PChIbbT2GZJ7xgf6RKJutBGSk
tTdtf5Ri9KvsBOcH4YOfPPkcIA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:21 2026 by rpki-client