Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
File:                     JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json)
Hash identifier:          ai/suX0MeuooVepAMVruFVirSbrrZUQnGIs5SxnwfVo=
Subject key identifier:   F9:2D:EB:DC:38:20:B1:AD:18:97:30:0B:D9:8C:B5:EE:DF:91:D1:E4
Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
Certificate issuer:       /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
Manifest number:          BB
Signing time:             Thu 23 Jul 2026 08:52:46 +0000
Manifest this update:     Thu 23 Jul 2026 08:52:46 +0000
Manifest next update:     Thu 30 Jul 2026 08:52:46 +0000
Files and hashes:         1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: eB/yOs+OPKUqcDHxjNfcg5t04eF8yTN1rZZIzEQmgFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
        Validity
            Not Before: Jul 23 08:52:46 2026 GMT
            Not After : Jul 30 08:52:46 2026 GMT
        Subject: CN=6a61d65e-8270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:1b:39:95:69:38:77:5b:a5:26:f6:2e:fd:
                    ef:10:51:aa:89:2b:15:a6:11:81:72:1e:cc:c3:41:
                    39:23:bd:26:8b:4c:03:be:7a:69:5d:fe:0c:f5:03:
                    61:3e:a5:6d:dc:96:a4:67:08:70:46:df:4a:33:63:
                    9a:e2:75:05:2e:d5:2b:62:cf:c6:27:fa:d1:98:f3:
                    af:13:53:59:03:31:95:d5:fe:27:94:38:0f:8a:2e:
                    74:29:ac:29:20:37:0b:6f:c3:c4:60:f9:99:2e:2f:
                    59:3e:3d:aa:89:45:ba:fa:8c:db:fa:61:ae:be:98:
                    1c:09:4f:dd:32:61:61:2b:2c:b2:93:1f:30:5b:76:
                    71:b6:68:07:88:eb:8d:5c:63:ff:0a:7f:7d:4e:62:
                    08:06:92:dc:44:2b:1b:2a:d9:10:86:5f:56:09:8e:
                    66:ae:1a:dd:fe:a1:fc:c9:55:27:53:fb:4c:7a:5c:
                    11:83:36:8b:0a:ec:89:58:aa:76:68:9c:30:18:42:
                    ea:e3:83:0f:d3:08:60:cc:f0:ac:00:b4:9c:61:a7:
                    7d:7e:9a:1f:16:3f:ac:22:b8:76:bb:b6:3d:ef:de:
                    6b:2d:18:24:3b:c3:1d:f3:8f:a5:10:ec:36:70:04:
                    d8:dc:ba:c6:c0:74:b0:97:ac:43:50:2d:e5:5b:aa:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:EB:DC:38:20:B1:AD:18:97:30:0B:D9:8C:B5:EE:DF:91:D1:E4
            X509v3 Authority Key Identifier:
                keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:19:d0:3d:3f:90:e4:93:5a:c2:01:4e:12:c0:b8:2c:c9:e3:
         1a:18:6e:a4:47:7e:fc:2b:7d:5d:0c:d4:1a:93:8e:4b:36:99:
         d0:48:4c:ec:3c:ad:50:20:42:d6:65:3b:51:92:e9:c0:cd:18:
         77:b7:41:97:aa:15:80:8d:38:27:8a:61:9c:85:d3:2d:fd:de:
         eb:16:86:50:8a:70:b8:bd:d5:fa:86:7c:cd:a8:47:14:48:d7:
         68:ac:94:f9:c3:b5:33:b6:df:c0:77:13:9d:03:97:b1:c6:c6:
         0f:f7:ef:92:19:b7:c3:c2:8e:be:c8:57:8d:ff:7a:d3:fb:87:
         7d:81:17:f8:99:cf:cf:58:da:ed:81:d1:de:19:0a:a5:25:ea:
         02:02:82:9d:f3:9b:e7:57:32:8e:a7:03:f7:fb:62:88:67:57:
         5d:1d:19:bc:94:c0:4c:38:bb:f9:1d:11:94:ec:81:5b:16:28:
         26:99:54:2a:1d:ec:7a:a5:fb:1a:3b:e5:57:6c:de:f5:3d:be:
         19:e4:e5:c5:02:15:0b:77:5b:87:70:3c:fa:64:b0:e7:f9:6d:
         06:7a:dc:84:4e:45:5d:7b:4d:e1:26:6e:d6:49:ee:f9:b5:fb:
         b2:85:b0:84:71:78:66:3d:2d:66:df:8a:1f:6e:5f:c7:3a:a4:
         1b:35:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:17 2026 by rpki-client