Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
File:                     JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json)
Hash identifier:          +jhPpqJmrvfF3KREDsy1txpXxlcCfaFjbtmtNe0oaMo=
Subject key identifier:   D9:3A:F9:A9:5F:48:51:63:56:B7:DF:78:9D:9E:EA:14:4A:CD:0C:A3
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Certificate issuer:       /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial:       1127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
Manifest number:          111D
Signing time:             Mon 22 Jun 2026 17:14:07 +0000
Manifest this update:     Mon 22 Jun 2026 17:14:07 +0000
Manifest next update:     Mon 29 Jun 2026 17:14:07 +0000
Files and hashes:         1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: 2uf8eoTaJaZFEvfVM5xk0jiBCGkBFL8RgrVb23WnfVc=)
                          2: B70383D6385411E9A0023656C4F9AE02.roa (hash: nO9q5TdEL+njfhz6y32FkIAcb7ddj0MbI0cgcnBXBes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
                          rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4391 (0x1127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
        Validity
            Not Before: Jun 22 17:14:07 2026 GMT
            Not After : Jun 29 17:14:07 2026 GMT
        Subject: CN=6a396d5f-0a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:db:47:7c:90:7a:65:23:11:92:a6:89:f6:
                    71:3f:e1:9e:1d:ca:69:96:a6:2e:be:2e:95:f3:2b:
                    f2:3e:82:55:ae:9d:60:b9:46:37:b8:68:87:02:ea:
                    a0:71:a6:2e:96:c2:21:96:00:ef:c5:3c:2a:91:6f:
                    f6:f4:63:53:be:30:88:e4:ae:2a:0d:bf:d6:22:f0:
                    93:c5:de:39:97:75:ed:c4:fa:19:2b:70:35:a1:f0:
                    32:6e:c1:ca:ba:99:61:b9:43:01:5a:83:2e:c1:5d:
                    55:e7:46:54:32:0e:ac:0c:2f:9c:75:da:f3:d9:00:
                    c9:4a:ad:59:fe:f9:0b:f5:81:2a:5f:d2:18:56:5b:
                    a3:f6:35:be:61:60:d1:97:f1:85:a6:a2:81:9d:d5:
                    e4:80:0f:58:ba:08:87:dc:e2:af:e3:35:07:8b:65:
                    e9:e0:78:74:22:42:fb:be:ba:c0:f2:c6:68:5d:bc:
                    d7:41:26:5b:48:ad:f1:52:f3:70:6d:c6:94:4c:88:
                    66:7d:ef:3c:13:85:c5:3e:65:77:bc:37:94:df:91:
                    cd:ab:60:92:43:61:f9:66:3b:34:b2:af:75:ef:84:
                    62:99:89:5a:5d:3d:27:17:ec:eb:5f:c8:2f:0c:f9:
                    9b:a4:bf:a5:3b:ec:c0:40:b9:e0:03:8f:bd:1f:b1:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3A:F9:A9:5F:48:51:63:56:B7:DF:78:9D:9E:EA:14:4A:CD:0C:A3
            X509v3 Authority Key Identifier:
                keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:da:94:b1:b8:e3:1b:f5:75:9c:94:28:73:be:f7:40:b6:
         75:09:4a:b3:00:08:7f:28:c6:bc:7a:7b:cc:d2:6c:ea:f0:e5:
         f6:32:44:43:d6:ec:46:30:f3:cf:ef:f6:b5:26:78:95:bf:40:
         54:4a:49:d5:4b:be:21:ae:c3:b2:5f:53:de:7a:55:d5:b1:18:
         cd:57:da:44:1c:43:83:71:87:2e:3e:01:fb:6e:09:91:a4:cf:
         a8:37:08:ce:a8:87:5b:a3:10:5c:dc:0a:18:7c:b6:77:f2:9b:
         6e:c4:c2:0a:29:5a:f1:33:77:8a:01:20:e5:54:9b:60:1d:ec:
         f8:0c:59:89:92:24:03:53:13:78:5b:7d:4b:f7:a8:e0:83:55:
         15:77:90:87:04:e6:69:44:8a:4d:95:69:29:84:d6:53:c3:2b:
         14:48:56:0f:5a:57:c0:90:89:6b:b8:ca:0e:8e:77:da:55:ea:
         aa:24:2b:46:40:93:f9:2e:b3:0f:39:3f:18:0f:4f:87:04:38:
         39:04:5d:1c:f4:31:e2:a7:f8:ed:79:67:a8:4c:69:3c:74:d7:
         55:57:31:bf:f4:88:56:6d:6b:f8:fc:69:62:a8:83:a6:b9:b1:
         c3:6b:01:f7:2d:e6:f0:c9:e7:bd:76:15:c6:c2:5a:0b:68:f7:
         60:d0:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:36 2026 by rpki-client