Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
File:                     JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json)
Hash identifier:          5pJlSfy4lA4kbgHDkljcGkE7DcawtlKSGAIykmnvN1I=
Subject key identifier:   B9:1B:1C:67:D1:43:32:BF:41:B3:F7:26:47:5A:59:1F:AA:A3:A9:BD
Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA
Certificate issuer:       /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
Certificate serial:       059B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
Manifest number:          0591
Signing time:             Wed 22 Jul 2026 23:59:47 +0000
Manifest this update:     Wed 22 Jul 2026 23:59:46 +0000
Manifest next update:     Wed 29 Jul 2026 23:59:46 +0000
Files and hashes:         1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: QwnKv3Y/gdiko8V+G68ef6CPTpVQ3Et6/gXKrYIzbc8=)
                          2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: yt+ZtKnpbuqQeAQi0WMw2FAsGK7S+Q6MIWDK5QZrGws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl
                          rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
        Validity
            Not Before: Jul 22 23:59:46 2026 GMT
            Not After : Jul 29 23:59:46 2026 GMT
        Subject: CN=6a615973-dc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:af:86:a9:8f:49:a6:b7:cc:ec:6a:d9:8f:0e:
                    65:53:3c:f5:d6:c9:44:83:28:98:1a:37:77:9e:7e:
                    0b:d0:7d:84:8b:f2:07:d9:5e:fd:09:9d:4e:dd:cc:
                    e8:81:ba:02:4a:67:45:bb:15:13:c9:90:2a:4f:4d:
                    68:58:d8:00:9c:ec:3d:d0:c0:f3:20:78:e9:b6:ab:
                    33:5b:89:84:a5:c0:aa:e3:9f:62:72:5a:78:df:ea:
                    19:e6:16:83:9a:93:10:81:d1:e2:7d:15:f4:fa:b2:
                    20:1f:c8:d4:72:7e:d0:eb:68:e1:6a:95:05:e5:d8:
                    8e:a9:76:51:b8:cf:3b:2b:a6:a8:93:f6:d1:de:9f:
                    d8:98:35:d6:df:45:d3:36:79:53:55:78:b0:7f:1b:
                    f3:4b:ef:50:49:71:1b:86:a3:87:76:59:e2:3a:22:
                    af:39:21:e0:05:97:47:6f:4a:1f:17:69:37:bd:df:
                    6f:61:f5:8c:8b:d5:f2:f9:4d:06:42:15:7b:e6:9f:
                    1c:c4:f3:b4:02:70:2d:4d:87:49:ae:58:74:b1:24:
                    20:09:44:75:05:aa:76:6f:d1:31:89:14:71:9c:e2:
                    82:30:9d:1c:4f:e1:0d:1a:1c:39:fe:e8:85:f6:a2:
                    ae:cb:f8:73:51:46:76:fe:e2:55:e8:8a:b6:d1:b5:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1B:1C:67:D1:43:32:BF:41:B3:F7:26:47:5A:59:1F:AA:A3:A9:BD
            X509v3 Authority Key Identifier:
                keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:34:22:39:36:d7:2a:e7:be:b0:f8:2f:b0:c8:5d:bb:4d:49:
         d0:ed:87:84:68:0d:8b:7f:05:c8:b2:25:cc:19:aa:2e:a4:aa:
         fb:33:44:63:41:73:90:e4:1f:62:62:0c:c5:90:c4:dc:cc:c3:
         ca:e6:63:3c:36:db:c4:56:10:8e:39:d9:37:d7:70:7e:16:50:
         8f:84:ce:b0:1d:ca:15:18:27:70:b3:21:d9:32:ad:2d:12:03:
         ae:a1:45:9f:d8:7a:89:1f:0d:f6:4b:11:8e:b1:b1:78:2c:57:
         83:1b:8a:e7:ac:d4:ed:77:9a:26:c8:1c:c9:d8:01:cf:2f:74:
         a1:05:b5:68:dd:d4:16:0b:91:4e:7e:eb:38:9c:ba:3d:8d:b7:
         41:83:5a:35:8f:4b:7e:ac:ef:d7:cb:26:0c:35:e1:a6:9b:2e:
         85:9d:f8:e2:06:28:0a:8b:5b:24:22:af:17:63:7c:06:77:65:
         d7:1b:45:19:6a:fe:7e:1c:bf:27:1d:90:4f:89:f4:2d:e0:88:
         95:78:fc:8d:07:d7:33:96:ad:7e:bf:03:6e:82:1e:48:b0:bf:
         e8:9c:62:d5:b3:43:8b:f3:41:17:13:f7:56:85:51:d1:6e:85:
         de:25:41:f2:59:94:26:8a:69:50:86:11:fe:aa:78:d3:40:a4:
         38:fc:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:08 2026 by rpki-client