Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
File:                     jedlypHSuTU2K6RMdbXBIrSmzvQ.mft (raw, json)
Hash identifier:          L6m8nNMf3K6DZ0l7Q7E3jMYx9SfMbtsn0Nr7ROuowyY=
Subject key identifier:   22:4D:D7:BE:97:81:5F:B6:71:5E:18:C9:79:A1:05:C6:07:DD:A6:25
Authority key identifier: 8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
Certificate issuer:       /CN=A913E5F9/serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
Manifest number:          4C
Signing time:             Mon 01 Jun 2026 09:11:58 +0000
Manifest this update:     Mon 01 Jun 2026 09:11:58 +0000
Manifest next update:     Mon 08 Jun 2026 09:11:58 +0000
Files and hashes:         1: jedlypHSuTU2K6RMdbXBIrSmzvQ.crl (hash: 8DD1r8rPxVLRNfDtItw64/Jooer8/F5vYUWuDPum+h0=)
                          2: DF3673AAF69211F094F72B3C3B6F56BC.roa (hash: fnqiKGE3K2rrneA73qgjy9hRogfZICMcrPpFNmCB2iY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E5F9, serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
        Validity
            Not Before: Jun  1 09:11:58 2026 GMT
            Not After : Jun  8 09:11:58 2026 GMT
        Subject: CN=6a1d4cde-404b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a5:28:86:e2:29:45:17:02:71:9d:8b:31:6a:
                    85:5d:22:cc:33:9a:32:a9:fb:2b:8e:b6:ac:e8:1c:
                    87:43:f2:c8:6e:c2:7a:33:9f:0a:51:7d:ce:54:80:
                    69:9b:2d:e0:83:6c:0d:eb:e5:17:63:28:e2:c3:50:
                    c0:7f:70:eb:9c:fc:77:66:ca:62:9a:01:27:ef:d5:
                    e3:41:12:83:09:57:76:7e:dc:fe:d1:3c:fe:82:68:
                    c6:f5:45:99:05:32:94:48:5b:26:85:5e:15:8c:21:
                    e0:f1:f3:94:f6:12:7f:7d:ee:69:c0:89:a1:9f:54:
                    bd:e5:3e:85:2e:1f:78:b7:43:05:27:83:1b:e5:9a:
                    31:2b:46:cb:a7:28:06:c6:3f:d6:f5:f8:52:27:53:
                    0b:b1:26:00:7e:b6:ff:f3:76:47:bf:c2:03:ba:b4:
                    dd:5a:b4:3f:8d:38:d6:44:4e:f0:c6:f9:2b:ec:a9:
                    fb:43:8a:32:f4:e6:df:6d:53:4d:64:fb:99:b8:c2:
                    53:c3:08:fb:46:98:dd:c7:fc:c0:55:ad:12:76:80:
                    67:52:0b:ee:f4:70:a2:93:ed:63:0d:47:60:d2:50:
                    83:86:d5:a3:aa:1d:bb:9e:2d:57:19:f8:f8:10:33:
                    48:14:5a:c9:1f:43:25:5a:01:e6:8e:5c:00:eb:66:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:D7:BE:97:81:5F:B6:71:5E:18:C9:79:A1:05:C6:07:DD:A6:25
            X509v3 Authority Key Identifier:
                keyid:8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:35:4d:b0:9e:9a:a9:ac:87:3b:ec:f2:b1:ab:3f:b8:78:
         67:28:7f:aa:60:9d:cf:b3:78:78:a4:48:76:44:85:ae:86:62:
         75:62:73:8c:27:46:2c:6b:cd:6b:aa:67:a9:81:2b:9c:aa:ac:
         04:0e:bd:df:21:7e:7b:4a:2e:04:93:62:86:d3:78:6d:4a:c0:
         f3:82:c6:6c:ab:a0:41:f9:47:ee:63:63:dd:30:cd:a9:30:f3:
         fd:1e:8c:b2:e9:a4:f5:e0:22:05:94:c5:b8:75:b6:4f:bd:75:
         cd:7b:ce:e2:6d:a8:b4:e4:3f:e3:d0:31:0a:51:49:5c:9e:11:
         55:71:10:16:2a:4d:39:ab:83:6a:69:46:b1:86:00:1f:97:c3:
         6f:7c:73:6f:78:e6:9f:05:bd:90:1e:e3:65:7e:a5:01:d2:10:
         bb:3d:15:8e:4e:3a:a0:90:05:27:ba:0d:61:14:70:7a:b1:5c:
         f9:9b:f8:4c:28:60:9e:d9:5d:79:0b:e2:18:70:0c:08:af:be:
         63:58:ea:19:6e:47:49:46:76:dc:8b:7d:c6:56:49:9c:ae:b0:
         17:f6:ca:23:f7:b7:fc:fb:4d:30:25:da:0d:b8:f9:33:b7:c8:
         86:ca:8d:6b:61:7d:bf:36:bc:9a:42:ed:19:1f:89:48:f1:bf:
         59:d4:41:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:19:59 2026 by rpki-client