Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
File:                     JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json)
Hash identifier:          EsIxPfdqXWshDWVroalRB2gj4uYYkwWLh1AZbShaMpQ=
Subject key identifier:   23:3B:E2:A7:F9:94:A7:80:6A:5C:E3:80:17:7A:0B:4D:6F:78:AF:F5
Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7
Certificate issuer:       /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
Manifest number:          01C2
Signing time:             Mon 01 Jun 2026 04:38:45 +0000
Manifest this update:     Mon 01 Jun 2026 04:38:44 +0000
Manifest next update:     Mon 08 Jun 2026 04:38:44 +0000
Files and hashes:         1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: 3RA1E21Z80KyuwPe/57HsyKVNmAh7J4Y4Y8qI0CchxY=)
                          2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: EbaHzYxJkhS/e/mhIStkM2ixlMOj0eIXkmV/72ibVUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl
                          rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7
        Validity
            Not Before: Jun  1 04:38:44 2026 GMT
            Not After : Jun  8 04:38:44 2026 GMT
        Subject: CN=6a1d0cd4-2d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:5a:61:b3:eb:f5:64:38:1a:88:a4:9a:74:
                    c7:a3:4c:46:b2:c6:44:0c:d4:bf:ba:e1:a2:3e:32:
                    d1:f9:a2:59:64:c9:77:a7:3e:d2:fe:49:30:36:9f:
                    46:db:60:e2:50:48:0d:7b:47:f4:0a:67:c7:93:61:
                    ac:6f:27:c9:77:78:af:5b:a3:a2:9f:12:72:e0:82:
                    ef:94:7c:a8:8a:8d:7d:69:9f:bf:c0:0a:4e:f4:dc:
                    b2:68:b8:9d:5d:51:28:3f:d5:ae:c0:4d:df:45:26:
                    26:21:1d:3a:06:0f:01:71:ed:76:50:09:67:c0:bf:
                    d3:d5:82:4e:67:6f:62:f3:51:ba:ff:4c:e0:2b:33:
                    4d:a5:b9:96:7f:21:04:9e:23:e6:fb:8b:28:8c:43:
                    23:80:bd:ea:07:79:1a:64:3c:4d:b1:2f:b0:65:11:
                    1a:ed:7c:4e:a2:19:d1:6c:aa:9c:d9:15:ee:62:24:
                    3c:1d:9f:3c:4b:c0:b9:c7:db:0f:31:d1:80:fd:ba:
                    2d:46:2a:d0:10:a4:b8:82:b7:41:77:83:84:d2:9a:
                    35:23:a8:09:b2:52:7b:e7:f9:a5:83:bf:8f:3c:0d:
                    18:e4:be:46:08:f1:a5:9d:e3:ca:b1:dd:d6:2c:69:
                    dc:f9:f8:a7:f1:6f:67:24:89:2b:d0:28:e2:ac:66:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:E2:A7:F9:94:A7:80:6A:5C:E3:80:17:7A:0B:4D:6F:78:AF:F5
            X509v3 Authority Key Identifier:
                keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:d1:82:14:82:55:08:e9:24:c1:c0:cb:ed:d5:2c:9c:bb:
         bc:e7:72:89:41:c1:51:51:90:d9:76:4e:a9:e0:1d:bd:9a:10:
         94:08:06:75:09:6b:f5:b4:c2:59:18:44:76:2c:26:00:b2:aa:
         2d:ed:f3:0e:0e:e3:52:6e:7b:ab:df:24:ba:24:27:3e:8f:b6:
         76:bf:dd:00:aa:27:9f:e9:7b:f7:06:7b:aa:e2:a3:be:b2:98:
         a9:9e:08:f6:4a:14:5c:ce:52:8e:df:8e:94:c5:d4:04:f9:58:
         2d:28:d6:d1:e2:75:b7:40:bb:15:80:0b:03:70:da:5c:55:e7:
         dc:1a:7f:2f:03:35:99:af:3c:bc:5f:18:5a:7e:48:15:2b:f6:
         15:23:5e:5e:8a:ae:30:b0:8e:a5:e8:8b:2b:97:bf:2a:6d:94:
         bd:40:62:57:12:12:ae:80:11:ca:2b:6c:56:dd:5e:eb:ae:b5:
         ae:11:d2:31:da:17:6b:32:cb:c2:5e:5f:6f:1f:95:ea:73:fb:
         97:d2:ec:b2:7d:69:99:0e:7a:9a:41:a9:2f:12:40:46:05:fc:
         9c:f4:c1:dd:5f:94:cc:c1:29:d1:3e:01:f1:e2:ab:60:b5:24:
         12:5f:da:ee:97:5d:7c:18:e9:35:99:18:f4:65:36:53:e1:e7:
         16:ba:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:13 2026 by rpki-client