Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
File:                     JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json)
Hash identifier:          lvU2Q6FVUSFpPUZOa0Udezz12Fb0b25ceRxCIourZKY=
Subject key identifier:   CA:B9:44:7B:3D:2B:D2:EF:43:4B:8A:51:03:8D:F9:71:48:5C:73:B5
Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9
Certificate issuer:       /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
Certificate serial:       0C25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
Manifest number:          0C18
Signing time:             Tue 12 May 2026 18:51:22 +0000
Manifest this update:     Tue 12 May 2026 18:51:22 +0000
Manifest next update:     Tue 19 May 2026 18:51:22 +0000
Files and hashes:         1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: vNckrEbk6D9BFQlFmp2N9mdmHINiGUhQn9GbkU2XQ7I=)
                          2: A540A624378611EABE283384C4F9AE02.roa (hash: 1yVVaTk5UC50OXhaCy6kGOPkOAIAOZcq9zm6v1RWqvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl
                          rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3109 (0xc25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9
        Validity
            Not Before: May 12 18:51:22 2026 GMT
            Not After : May 19 18:51:22 2026 GMT
        Subject: CN=6a0376aa-2954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:54:7e:5e:9d:c9:b2:c3:5b:47:d9:e9:94:
                    60:fa:26:19:14:cd:c4:f1:7a:34:bb:d2:25:ed:4a:
                    d2:68:b2:90:b7:c2:46:0d:c1:cd:e2:02:fe:46:20:
                    c2:e0:a3:db:c3:35:3f:14:c1:c6:41:96:46:18:fa:
                    96:72:af:b2:56:7e:9a:45:cd:fb:b2:89:b3:3f:c1:
                    d0:ac:5a:3c:3c:bd:ff:7e:82:2a:82:dd:80:85:db:
                    28:d0:13:9d:23:6e:8e:10:25:95:08:fc:ce:33:a3:
                    91:8f:54:39:1e:7c:51:18:6a:66:da:57:d7:f9:03:
                    05:5a:40:64:95:a2:3c:ab:c4:77:e1:7b:b2:55:17:
                    e5:25:a0:9c:a1:c3:81:dd:94:c6:6d:37:65:19:3a:
                    3e:0c:fa:7a:08:b0:aa:b2:3e:84:b1:20:b6:be:b4:
                    a6:c2:86:c2:1d:f5:68:0e:fc:43:dd:d9:ac:bc:82:
                    c8:e5:40:62:04:e2:e7:b3:32:93:78:02:3a:33:9f:
                    8d:58:67:4d:dd:f1:9c:d8:8b:07:e8:e5:b8:32:38:
                    5d:61:ec:e7:3f:70:c7:f5:3d:f7:2c:7b:f5:0c:45:
                    41:84:96:23:82:22:07:25:be:c9:c3:56:5f:d1:5f:
                    85:04:b4:21:d0:37:aa:1d:49:49:c0:78:40:5c:56:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B9:44:7B:3D:2B:D2:EF:43:4B:8A:51:03:8D:F9:71:48:5C:73:B5
            X509v3 Authority Key Identifier:
                keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:64:7e:7e:33:24:66:45:8e:d6:e1:7f:59:14:b8:c7:a7:13:
         cb:e7:64:b3:84:c9:55:5d:c6:53:02:21:4d:a1:f3:d9:c9:ac:
         0f:df:7a:f5:ff:33:31:23:15:61:fe:37:05:6f:f5:c1:35:fc:
         54:28:58:30:42:52:34:04:2d:ef:db:d3:40:64:9f:3e:6b:e6:
         16:28:55:7b:c1:a3:be:9f:2c:c7:9c:64:49:cb:01:b6:5e:6b:
         64:bc:39:d5:42:23:62:cf:1a:43:e7:ec:77:2c:17:e0:4b:71:
         d3:62:4d:7f:48:83:34:b5:74:1c:81:c5:d4:21:03:d4:09:35:
         e0:1f:b1:ba:77:a7:70:8f:1e:81:67:07:c7:12:69:fe:96:1d:
         45:3d:64:68:a3:54:15:00:25:8f:35:f2:f8:de:dd:0f:5f:95:
         69:9c:5b:39:20:74:f3:b6:07:37:a2:86:a0:c9:57:9c:3c:b5:
         1c:5f:a8:73:c7:7a:ec:da:42:08:6c:f1:f5:b5:29:05:74:33:
         7f:70:66:b9:e2:7d:af:35:b9:e2:9f:33:47:81:e4:0d:ae:ad:
         6d:b0:9a:e2:75:e2:73:3b:a9:89:c2:a6:62:5a:bb:46:da:8e:
         ba:a8:f1:d5:21:71:c9:28:00:8a:6a:d2:bc:5e:51:4a:bc:da:
         92:dc:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:47 2026 by rpki-client