Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
File:                     jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json)
Hash identifier:          FarOdRoY5mMi+kXccO9BoWB6DeOKUhAGNuji8DrtJR4=
Subject key identifier:   C8:B1:E1:CA:ED:E8:D2:57:68:D2:9D:D5:B5:8E:AB:EA:40:F1:F3:00
Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
Certificate issuer:       /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Certificate serial:       09EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
Manifest number:          09D9
Signing time:             Wed 22 Jul 2026 20:17:52 +0000
Manifest this update:     Wed 22 Jul 2026 20:17:51 +0000
Manifest next update:     Wed 29 Jul 2026 20:17:51 +0000
Files and hashes:         1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: kDMGZ4Bs53DTh3BY3NHE7xEKRJDyhdXyUKpCdbfkvws=)
                          2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: 4O4VyvF9acyXinPLBl4hOfnMsxmNaJoJYc9kqSUJS5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
                          rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
        Validity
            Not Before: Jul 22 20:17:51 2026 GMT
            Not After : Jul 29 20:17:51 2026 GMT
        Subject: CN=6a612570-9679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:3d:b8:f1:a4:63:e0:31:5b:9b:dc:6e:68:
                    1e:87:00:6a:a8:76:0b:d0:6f:73:ce:95:30:3d:c9:
                    97:d4:ea:29:84:bb:40:ce:c9:f8:83:16:87:b2:a7:
                    03:ee:7e:f6:50:22:c5:3d:11:a4:41:7e:5e:3b:93:
                    77:9c:b7:7e:ab:6a:37:9a:a5:79:4c:56:5c:9c:48:
                    fd:3f:fb:6e:01:b7:85:78:0e:95:b1:9e:8a:f5:46:
                    cb:88:61:af:39:ff:cf:b9:23:06:dd:cf:ea:cd:f8:
                    52:c1:1d:7a:1d:c1:20:8d:a8:58:80:f4:0e:60:d0:
                    f6:93:96:13:93:21:14:58:69:92:69:47:d0:7e:60:
                    65:4d:d1:fd:33:be:bc:a5:85:d0:71:1c:21:c1:87:
                    64:35:90:ee:a8:ba:1b:89:9d:9a:9a:68:70:94:3c:
                    3a:ce:e8:ac:6c:59:98:c1:c1:35:bd:00:88:58:3d:
                    25:03:36:00:62:43:b5:7e:46:45:08:f9:41:3f:aa:
                    bf:10:11:d6:81:53:7a:2a:d8:63:da:28:67:e7:89:
                    0f:bc:e5:7c:94:86:b9:94:50:6e:00:69:b5:ce:d2:
                    8c:89:9e:35:4f:32:e7:ca:5e:75:75:cd:e5:2a:d0:
                    60:48:61:94:9d:45:08:0c:2b:87:d1:db:7a:0c:e6:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B1:E1:CA:ED:E8:D2:57:68:D2:9D:D5:B5:8E:AB:EA:40:F1:F3:00
            X509v3 Authority Key Identifier:
                keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2e:2d:f2:02:3b:83:0e:e1:2c:64:81:98:c4:94:49:ef:8c:
         98:bf:93:5f:c2:cb:d0:dd:a6:44:16:30:41:96:e3:83:81:9c:
         ce:ab:27:ce:85:a8:6d:7f:1e:06:95:e5:90:58:3b:8c:b6:6a:
         da:e9:aa:9d:d4:9e:eb:d0:06:f2:1c:54:ba:08:5c:e1:56:f7:
         b8:6d:f9:6b:b5:ad:54:6f:ac:92:f6:6f:a7:c5:b8:a3:0f:fe:
         f4:0a:29:d6:75:64:9b:a5:c3:fb:d8:7e:d6:a5:b2:5e:5e:8a:
         4b:c9:5f:f8:91:24:6c:c5:4e:0f:19:75:1f:9f:ab:9b:92:70:
         ab:c4:82:f6:b2:92:8e:9e:1e:3a:9b:ef:19:d0:05:82:45:66:
         8d:30:30:cf:8f:1a:61:5d:b3:2f:37:23:74:78:53:85:57:a7:
         a6:bf:7b:08:d6:be:3e:68:8c:bf:20:8d:6c:e6:ec:25:23:d0:
         75:d5:65:22:0c:09:0a:b9:92:3e:94:b8:46:30:74:91:07:47:
         de:87:53:7d:fe:99:35:61:25:bb:60:00:08:6c:27:9a:65:50:
         68:45:a8:b0:3d:ce:e6:2d:f3:1b:bc:91:f7:fc:5a:a5:57:a1:
         bf:82:1f:2b:a1:de:97:b8:c8:be:bc:49:98:78:49:05:ff:7a:
         2d:21:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:24 2026 by rpki-client