Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
File:                     J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json)
Hash identifier:          kWHez5s55s1Hw59PF+SrHzU2f0cNQX94Jq2JgiwE+Uc=
Subject key identifier:   D7:9D:EE:44:E7:73:A9:50:A0:D0:BA:2F:0B:EE:3D:C7:0D:2A:C4:1F
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0C49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
Manifest number:          0C35
Signing time:             Sat 04 Jul 2026 18:50:46 +0000
Manifest this update:     Sat 04 Jul 2026 18:50:45 +0000
Manifest next update:     Sat 11 Jul 2026 18:50:45 +0000
Files and hashes:         1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: 9dser3emHc6RLeluXO6D6QJ+W9VbF1vSEuD8OnjBAn0=)
                          2: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: TblqmML4Z56TJGS/QmGAg1lALjsba+7daK1iMQjSZu0=)
                          3: E1647F18303311EA8796D584C4F9AE02.roa (hash: hvHQ4oovH4LfseVNWUdyIbRafNtihmdVkn0b5XITvtA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 18:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3145 (0xc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: Jul  4 18:50:45 2026 GMT
            Not After : Jul 11 18:50:45 2026 GMT
        Subject: CN=6a495605-7272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:bc:af:43:9f:bc:d9:11:3e:5a:95:d4:a7:
                    98:ed:d4:cc:63:9c:8e:4c:ea:a9:9b:61:05:1f:09:
                    dc:1d:62:8d:af:92:7e:0e:1e:19:e9:d7:18:ee:7a:
                    ee:09:8d:f8:b3:80:2c:55:bf:94:97:e6:30:d4:06:
                    8f:7f:62:b3:ec:d0:ae:b1:07:7b:24:18:65:bb:fb:
                    06:f1:2e:cc:96:84:8e:d1:a2:38:8e:f9:8a:a8:17:
                    5d:35:2e:bb:f9:63:ec:3b:31:ff:e8:77:2f:02:ce:
                    0e:ba:f6:0e:e4:4f:1e:be:ee:69:0d:65:c3:97:f0:
                    d7:57:fe:0d:55:04:36:a1:f8:db:17:ce:a5:2f:f9:
                    a3:c6:25:e6:79:74:c3:07:8d:18:50:c8:93:e0:49:
                    5d:a8:06:90:82:3b:b8:1c:2b:8d:58:62:9a:46:2b:
                    ba:ed:a9:5a:3b:cc:0c:ee:ed:2b:c2:54:d9:d6:eb:
                    cc:5b:82:88:63:2c:91:c2:7b:27:8b:5a:b5:0c:1f:
                    92:10:63:eb:15:a9:01:a3:e7:28:bf:e4:4c:5f:37:
                    fb:7c:22:5f:a3:3d:73:0e:7b:04:55:96:77:3b:fa:
                    9a:15:a8:57:d3:b7:43:de:56:e9:57:d7:60:13:ca:
                    0c:c3:97:f2:72:e3:b8:66:ed:05:0b:b8:37:0c:68:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9D:EE:44:E7:73:A9:50:A0:D0:BA:2F:0B:EE:3D:C7:0D:2A:C4:1F
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:91:fa:73:c3:e4:07:4c:58:a4:0f:ab:0a:cf:59:28:3e:55:
         a5:57:2c:b7:bf:fa:ce:80:85:fd:73:37:85:35:1c:c2:8e:b4:
         bf:d2:69:27:88:1d:10:96:fc:4d:00:72:ce:6c:c5:64:f9:c3:
         0e:b6:70:64:1a:81:97:32:a0:4b:13:8e:f7:b6:0c:ae:b9:53:
         5d:54:1e:30:f6:2f:08:0d:75:3e:67:94:4b:8e:20:e7:f8:28:
         26:14:df:cc:5b:33:7c:e7:35:f4:09:43:fe:5e:bd:98:e5:1a:
         a7:ba:7f:bd:3c:03:01:8c:fa:b3:95:de:1d:70:1d:b5:d3:18:
         eb:c8:26:54:2d:46:72:ad:ec:87:a1:65:b7:93:0a:2d:88:5d:
         da:66:45:03:74:c3:78:01:5c:02:d2:65:92:60:34:15:5b:eb:
         f3:3d:22:5a:ce:3f:74:cf:52:d2:b5:f6:ab:8f:05:4c:9e:e7:
         db:aa:77:08:fb:cd:95:63:b0:9f:1a:18:fb:e1:2c:b7:e4:8b:
         17:05:55:a7:d9:79:a0:28:2a:59:9c:23:4f:c4:23:77:40:34:
         ef:06:3a:5e:53:e9:05:83:8d:64:50:64:cd:d1:e7:96:fd:47:
         89:1d:af:3e:2b:e3:25:03:9e:a3:b0:f0:1b:38:e0:ae:a4:a1:
         73:35:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:21:32 2026 by rpki-client