Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
File:                     JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json)
Hash identifier:          WOQu9fdpJv+XGDEVi3eImOkdup+t3coco4FYW72RkO4=
Subject key identifier:   A5:7F:1D:F2:2B:42:56:B8:CB:49:11:94:83:1E:17:6E:5A:DD:18:76
Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A
Certificate issuer:       /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
Certificate serial:       28B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
Manifest number:          2895
Signing time:             Thu 04 Jun 2026 15:36:30 +0000
Manifest this update:     Thu 04 Jun 2026 15:36:30 +0000
Manifest next update:     Thu 11 Jun 2026 15:36:30 +0000
Files and hashes:         1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: Im/KrQaZZWfk35doopeGSAmGq6j2/q/f6DwnQ6hqNX4=)
                          2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: K0qm2C6my4ztNffHz19Ct3P2GsiLgSawU1/2AuVC2UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl
                          rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10421 (0x28b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
        Validity
            Not Before: Jun  4 15:36:30 2026 GMT
            Not After : Jun 11 15:36:30 2026 GMT
        Subject: CN=6a219b7e-fbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:7c:c3:4a:58:f5:8d:ab:ba:2d:90:4e:b4:
                    75:f2:47:00:10:0c:fd:f8:58:6d:92:31:0b:5a:b1:
                    99:cf:c2:87:be:cd:22:e8:a0:fc:f1:e8:cb:86:c2:
                    7f:9c:4b:5c:38:3a:ff:1a:b8:5d:91:1f:74:4c:46:
                    00:5a:65:bb:dc:21:52:f2:37:b2:61:a8:8a:08:b9:
                    77:92:c9:2a:74:34:cf:8b:e1:69:0a:c9:3e:40:30:
                    08:d3:d8:81:c7:99:79:d0:5a:88:68:c4:d2:88:76:
                    11:87:1f:4d:26:d9:4c:dd:1a:40:11:49:c8:b2:39:
                    71:9c:f2:16:f1:fc:e2:d2:bd:95:36:a7:f8:19:aa:
                    18:03:e1:25:ce:6b:64:09:24:e4:5e:51:43:55:2c:
                    a4:c6:d0:42:b3:69:fa:a0:af:5f:ff:c1:12:66:7b:
                    7c:62:07:18:33:c8:df:8b:43:ca:23:d9:6b:2c:7e:
                    16:d2:30:75:7f:02:7c:ba:b5:a7:5b:9b:13:9f:d0:
                    8f:e1:7a:49:70:7d:61:c4:58:a9:6d:9e:08:93:1d:
                    1b:49:20:1d:5c:2b:94:6e:8b:1a:9c:64:a5:67:dc:
                    53:09:d0:12:12:f3:a8:c7:6f:47:bb:f2:c5:82:4f:
                    e8:08:69:5f:00:96:77:56:36:4b:ff:39:6b:4e:92:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:1D:F2:2B:42:56:B8:CB:49:11:94:83:1E:17:6E:5A:DD:18:76
            X509v3 Authority Key Identifier:
                keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:14:25:f1:37:bc:6d:c6:8d:7a:e7:b1:0d:73:92:ab:3e:7c:
         bd:f1:7b:53:78:a6:ec:4e:04:ec:bb:88:58:41:6c:d6:e0:1d:
         6e:e5:76:97:b2:7e:c1:3f:5e:79:fd:76:90:71:d0:c4:f1:7d:
         d7:f7:89:3a:52:40:c0:36:c8:91:95:71:16:7c:ef:e2:8d:17:
         9b:5c:a9:e5:de:1a:e5:45:01:b9:f0:75:e7:ce:2b:51:84:5a:
         5f:34:bd:3a:5f:9e:4e:cc:be:0f:13:a5:00:f3:8b:15:35:22:
         23:e0:ba:b5:07:cd:e5:38:3e:39:05:c1:8b:1b:1d:ae:37:b1:
         0a:65:5d:a5:52:ee:f5:48:57:91:85:c0:a7:9c:74:d8:e6:9f:
         cc:2d:00:09:43:4f:bf:75:e1:1e:2c:5b:48:cf:e1:9a:5d:ed:
         7e:8f:c1:68:6e:26:fb:b4:39:87:fc:a8:2c:8e:d7:65:bf:28:
         55:f4:3e:57:27:0f:1f:df:8d:2a:d2:f3:e4:e5:ca:01:5d:98:
         e3:db:7b:79:61:19:88:a0:b3:99:b0:cb:9b:5b:8c:dd:49:31:
         be:40:f5:55:6c:dd:fd:4b:44:07:91:70:23:78:0e:20:61:a3:
         ee:39:66:e3:4d:19:d0:63:cd:56:f7:ba:46:65:f4:92:88:0f:
         aa:6d:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:50:52 2026 by rpki-client