Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
File:                     J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json)
Hash identifier:          Y/PYqe9TNqEvMcqwF24JjEH69YOR10DaP4CUCRpy1w4=
Subject key identifier:   4B:40:E2:16:AA:27:EC:89:7F:18:97:2E:66:9A:E5:19:58:1E:43:F9
Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
Certificate issuer:       /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
Certificate serial:       06D0
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
Manifest number:          06C8
Signing time:             Mon 20 Jul 2026 18:55:03 +0000
Manifest this update:     Mon 20 Jul 2026 18:55:02 +0000
Manifest next update:     Mon 27 Jul 2026 18:55:02 +0000
Files and hashes:         1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: Xo7vWHpjktLjbfrdnYopfVhhxszctn1BAv7RBYNndd4=)
                          2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: C9xOCAlI2ugXqr2LkeMuXjVj2fsjnMUChwzmuRA9WBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl
                          rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 18:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744 (0x6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
        Validity
            Not Before: Jul 20 18:55:02 2026 GMT
            Not After : Jul 27 18:55:02 2026 GMT
        Subject: CN=6a5e6f06-c042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:5d:24:23:b0:61:37:52:65:8b:f1:60:22:
                    72:5c:b7:56:db:8d:01:98:06:e9:e0:d5:fe:8e:16:
                    00:b8:5a:16:5a:a4:39:7a:39:6c:5a:d8:3c:62:c2:
                    c4:e0:4d:d2:79:34:cc:a4:5a:f1:93:62:52:a3:58:
                    bd:2c:56:52:14:e9:33:74:7b:61:27:f0:f9:e1:0f:
                    1c:26:a4:14:4d:98:7e:07:cb:4e:52:13:83:30:89:
                    fc:8c:6e:aa:0c:a1:62:8c:14:f2:dd:70:7f:6e:d5:
                    db:87:27:e9:42:fd:a8:2c:78:d2:c0:23:be:3c:51:
                    82:3b:fc:e0:c7:c0:1f:84:bf:7f:69:d5:49:8e:c7:
                    c8:30:b0:e1:40:26:27:e9:e9:d6:7a:f6:41:f5:fc:
                    7b:56:34:44:64:01:80:99:c6:d0:49:82:9f:6d:0a:
                    82:02:7a:aa:37:5c:53:b2:34:ff:36:9a:48:2d:e9:
                    d3:ca:6f:98:79:f7:68:bc:f0:4a:3c:5d:c3:ac:05:
                    bb:f1:34:cf:b6:41:42:e5:ec:b5:a5:05:61:bc:65:
                    3a:da:fa:74:c0:c8:50:5d:70:52:90:f8:2d:69:19:
                    a1:f6:c7:3e:f8:5a:21:f5:e4:37:32:5d:cb:cf:2b:
                    40:8e:47:10:05:2d:4a:35:28:51:e8:5f:f5:1f:13:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:40:E2:16:AA:27:EC:89:7F:18:97:2E:66:9A:E5:19:58:1E:43:F9
            X509v3 Authority Key Identifier:
                keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:ee:02:b3:d6:d6:76:88:b1:22:86:22:1c:a4:a6:2d:ec:
         ca:fd:9e:1a:18:a7:6e:8e:65:4c:18:91:15:fc:ef:7c:08:f8:
         30:54:b6:32:7f:2e:b8:d0:9d:f1:28:1f:89:8c:e6:19:79:e0:
         ea:a6:d3:d5:b3:5c:d6:7b:1c:d7:15:29:2b:8c:71:84:7c:bc:
         fb:4b:38:f4:41:c7:a7:af:88:53:20:4c:11:d5:7a:18:4e:cb:
         dc:4a:88:2b:50:b4:4f:ae:90:39:91:2e:6a:03:f7:9d:54:86:
         c6:9c:f9:2b:c9:38:9b:79:77:ed:39:f4:cc:52:f0:cf:06:ec:
         80:8e:16:b6:58:57:39:c1:83:14:0f:2c:2f:3f:d0:7d:dc:a6:
         d5:c7:a1:fd:6a:7f:44:c5:fd:e6:3a:ca:56:bd:1c:bb:eb:07:
         cf:91:a3:51:44:fd:05:40:81:d3:a6:70:c9:22:d3:3b:69:47:
         9b:0e:db:6e:3f:08:77:2b:5e:93:e0:28:d7:ad:98:44:da:04:
         ba:f5:01:17:6c:68:34:85:c5:c2:72:59:35:5d:39:8a:a2:0c:
         28:b4:75:7b:a5:83:40:bd:22:f7:e7:0c:7c:17:c2:a7:cc:e2:
         80:f2:2b:39:d8:87:26:b5:de:28:db:14:ee:81:e1:cf:00:99:
         e2:63:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:53 2026 by rpki-client