Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File:                     jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier:          J4X+u3tFpIpAWrDztrsjVJ5ruqB7OB5ocGNst6u34Kc=
Subject key identifier:   EC:97:85:AD:DA:98:E4:3B:D6:71:7C:C5:C6:29:4F:AF:17:26:78:03
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer:       /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number:          6C
Signing time:             Mon 11 May 2026 08:13:25 +0000
Manifest this update:     Mon 11 May 2026 08:13:24 +0000
Manifest next update:     Mon 18 May 2026 08:13:24 +0000
Files and hashes:         1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: dje/IIP7o5FFXJswBM7hhKnsB6x4LmU49Q/w8PNOgfk=)
                          2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: nCUAwcVtKiknK/x07jx8AEGgjWAlFPwBHEfe76OnWT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
                          rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
        Validity
            Not Before: May 11 08:13:24 2026 GMT
            Not After : May 18 08:13:24 2026 GMT
        Subject: CN=6a018fa4-9f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:78:f0:da:a2:a2:10:ac:c3:f4:49:25:8e:
                    85:25:3c:4d:a1:85:e3:aa:f5:1e:ff:be:32:3f:e3:
                    83:6b:8b:52:eb:1c:63:ca:36:3e:88:27:74:4b:f9:
                    a7:c1:a0:be:8d:3c:0e:b7:94:6f:67:90:57:6e:70:
                    8b:3c:d9:b7:fa:3e:d7:a2:e7:32:5d:ea:03:a0:c3:
                    b1:73:88:ea:ce:e1:ad:1e:27:1e:2a:33:41:66:ad:
                    98:63:41:52:10:50:59:e4:c7:56:d6:7e:ab:2a:7e:
                    df:bf:eb:52:26:4b:09:e7:d3:19:6f:d0:dc:24:9b:
                    2a:31:ac:93:fc:4d:9c:2c:30:5f:b6:e2:c6:f2:d1:
                    ce:9e:78:6b:0d:98:d3:d6:15:e4:75:2e:c4:65:16:
                    77:ee:62:67:24:a1:8a:94:84:8c:db:9f:20:b5:99:
                    11:b2:48:4a:38:57:4e:0b:72:c8:82:39:4d:35:7e:
                    14:01:0b:90:05:56:f9:46:61:4f:ab:67:17:c9:a5:
                    6f:cb:c8:47:1f:44:54:f8:d9:8e:5b:99:0d:26:e9:
                    8a:e4:5b:51:cb:74:83:03:6f:92:6e:e8:3b:91:57:
                    5c:f3:cf:08:be:c3:76:32:8a:85:af:fa:7d:85:d1:
                    90:07:2f:38:f1:b9:69:6a:c5:22:6e:fa:98:24:71:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:97:85:AD:DA:98:E4:3B:D6:71:7C:C5:C6:29:4F:AF:17:26:78:03
            X509v3 Authority Key Identifier:
                keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:76:a5:e1:78:e2:54:a7:80:43:c8:03:09:97:fb:4b:1d:6c:
         3d:b0:30:d7:95:b1:17:a3:c3:04:7e:04:24:62:3b:ec:2b:7c:
         4a:d2:d0:80:8e:0d:86:ec:16:c4:f0:78:7d:72:43:71:e1:61:
         1e:1c:01:a5:13:1b:08:c9:9b:64:20:c0:7d:82:f9:ca:e6:66:
         98:1e:45:50:67:7f:22:38:cc:a0:23:97:97:6e:3a:0e:60:66:
         e2:cc:0a:bc:ac:9a:21:5c:47:27:ac:b5:6c:6c:93:32:49:22:
         9a:86:69:28:ba:c9:8c:5f:d1:96:a9:36:ba:94:3f:9a:11:39:
         0d:7c:35:9c:d8:9a:08:10:f6:77:b7:48:cc:fe:99:b5:fb:44:
         46:30:0f:06:6b:38:3a:7a:ff:cb:49:2e:90:61:c2:20:32:29:
         85:8d:99:67:9e:22:a0:7b:67:8c:92:55:9c:13:a1:61:49:14:
         37:bc:75:b3:c6:3b:52:4f:a2:ca:e1:55:73:11:e8:27:25:d3:
         28:d6:94:12:17:46:a3:18:89:0d:34:d6:53:13:dc:92:6e:e3:
         d0:e0:8f:fc:6b:fe:dc:87:c2:be:9a:0e:54:6a:4d:00:2b:28:
         14:40:c7:36:2e:00:71:cd:69:6d:eb:f8:f1:17:77:48:78:ca:
         ce:16:8f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:28 2026 by rpki-client