Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File:                     jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier:          Gz5wCJUo/hISn/sQjPhDAwcbc4vyD+AoK5fng/3C/hQ=
Subject key identifier:   83:0F:C5:9F:17:CE:B6:CB:5B:68:B0:00:2E:52:B8:9E:16:B0:FE:FF
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer:       /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial:       0D11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number:          0CF9
Signing time:             Wed 22 Jul 2026 18:43:04 +0000
Manifest this update:     Wed 22 Jul 2026 18:43:04 +0000
Manifest next update:     Wed 29 Jul 2026 18:43:04 +0000
Files and hashes:         1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: h1aS4MLF2dkNatWiXFuXrxGacb1CEq29tMcR0L8A794=)
                          2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 7H74kxzAu6eBhMbuiVdEINpAuR5nv5OCNmqiu6IXaNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
                          rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3345 (0xd11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
        Validity
            Not Before: Jul 22 18:43:04 2026 GMT
            Not After : Jul 29 18:43:04 2026 GMT
        Subject: CN=6a610f38-6763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:34:39:dc:c3:6d:ac:d5:ee:7f:ad:d1:04:
                    ff:1f:6c:b9:f7:03:22:5d:a4:70:20:a9:2c:49:81:
                    cd:e2:c1:e6:da:1b:13:48:0d:1e:dc:06:20:dc:58:
                    61:92:20:ee:c3:50:c8:5f:48:b7:7e:0e:bf:3e:f4:
                    dc:2c:6e:81:07:3c:78:3b:34:59:f9:4a:08:93:d4:
                    f9:53:d5:0a:3b:89:d2:6f:cb:c5:91:a6:b6:54:1e:
                    41:80:5a:d9:df:98:7b:bc:35:69:7c:20:49:4b:e6:
                    6b:d5:63:ca:2e:18:f0:57:20:fd:09:3e:1e:81:99:
                    ef:78:93:82:26:d8:98:b6:d1:d9:e0:c5:8f:fd:8f:
                    38:06:3f:3e:1b:e3:eb:c1:31:56:86:a5:2b:7b:ed:
                    09:79:69:21:f7:2e:07:7c:44:9a:1a:fb:2b:85:96:
                    df:d4:1e:1f:22:51:7a:21:61:5d:ab:41:83:e2:47:
                    95:b4:4d:f4:37:ca:10:1a:31:3d:a3:e4:77:fb:24:
                    55:39:78:b3:b5:1c:97:82:db:f3:d9:49:14:43:e6:
                    27:02:2b:82:b4:e7:64:2b:86:e8:7d:2d:3c:59:50:
                    7a:64:e8:88:d8:ef:6e:f3:ce:96:61:13:b7:6c:eb:
                    65:02:87:31:90:77:7e:18:e7:9d:1d:0a:52:b0:61:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0F:C5:9F:17:CE:B6:CB:5B:68:B0:00:2E:52:B8:9E:16:B0:FE:FF
            X509v3 Authority Key Identifier:
                keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:05:56:d6:e6:d1:5d:3c:16:0a:d8:87:40:9d:7f:5b:77:d2:
         96:f5:9f:e9:4d:b0:bf:03:f3:b8:8f:33:7c:67:67:00:ea:00:
         e1:11:4e:cc:dc:4d:bf:24:5e:5d:08:14:00:f4:64:4f:a2:2d:
         9d:8a:59:3d:97:f1:de:9a:38:fc:f0:0a:8e:02:ac:2c:2d:aa:
         27:42:d5:e7:16:a8:1f:2a:86:cc:5c:e4:88:ba:1e:ad:9d:0f:
         89:ef:23:c9:2d:bc:39:22:be:85:be:17:a1:ab:08:81:ac:02:
         e5:52:07:1e:dc:7d:93:da:63:23:2c:2c:14:eb:d4:dd:fb:6a:
         a7:5f:76:60:41:47:72:76:41:b0:49:80:09:56:1e:f9:d7:91:
         f2:15:88:2f:3a:19:fb:70:d4:cf:f8:c6:a5:96:35:ea:04:36:
         03:e8:51:c3:96:f4:d0:bf:9b:ba:c1:3d:30:68:6d:cd:43:97:
         a1:81:69:65:65:5d:b7:ba:fb:fa:31:ac:83:b9:5e:7a:6d:68:
         5c:d1:21:02:64:61:4e:fe:7f:3c:b8:22:82:82:20:67:50:dd:
         9a:d3:cf:bb:aa:8d:14:ac:df:76:51:62:a4:e4:b7:eb:00:ac:
         ff:60:a3:b9:87:11:ad:70:39:83:02:46:1b:b2:ec:32:47:27:
         25:d3:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:40:37 2026 by rpki-client