Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File:                     rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier:          BK1r2llG0LUGWZ+BnGQ+3Wr53jJioicqynrqUFMvawc=
Subject key identifier:   A8:D4:09:02:21:C9:C8:E0:8E:32:27:0D:38:8E:91:60:9D:80:CD:C5
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer:       /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial:       02C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number:          02A9
Signing time:             Thu 21 May 2026 01:41:37 +0000
Manifest this update:     Thu 21 May 2026 01:41:37 +0000
Manifest next update:     Thu 28 May 2026 01:41:37 +0000
Files and hashes:         1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: lvh8Dol74VBbQMqLkAgHIy7DBuSW6ZeMj0Ik49DmbrE=)
                          2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: 1Glvhcf7GkoJCunHDpP45q9GMuetf4Sccyte1OOh3sM=)
                          3: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: QY2VRet4P+YKz9oxq3Ig+v1EAPIpWMaBqPXmBJ+0Whk=)
                          4: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: jnvYSXUOzZRSAh+pOehb/z7FrmRMGdKIIgdSaHoUN6w=)
                          5: 1C2724723E0911F198404A6BA7833773.roa (hash: fX20YeIhUJqjtcw9DnqTBjexrVmlgAGNWoOHzMECyVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
                          rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
        Validity
            Not Before: May 21 01:41:37 2026 GMT
            Not After : May 28 01:41:37 2026 GMT
        Subject: CN=6a0e62d1-b5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:81:f7:67:66:e3:cd:d8:93:70:47:02:2f:
                    fe:b5:ac:5e:94:7d:34:dc:28:ac:69:d7:84:52:6e:
                    18:6c:b3:0e:29:16:47:f4:47:ce:55:b4:19:0d:a0:
                    bd:9b:25:5e:2b:06:00:2a:4a:74:fc:22:d1:d8:71:
                    cd:83:51:78:4e:8d:70:07:43:ae:5d:a5:f9:c7:79:
                    81:f8:03:68:f0:1c:47:e3:3e:70:6b:8e:50:18:89:
                    9f:51:35:95:0d:08:48:1e:84:85:45:50:49:6e:9d:
                    97:a3:07:5f:70:3d:e1:86:c7:54:03:6f:b8:10:70:
                    1a:dc:74:34:b8:d1:5a:09:ba:aa:64:4a:f4:66:39:
                    59:08:0e:4d:87:9b:fd:99:a0:97:98:17:22:0b:c4:
                    70:78:a3:63:ca:ff:fd:1c:62:d8:82:5a:8f:94:c5:
                    0c:87:d5:f2:c5:b1:69:28:4c:52:d0:a5:7f:f7:f0:
                    46:d4:71:d3:29:d4:80:80:02:82:a9:5e:9a:a0:af:
                    48:8d:ab:6c:0d:ca:c9:2e:95:db:36:48:e7:44:f2:
                    7e:49:70:48:ca:ba:2f:3a:25:2c:cd:77:78:25:81:
                    4e:f8:64:41:98:16:ee:fc:45:76:b5:e1:78:ad:b4:
                    e6:cd:18:3f:d6:2a:ec:e8:80:4b:f1:31:b4:59:1d:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D4:09:02:21:C9:C8:E0:8E:32:27:0D:38:8E:91:60:9D:80:CD:C5
            X509v3 Authority Key Identifier:
                keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e9:5f:04:ba:97:31:d1:44:fd:b5:7d:65:04:aa:82:9e:c5:
         4d:84:ce:a6:2f:94:e9:2c:6a:3e:da:60:e2:48:5b:c3:48:4b:
         d2:96:44:9e:00:de:13:a2:e5:10:28:a2:84:e5:ca:c1:c7:af:
         45:0c:2c:56:f7:9a:98:45:3a:da:98:c5:e2:7f:b2:71:41:9c:
         d3:fd:fb:2b:6f:ef:7d:88:d8:59:6f:9f:95:e0:7f:b7:16:c8:
         a4:ea:55:51:6a:01:0f:0e:c8:db:cd:23:95:eb:38:b5:78:8f:
         d6:d2:8c:34:6b:5f:05:d7:4a:f5:59:77:82:f5:0d:8d:b0:60:
         e8:d2:85:22:b6:e5:f9:21:67:91:1b:8e:c2:e5:f8:46:f3:ae:
         e1:92:61:85:c2:6c:bf:0c:4f:55:0b:49:f5:14:94:6e:44:2e:
         05:0b:73:ca:64:97:1d:6c:b9:61:9b:43:92:16:a4:bc:e1:4c:
         85:d0:cf:fb:fa:d5:22:e6:ba:35:d0:94:f3:6f:b4:95:57:1e:
         9a:c4:38:48:d9:a1:2f:5f:6e:d4:46:2f:40:cd:f5:5a:d4:fe:
         d3:c6:20:13:9b:fa:9e:2f:86:52:35:a5:e5:41:0c:60:fd:9e:
         dc:eb:e2:01:4e:90:c3:d6:32:53:df:03:b1:3b:2b:f1:02:9d:
         de:97:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:16 2026 by rpki-client