Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
File:                     JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json)
Hash identifier:          sZv9sHZx18n/bBay3oiV1S3xHJTKtPdDxEbdQcIT1NU=
Subject key identifier:   A3:20:DB:57:87:90:3F:91:0F:16:E1:6C:3D:53:CB:22:5D:6E:6E:7C
Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
Certificate issuer:       /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
Manifest number:          011D
Signing time:             Wed 13 May 2026 06:00:42 +0000
Manifest this update:     Wed 13 May 2026 06:00:42 +0000
Manifest next update:     Wed 20 May 2026 06:00:42 +0000
Files and hashes:         1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: V7In4nApRrA+rU7ZYom7+jDrFWZQl/aqZ6MyeHqia/g=)
                          2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: Wje7b0TIX74OOVmbF1Qlf27pCsIdrJxMhiH1wvLQ9Gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
                          rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
        Validity
            Not Before: May 13 06:00:42 2026 GMT
            Not After : May 20 06:00:42 2026 GMT
        Subject: CN=6a04138a-3a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:71:b2:5e:76:c1:f9:d0:56:84:d6:d0:36:
                    88:b7:1b:59:0e:da:9c:56:a3:69:5b:21:95:7b:40:
                    f5:6d:7e:ea:ae:79:96:1e:34:c0:5d:73:b1:a1:89:
                    69:f0:a6:7b:3c:41:31:fe:79:7c:4c:4f:99:cf:cd:
                    8e:06:6e:3b:5a:ea:4b:2d:69:e1:f4:12:38:91:5a:
                    14:d2:46:11:e3:6e:88:13:15:09:47:60:0f:c1:88:
                    2d:c8:56:16:c7:23:55:18:67:97:b7:c8:4d:3f:b5:
                    43:c3:f8:fe:7e:2d:3d:13:11:44:2a:86:7d:57:fc:
                    99:23:72:46:b3:75:06:bb:92:17:3a:46:73:ae:f4:
                    24:99:fd:81:20:b1:d3:22:37:02:91:c9:34:20:b3:
                    a8:23:f6:83:3e:2d:8a:98:9e:88:88:e8:1e:5a:02:
                    9a:a9:52:40:f6:57:4a:65:b5:8b:30:43:86:1e:91:
                    bf:4f:ee:0e:a0:d5:8f:f2:c8:c0:d7:a4:e7:fc:c8:
                    77:21:7e:54:9e:af:78:01:a7:2e:79:5e:35:43:2e:
                    20:b5:92:0c:d6:0f:42:02:98:f5:0f:17:84:30:0d:
                    0a:4c:3e:e8:97:1a:b4:bb:c4:45:c3:e0:ea:36:17:
                    5f:96:73:7d:ef:e4:c6:dd:b6:bf:59:82:b5:b5:e8:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:20:DB:57:87:90:3F:91:0F:16:E1:6C:3D:53:CB:22:5D:6E:6E:7C
            X509v3 Authority Key Identifier:
                keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:33:d3:b6:dc:2e:1e:fa:ce:13:8c:c9:d4:57:6f:aa:b6:b8:
         77:86:32:04:71:48:06:e2:af:92:ff:81:2f:8a:49:9c:59:26:
         49:c2:c7:83:85:f7:e4:5c:ab:51:4a:73:fb:84:cb:82:a8:ed:
         0e:e4:d7:6c:f8:86:eb:14:13:01:c6:06:a8:22:07:f7:2b:2f:
         e0:2c:e6:c9:b7:87:2e:c8:af:a2:2e:cd:42:b4:00:5b:cd:25:
         65:fc:7b:f0:5d:0e:ff:df:d9:53:40:a8:19:4c:67:d9:47:73:
         00:59:e3:f1:1c:00:9b:c3:46:7e:07:38:26:fb:d2:ff:50:8d:
         a0:e2:40:38:ed:87:8b:8a:cf:42:1a:9a:a8:7e:0e:78:c2:67:
         00:fb:00:16:8d:86:bf:92:9e:98:97:85:d0:6a:fb:7a:fa:57:
         13:8c:df:09:ec:08:f3:ec:96:94:61:f6:b7:40:79:fa:75:4d:
         48:8c:2d:c2:60:75:36:9b:0c:0b:c3:43:05:1d:b7:25:c0:38:
         f8:f6:2d:b8:a9:6d:41:46:b9:5b:58:3b:fc:11:d5:a7:f9:06:
         67:04:dc:e3:71:1d:09:49:33:94:95:61:04:c9:09:7e:8e:75:
         bc:5b:c2:30:e6:67:37:26:f8:d3:1a:03:41:7a:7d:d6:8e:a4:
         09:85:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:33 2026 by rpki-client