Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
File:                     JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json)
Hash identifier:          buEgnLxmwfdiCWtG9CHrWXvIrY0XOCE+roWLo8n81p4=
Subject key identifier:   CE:83:FA:5A:D5:21:CB:1E:E9:46:29:30:86:90:5F:50:30:96:FA:BA
Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A
Certificate issuer:       /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
Certificate serial:       28CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
Manifest number:          28AC
Signing time:             Mon 20 Jul 2026 15:40:43 +0000
Manifest this update:     Mon 20 Jul 2026 15:40:43 +0000
Manifest next update:     Mon 27 Jul 2026 15:40:43 +0000
Files and hashes:         1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: rfxQEY9geXaZMZNsweq06XP02oN3RhS0fzAlNjJDTg0=)
                          2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: K0qm2C6my4ztNffHz19Ct3P2GsiLgSawU1/2AuVC2UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl
                          rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10444 (0x28cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
        Validity
            Not Before: Jul 20 15:40:43 2026 GMT
            Not After : Jul 27 15:40:43 2026 GMT
        Subject: CN=6a5e417b-e6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:85:17:b7:dd:72:5a:b3:82:32:b4:9d:92:
                    80:4c:35:41:c1:5e:af:a5:a5:3e:65:28:aa:85:fc:
                    dd:87:8b:1c:e3:af:3b:c6:eb:cb:94:8d:60:ba:c8:
                    20:b7:ea:99:f5:d0:a8:e1:9f:e8:e6:b5:d4:02:c2:
                    08:c8:89:bf:00:c8:34:33:2c:f0:12:4d:0b:85:8a:
                    b3:ab:76:26:68:0c:2d:7a:20:ed:31:39:10:18:d0:
                    c6:c9:2b:92:13:0e:3f:a9:67:c8:5a:7c:03:db:05:
                    34:b6:0c:31:ac:0f:43:29:4f:b3:ca:d6:3b:ef:3a:
                    20:6c:32:a9:27:25:49:89:00:a0:14:8e:3f:8e:f5:
                    1e:26:fa:99:95:bc:3d:ae:0d:0e:ad:2d:12:54:1c:
                    08:e0:66:2f:16:11:9f:4a:61:4e:0b:c4:a9:b9:14:
                    45:21:e2:8c:16:04:b3:c1:3c:b3:03:d8:45:ee:10:
                    d8:6e:43:1a:66:e6:db:d5:6a:ba:d6:42:0f:5c:b7:
                    ea:b9:9f:15:e6:80:85:78:1e:80:0d:18:8d:f3:a4:
                    04:45:62:41:a4:19:11:0e:cc:9a:aa:fa:ce:d4:51:
                    39:5a:d0:a5:82:d2:d0:a9:47:b9:d4:1f:59:ce:0c:
                    1a:0f:94:67:a5:c9:77:b3:da:84:e4:d4:7e:1a:61:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:FA:5A:D5:21:CB:1E:E9:46:29:30:86:90:5F:50:30:96:FA:BA
            X509v3 Authority Key Identifier:
                keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:23:2f:74:b5:8b:0f:85:0b:03:4e:35:57:cc:17:1b:17:c0:
         38:53:42:a1:da:07:c1:4f:fc:b0:9f:67:a1:46:6d:5e:ce:8b:
         8d:99:7f:c3:68:23:d9:f1:6c:98:77:f5:07:97:b3:74:97:41:
         9a:2f:54:e8:53:bc:a4:ea:24:da:55:96:38:19:af:6d:ba:12:
         a9:6a:5b:4b:4c:64:95:a5:6a:9c:e8:53:3b:61:8f:95:78:6e:
         81:c9:e0:53:4e:91:45:96:7e:16:12:49:73:7a:72:b1:5d:f0:
         d6:71:02:a0:6d:d6:cd:3f:92:66:e4:96:8b:79:d0:40:79:cf:
         09:0b:a4:0a:2a:9b:47:2b:eb:80:ae:7b:a9:1f:41:70:87:71:
         50:ce:98:dd:fc:45:ea:62:a2:ff:c2:94:85:a3:33:2f:23:c1:
         e4:2e:89:82:41:65:12:f1:a7:bc:0e:e2:ae:4e:e0:13:3d:59:
         dc:9c:e9:01:1e:c0:f9:0f:4b:ec:45:87:8a:80:0c:e0:e2:35:
         3b:9e:5f:54:4a:cc:9c:ce:8f:d8:c7:f1:59:7b:dd:af:b3:cc:
         d5:b0:3d:bd:78:c4:db:aa:3d:64:1f:0e:44:9d:c2:2a:0b:46:
         9d:93:d1:bf:65:09:a9:10:b5:54:86:ad:a4:2f:33:19:8b:55:
         04:dd:3e:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC
NkIyREM5N0EwHhcNMjYwNzIwMTU0MDQzWhcNMjYwNzI3MTU0MDQzWjAYMRYwFAYD
VQQDEw02YTVlNDE3Yi1lNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1E6FF7fdclqzgjK0nZKATDVBwV6vpaU+ZSiqhfzdh4sc4687xuvLlI1gusgg
t+qZ9dCo4Z/o5rXUAsIIyIm/AMg0MyzwEk0LhYqzq3YmaAwteiDtMTkQGNDGySuS
Ew4/qWfIWnwD2wU0tgwxrA9DKU+zytY77zogbDKpJyVJiQCgFI4/jvUeJvqZlbw9
rg0OrS0SVBwI4GYvFhGfSmFOC8SpuRRFIeKMFgSzwTyzA9hF7hDYbkMaZubb1Wq6
1kIPXLfquZ8V5oCFeB6ADRiN86QERWJBpBkRDsyaqvrO1FE5WtClgtLQqUe51B9Z
zgwaD5Rnpcl3s9qE5NR+GmE/mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6D+lrV
Icse6UYpMIaQX1Awlvq6MB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy
RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkM2Mi8zMjg4QzMxMkEyRTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9w
Yjl6ZXNqV214SU8yc3R5WG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlCMvdLWLD4ULA041V8wXGxfAOFNCodoHwU/8sJ9noUZtXs6LjZl/w2gj2fFs
mHf1B5ezdJdBmi9U6FO8pOok2lWWOBmvbboSqWpbS0xklaVqnOhTO2GPlXhugcng
U06RRZZ+FhJJc3pysV3w1nECoG3WzT+SZuSWi3nQQHnPCQukCiqbRyvrgK57qR9B
cIdxUM6Y3fxF6mKi/8KUhaMzLyPB5C6JgkFlEvGnvA7irk7gEz1Z3JzpAR7A+Q9L
7EWHioAM4OI1O55fVErMnM6P2MfxWXvdr7PM1bA9vXjE26o9ZB8ORJ3CKgtGnZPR
v2UJqRC1VIatpC8zGYtVBN0+1A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:15:28 2026 by rpki-client