Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
File:                     JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json)
Hash identifier:          WPEue5zzzKtCQbQ2oGK1s6vAoRdpNB/fbDsf99ISld8=
Subject key identifier:   27:6C:1F:2E:6B:37:F6:CC:D3:03:A6:3D:87:FB:E6:61:92:A7:9D:B7
Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Certificate issuer:       /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Certificate serial:       0E06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
Manifest number:          0DF8
Signing time:             Thu 14 May 2026 17:51:14 +0000
Manifest this update:     Thu 14 May 2026 17:51:13 +0000
Manifest next update:     Thu 21 May 2026 17:51:13 +0000
Files and hashes:         1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: ersQukKq1r1KcoNnRGsGlfkxbAoWNcO2RZBCDw8LF0o=)
                          2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: OfNFpH9GIQJltS0lQZJbFqhAmufXcOZEA+1QEku0JhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
                          rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 17:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3590 (0xe06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
        Validity
            Not Before: May 14 17:51:13 2026 GMT
            Not After : May 21 17:51:13 2026 GMT
        Subject: CN=6a060b92-68d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:23:09:2c:bd:62:23:ef:e9:e3:00:88:b0:
                    c7:4f:99:10:69:22:ac:eb:72:fd:5b:5d:1a:3c:65:
                    d2:c8:75:d2:20:9a:03:f7:2c:ed:09:19:c8:4f:99:
                    2e:98:82:3a:aa:0a:e8:cc:e8:fd:72:aa:62:15:87:
                    8a:8d:99:09:9f:b7:b6:12:dd:9d:06:2b:05:1a:ba:
                    56:4a:8f:11:e4:ff:50:49:ed:d9:7f:4a:ae:2f:69:
                    fb:2a:e9:5d:3c:c1:4f:78:81:d2:b1:69:a2:de:ff:
                    d0:7b:ea:ce:18:e2:d5:00:61:2c:0d:34:c1:91:17:
                    8b:82:95:94:ea:ad:f9:01:77:7c:62:26:47:a5:c1:
                    10:99:2f:a2:ae:e7:72:22:35:f2:af:f4:e6:0a:78:
                    8c:13:5c:08:e4:c0:27:cb:36:32:52:6f:4f:16:1c:
                    27:46:e9:41:f7:56:d4:65:49:03:da:a7:10:04:40:
                    34:de:41:d0:5f:10:87:45:12:db:a4:a6:e3:c5:86:
                    28:22:f4:eb:f1:c8:75:93:97:5e:c5:f6:b6:99:63:
                    ce:51:01:af:d7:b6:3d:5d:b7:36:33:b5:0e:1a:08:
                    5a:34:5c:89:59:2d:2e:5c:39:10:bd:f2:88:73:c8:
                    15:30:83:98:cc:bf:b9:72:8f:14:62:08:6f:04:45:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:1F:2E:6B:37:F6:CC:D3:03:A6:3D:87:FB:E6:61:92:A7:9D:B7
            X509v3 Authority Key Identifier:
                keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:65:83:5f:10:14:a5:7b:50:e0:79:f3:40:57:54:49:74:e1:
         a7:66:64:8a:bf:59:c3:a3:53:9f:8a:87:3a:73:91:3d:b7:2a:
         92:1b:80:27:e0:ef:97:70:5f:13:4e:bf:f4:e1:87:ec:02:7e:
         e8:b1:34:d5:4a:4a:4b:ff:7c:99:59:9f:71:b7:d5:35:7a:36:
         7e:c4:75:1d:86:16:8b:b4:60:d5:29:a2:bf:28:db:bc:81:51:
         de:3d:6e:20:a8:e0:3f:a4:7e:3f:85:8c:93:ed:19:d5:d8:e7:
         8e:d7:af:44:c4:60:82:53:3b:3c:0d:37:44:0e:e6:00:28:55:
         7f:d5:f7:4f:8c:3b:1d:46:bb:7d:39:06:b7:b0:64:4b:0d:56:
         8d:3a:44:25:8a:84:f6:33:c9:14:51:33:6a:e0:eb:a6:14:b2:
         45:6a:60:24:e5:1b:67:1b:d1:75:62:31:27:35:7b:93:8f:2e:
         91:12:de:bb:41:37:d7:67:5a:d3:a5:a6:c3:01:89:44:b5:9a:
         8d:2f:7a:e0:af:ac:b6:73:35:dd:76:64:d8:c3:95:16:c8:d6:
         a7:75:94:45:8f:c5:75:0a:95:c9:19:b8:dc:ee:84:e7:c3:bf:
         8a:3d:24:18:83:c2:21:a0:b7:88:22:79:34:33:f7:c4:ba:da:
         91:ad:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:06:49 2026 by rpki-client