Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
File:                     ju12mE8jGqLHDymCN43Gndg9WFw.mft (raw, json)
Hash identifier:          u0jnJaGnla99C6+mPJFdxQwC82Fm4KBxVH8D0PXk804=
Subject key identifier:   7A:DD:FB:4B:66:07:B9:B6:F9:F0:59:13:66:5F:7B:30:3A:85:99:24
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Certificate issuer:       /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
Manifest number:          5C
Signing time:             Thu 23 Jul 2026 10:10:04 +0000
Manifest this update:     Thu 23 Jul 2026 10:10:04 +0000
Manifest next update:     Thu 30 Jul 2026 10:10:04 +0000
Files and hashes:         1: ju12mE8jGqLHDymCN43Gndg9WFw.crl (hash: +LkgXXMA665vwAMlX6LM/o5fUSKWfoJR2eyqOOycLRw=)
                          2: 850C91D6001811F18252CD21426F56BC.roa (hash: H0q+xb6eVx4tPSPvPAYInq6UBtaoioP2tniqAH87wyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
        Validity
            Not Before: Jul 23 10:10:04 2026 GMT
            Not After : Jul 30 10:10:04 2026 GMT
        Subject: CN=6a61e87c-9845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:19:55:bb:70:41:d7:af:7a:d6:2d:d5:0d:8a:
                    e1:2c:4d:2a:a0:c6:f9:9a:65:4d:53:c0:57:3c:fd:
                    1b:dc:62:49:5e:9c:f6:a1:0a:79:1f:85:1d:62:f4:
                    ee:a8:cc:d6:5d:00:01:89:fe:6f:2e:5b:84:6a:ac:
                    b5:15:39:4d:24:02:d7:c1:e0:14:2c:61:0b:6f:58:
                    3d:ed:e8:42:bd:c8:13:3a:6d:87:0b:a9:7b:ce:ac:
                    99:85:1f:40:86:c1:08:3b:f5:c9:5d:5e:c3:ee:f1:
                    dc:f4:a1:fc:e2:42:dd:39:44:41:d0:30:96:9a:e4:
                    48:09:dc:ec:2e:a5:b4:ee:d1:26:24:99:d1:33:27:
                    22:2c:33:3c:2f:90:c3:df:ef:96:aa:98:b8:71:1a:
                    7b:48:df:07:11:6b:9d:02:5f:15:35:58:94:a3:08:
                    ec:5c:b8:e4:b9:3c:7e:e9:83:e6:4d:88:5a:b3:4b:
                    33:66:28:32:08:90:4f:78:28:a5:9b:96:fc:1f:08:
                    6a:b5:7c:ba:8d:4e:8e:35:7d:e9:31:00:e2:59:bd:
                    10:d7:83:c5:21:25:de:ef:8d:3d:44:c8:5b:69:55:
                    7d:ea:da:c2:9b:ef:2f:1a:65:be:4c:9e:ce:39:de:
                    dc:ad:32:7a:90:54:ff:9d:2f:6d:47:23:d2:bc:4c:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DD:FB:4B:66:07:B9:B6:F9:F0:59:13:66:5F:7B:30:3A:85:99:24
            X509v3 Authority Key Identifier:
                keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:75:55:17:26:8f:ea:69:e5:22:f0:4b:07:3c:a8:3c:54:
         07:b5:79:95:8a:f6:c0:ac:b0:2a:d8:bc:9a:ee:1c:a8:0b:1b:
         7e:79:a8:7b:89:cc:80:ec:05:34:61:09:d9:4f:67:15:bd:81:
         38:08:35:26:0a:c7:83:b4:8c:df:84:2f:e8:7f:91:93:a5:1b:
         b3:62:ab:29:1d:3e:90:a8:fa:9a:81:c8:64:f8:0a:04:17:c3:
         98:15:c4:42:7d:58:65:bb:53:5e:70:b8:97:15:46:39:98:46:
         b3:af:b8:bc:bd:2f:ac:fa:bb:68:07:5a:2d:56:3d:2b:54:e7:
         16:27:e8:d2:7d:f5:69:10:8c:ac:0a:41:87:1d:00:be:cd:0d:
         a9:44:9c:8a:f0:68:12:6c:0c:5d:9a:3e:41:86:4b:92:57:a6:
         e8:b4:33:05:ad:8b:0b:0b:ed:6b:7f:f4:e5:3e:35:a9:cf:6a:
         3d:20:60:4b:fa:09:45:bd:b3:7d:72:cf:1a:64:1c:f9:db:a0:
         41:4f:2f:f5:7d:c4:49:5c:41:02:e3:85:c6:ac:15:2a:0e:f4:
         d1:7e:3a:67:1d:a5:13:5a:45:b9:76:9b:1e:5e:d2:33:96:15:
         f4:f1:8b:35:28:fe:f0:ee:e1:6a:ac:e0:34:9a:6a:7f:7e:f9:
         bc:d1:e9:07
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MUJFNTExMC8GA1UEBRMoOEVFRDc2OTg0RjIzMUFBMkM3MEYyOTgyMzc4REM2OURE
ODNENTg1QzAeFw0yNjA3MjMxMDEwMDRaFw0yNjA3MzAxMDEwMDRaMBgxFjAUBgNV
BAMTDTZhNjFlODdjLTk4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD6GVW7cEHXr3rWLdUNiuEsTSqgxvmaZU1TwFc8/RvcYklenPahCnkfhR1i9O6o
zNZdAAGJ/m8uW4RqrLUVOU0kAtfB4BQsYQtvWD3t6EK9yBM6bYcLqXvOrJmFH0CG
wQg79cldXsPu8dz0ofziQt05REHQMJaa5EgJ3OwupbTu0SYkmdEzJyIsMzwvkMPf
75aqmLhxGntI3wcRa50CXxU1WJSjCOxcuOS5PH7pg+ZNiFqzSzNmKDIIkE94KKWb
lvwfCGq1fLqNTo41fekxAOJZvRDXg8UhJd7vjT1EyFtpVX3q2sKb7y8aZb5Mns45
3tytMnqQVP+dL21HI9K8TFFdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUet37S2YH
ubb58FkTZl97MDqFmSQwHwYDVR0jBBgwFoAUju12mE8jGqLHDymCN43Gndg9WFww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxQkU1LzNFRTc3RTZFMDAx
ODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FMSER5bUNONDNHbmRnOVdG
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvanUxMm1FOGpHcUxIRHltQ040M0duZGc5V0Z3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx
QkU1LzNFRTc3RTZFMDAxODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FM
SER5bUNONDNHbmRnOVdGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB13XVVFyaP6mnlIvBLBzyoPFQHtXmVivbArLAq2Lya7hyoCxt+eah7icyA7AU0
YQnZT2cVvYE4CDUmCseDtIzfhC/of5GTpRuzYqspHT6QqPqagchk+AoEF8OYFcRC
fVhlu1NecLiXFUY5mEazr7i8vS+s+rtoB1otVj0rVOcWJ+jSffVpEIysCkGHHQC+
zQ2pRJyK8GgSbAxdmj5BhkuSV6botDMFrYsLC+1rf/TlPjWpz2o9IGBL+glFvbN9
cs8aZBz526BBTy/1fcRJXEEC44XGrBUqDvTRfjpnHaUTWkW5dpseXtIzlhX08Ys1
KP7w7uFqrOA0mmp/fvm80ekH
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:04 2026 by rpki-client