Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File:                     JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier:          /674rk5zh1OBZBCETyKJzvBwuQ5mB2ySBR9Hqj5dobM=
Subject key identifier:   C9:9A:2A:74:45:D1:D1:72:68:1F:28:52:12:FA:4F:53:BF:FA:84:3C
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer:       /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number:          0123
Signing time:             Mon 11 May 2026 05:48:12 +0000
Manifest this update:     Mon 11 May 2026 05:48:12 +0000
Manifest next update:     Mon 18 May 2026 05:48:12 +0000
Files and hashes:         1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: Py/NAxrXtxRF9Loq/ac0h4CXFOZ7iR5V0ImvNpV85iA=)
                          2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
        Validity
            Not Before: May 11 05:48:12 2026 GMT
            Not After : May 18 05:48:12 2026 GMT
        Subject: CN=6a016d9c-3835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:0b:44:7a:43:7d:5c:b6:9e:53:95:4f:c0:
                    fc:d5:3c:6a:b9:4a:63:e6:1b:61:78:29:33:02:31:
                    36:c7:0a:da:b6:41:da:e3:bc:e4:ce:cf:5b:64:50:
                    30:0b:78:fc:2c:78:b7:dc:56:11:19:bb:4e:c8:f1:
                    ec:ff:94:2a:da:5e:02:08:d6:a6:8c:fb:59:21:d8:
                    29:ab:67:1b:63:1b:6f:79:5d:92:f6:c8:38:69:60:
                    5b:94:61:fd:1b:f2:df:f7:01:18:fb:d5:05:b2:e2:
                    1d:e1:29:40:e7:b7:df:34:b1:2e:42:ac:2f:c6:85:
                    f6:68:84:57:95:0d:72:59:9f:e7:b8:29:c7:0f:54:
                    09:af:d4:3a:b8:15:4d:22:59:bc:64:59:c8:9f:f3:
                    8f:61:f2:c8:0d:b7:a0:b5:4d:2c:f7:46:99:a9:9e:
                    7c:ae:e9:71:ac:f8:72:d8:95:88:d2:eb:40:f7:da:
                    a7:0d:23:b1:3a:ba:bf:9f:a9:26:f8:52:39:d2:3c:
                    05:7d:88:9d:c1:57:ea:17:24:7d:29:8f:8e:8b:13:
                    3c:40:4c:97:1b:e8:88:b3:e7:20:9c:3c:d6:47:00:
                    8d:a3:cb:97:b6:ec:9a:49:25:22:a1:a0:0b:25:e0:
                    35:bd:06:a8:d4:29:fe:eb:08:90:94:f4:9d:17:2e:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9A:2A:74:45:D1:D1:72:68:1F:28:52:12:FA:4F:53:BF:FA:84:3C
            X509v3 Authority Key Identifier:
                keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:df:2d:25:25:13:1f:15:8a:c8:5a:61:86:88:bc:6d:44:d7:
         39:1b:19:5c:07:02:1b:3e:6d:57:5e:82:28:b8:8f:36:93:4e:
         f7:5c:e7:4c:52:f3:2f:0d:25:10:71:b5:28:fe:22:8a:80:ff:
         90:42:5c:ec:b3:fd:16:49:e5:d3:48:4f:af:af:51:b0:15:c9:
         25:a1:65:41:2f:f9:ef:50:aa:2e:8c:8d:56:d6:08:56:9f:bb:
         47:2f:23:94:54:f4:6f:84:72:db:c1:d2:65:5f:60:52:d4:3a:
         90:c7:90:2d:ee:9b:01:b2:9f:58:f3:d9:57:e1:eb:01:c2:32:
         1f:a8:d0:2b:5c:d4:b0:1f:92:ec:19:ef:25:32:8a:ff:8f:bb:
         cb:d9:87:6b:d5:71:82:69:4f:a6:9c:37:2c:ba:d5:24:71:06:
         82:58:9c:2b:c8:9d:e3:42:d4:8e:93:3b:0d:1e:5d:1a:60:31:
         7b:ad:fe:e3:bf:a7:50:b0:c6:7e:0f:b9:f3:ca:24:a3:cd:4d:
         58:2f:1c:e0:50:b1:9a:ae:a3:cd:8c:b2:5b:0f:df:af:cd:19:
         81:42:85:14:1a:7d:19:92:fd:c8:f1:52:6f:71:f8:54:d9:4a:
         e9:e6:98:42:01:35:cd:e5:bd:47:02:48:78:16:51:3b:a7:12:
         12:dc:b9:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx
QzExRDg0MTkwHhcNMjYwNTExMDU0ODEyWhcNMjYwNTE4MDU0ODEyWjAYMRYwFAYD
VQQDEw02YTAxNmQ5Yy0zODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiHYLRHpDfVy2nlOVT8D81TxquUpj5htheCkzAjE2xwratkHa47zkzs9bZFAw
C3j8LHi33FYRGbtOyPHs/5Qq2l4CCNamjPtZIdgpq2cbYxtveV2S9sg4aWBblGH9
G/Lf9wEY+9UFsuId4SlA57ffNLEuQqwvxoX2aIRXlQ1yWZ/nuCnHD1QJr9Q6uBVN
Ilm8ZFnIn/OPYfLIDbegtU0s90aZqZ58rulxrPhy2JWI0utA99qnDSOxOrq/n6km
+FI50jwFfYidwVfqFyR9KY+OixM8QEyXG+iIs+cgnDzWRwCNo8uXtuyaSSUioaAL
JeA1vQao1Cn+6wiQlPSdFy4hgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMmaKnRF
0dFyaB8oUhL6T1O/+oQ8MB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx
NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U
YUN1X0s3eEdFalFjRWRoQmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN98tJSUTHxWKyFphhoi8bUTXORsZXAcCGz5tV16CKLiPNpNO91znTFLzLw0l
EHG1KP4iioD/kEJc7LP9Fknl00hPr69RsBXJJaFlQS/571CqLoyNVtYIVp+7Ry8j
lFT0b4Ry28HSZV9gUtQ6kMeQLe6bAbKfWPPZV+HrAcIyH6jQK1zUsB+S7BnvJTKK
/4+7y9mHa9VxgmlPppw3LLrVJHEGglicK8id40LUjpM7DR5dGmAxe63+47+nULDG
fg+588oko81NWC8c4FCxmq6jzYyyWw/fr80ZgUKFFBp9GZL9yPFSb3H4VNlK6eaY
QgE1zeW9RwJIeBZRO6cSEty51A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:57:59 2026 by rpki-client