Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File:                     JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier:          q1FJEbq2pilgomAsOu+Rd6E711vwf/HhIiN2WtkgEyA=
Subject key identifier:   91:D8:D4:7E:8D:D4:F8:11:DB:60:6D:45:AB:F9:9A:06:DF:DC:0C:D1
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer:       /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial:       1E0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number:          1DFC
Signing time:             Wed 22 Jul 2026 16:10:11 +0000
Manifest this update:     Wed 22 Jul 2026 16:10:11 +0000
Manifest next update:     Wed 29 Jul 2026 16:10:11 +0000
Files and hashes:         1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: idVGiLcEw01UtTBlD4HmjrZidtPYzQ57JMGOKHBrACI=)
                          2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
                          rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7693 (0x1e0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
        Validity
            Not Before: Jul 22 16:10:11 2026 GMT
            Not After : Jul 29 16:10:11 2026 GMT
        Subject: CN=6a60eb63-a7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:94:a1:7f:b0:04:a5:c0:66:40:d9:9b:f0:
                    e0:34:16:3f:ea:cd:e1:b6:9a:b8:73:f1:1e:fa:ed:
                    8b:a8:a9:7b:71:94:1f:63:51:88:fc:62:7b:eb:e7:
                    a2:23:24:8c:e0:3a:fc:27:70:07:dd:cb:91:7c:34:
                    7a:c5:ca:47:74:5e:ee:5b:45:37:a1:e8:1d:86:3b:
                    2f:6f:b9:96:f9:b5:2d:ce:8c:79:ca:72:02:38:28:
                    59:89:68:2a:04:4a:af:71:a5:c3:06:bd:a1:89:e3:
                    60:4d:c5:e4:b6:15:d3:d4:da:1f:37:18:85:2a:de:
                    f7:aa:d7:83:b2:ae:83:0b:4e:1b:d5:e0:74:53:b4:
                    b6:72:e1:66:ad:28:0d:81:bf:d2:f8:d6:50:da:55:
                    eb:22:53:8e:fb:b9:8c:ac:c2:ad:fd:9c:c5:bc:2f:
                    a6:5f:13:35:f7:71:5c:1f:bb:04:27:86:93:aa:70:
                    73:2e:6c:ed:2a:ce:68:6c:ed:4d:96:ef:0c:4f:c2:
                    3f:4e:8a:dd:17:b6:1f:aa:4a:71:24:7a:f0:d1:6f:
                    e0:e9:7e:8d:cd:9c:80:78:82:e3:eb:3c:4a:b1:05:
                    26:3b:a8:ab:d6:a9:50:96:01:12:76:b0:3b:84:a3:
                    0c:2a:b3:90:70:82:09:31:17:2c:43:30:7b:15:bc:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D8:D4:7E:8D:D4:F8:11:DB:60:6D:45:AB:F9:9A:06:DF:DC:0C:D1
            X509v3 Authority Key Identifier:
                keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e3:21:fb:77:3b:d8:d6:68:c2:54:91:8c:14:35:6d:e8:71:
         9d:8c:00:7f:f6:4c:c6:e9:7e:cc:76:d5:f2:88:06:39:8e:98:
         c0:e4:88:f2:3a:60:e0:d9:ef:48:88:29:e7:4b:dc:05:f4:a0:
         31:51:5a:89:2e:4b:ee:3f:39:08:f6:c1:d5:83:6c:5a:46:60:
         a0:f3:a9:fe:37:31:c4:d4:87:28:4f:db:d9:2c:ed:48:ef:19:
         06:6b:6c:73:07:88:da:c6:6a:33:b0:da:42:c4:6e:46:c7:3c:
         c8:9a:d2:4d:ff:8e:0c:2c:8b:12:0d:d4:90:78:0e:59:ba:1c:
         07:ca:85:d9:6c:d2:d5:c2:06:9a:e8:9e:dc:82:ef:fa:a4:22:
         1f:f4:dc:77:2c:13:32:7b:eb:37:95:ad:c2:a3:2d:af:09:12:
         fe:02:2a:d0:4b:31:b8:1a:7f:8c:9f:ac:02:14:05:71:81:60:
         3b:5b:26:4d:8d:dc:14:df:d2:74:24:b1:55:6c:07:50:b7:1f:
         65:8e:ad:d3:b8:1b:8b:84:a9:a6:28:96:73:0b:66:0c:27:c0:
         66:e9:0e:cf:6a:4b:25:e8:ee:69:a2:a7:89:3c:43:9b:f0:db:
         6c:1e:60:89:34:bf:4a:c8:28:05:de:6f:3d:7d:54:3b:0c:4e:
         c8:b2:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:43 2026 by rpki-client