Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft
File:                     JqEcV_UL86H3onhKHUlNXomDYc0.mft (raw, json)
Hash identifier:          Y8bPyu5k3F+hY5FvkdsMnJjOV9RALQMixoQ/U+O7N5g=
Subject key identifier:   AF:C1:94:0E:F4:BA:8D:7C:92:53:2E:48:C6:5F:7D:59:C4:8D:53:14
Authority key identifier: 26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD
Certificate issuer:       /CN=A913E83E/serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft
Manifest number:          AF
Signing time:             Mon 01 Jun 2026 07:54:40 +0000
Manifest this update:     Mon 01 Jun 2026 07:54:39 +0000
Manifest next update:     Mon 08 Jun 2026 07:54:39 +0000
Files and hashes:         1: JqEcV_UL86H3onhKHUlNXomDYc0.crl (hash: 1HRcjI7JXS6Lec+AXPT5c5s2XbbaRTOv1D08ixDpjoQ=)
                          2: 0CEE97B4563411F09FBF271BC4F9AE02.roa (hash: vFRZeDjLhoB2J3WbsRGK/PXox7QCMQbAnDKTQICxU2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl
                          rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E83E, serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD
        Validity
            Not Before: Jun  1 07:54:39 2026 GMT
            Not After : Jun  8 07:54:39 2026 GMT
        Subject: CN=6a1d3ac0-d011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:5a:5c:ae:69:a6:9e:cb:98:c3:48:c6:84:
                    5b:46:2b:35:3d:6b:0d:1e:b5:85:97:f1:73:9b:dd:
                    5f:ac:55:d5:f9:4c:7c:4c:24:d8:7e:07:e3:5f:aa:
                    fb:7a:92:02:48:57:ae:2e:c9:c4:d7:ba:d6:43:79:
                    cf:e1:73:cf:19:f5:10:08:d0:aa:e5:f4:ad:74:17:
                    dc:e6:03:5a:d9:5c:c5:06:0d:0e:1e:1a:f9:e1:b1:
                    27:eb:27:44:8b:20:0b:f3:07:2c:7b:c3:75:cd:5d:
                    e8:91:90:92:2c:65:de:11:f9:45:5d:67:46:65:fd:
                    d3:33:39:2f:3c:06:24:e1:79:71:82:48:6e:0a:e8:
                    e2:2d:e3:b5:8b:5b:f3:48:2c:b7:9a:21:ef:25:38:
                    db:b5:86:bf:59:54:e3:8d:23:ca:be:e7:34:1b:02:
                    69:b7:9a:66:5e:a5:69:b5:ce:e3:ba:fd:87:9b:0f:
                    0c:e4:50:0c:c3:f9:07:c8:8c:ad:6c:4b:16:33:5f:
                    bf:47:f0:a4:2a:23:84:6f:ec:5d:fd:38:d8:19:7b:
                    e6:1e:57:5a:e7:80:ce:11:c5:08:a2:e5:4a:38:e0:
                    8e:c0:4e:83:41:8d:78:07:3a:05:43:ab:d8:da:ec:
                    64:50:a2:fc:3a:3c:31:06:44:5e:e1:26:f4:4b:4b:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C1:94:0E:F4:BA:8D:7C:92:53:2E:48:C6:5F:7D:59:C4:8D:53:14
            X509v3 Authority Key Identifier:
                keyid:26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:de:6b:b0:b6:6a:c8:b1:e0:5d:4b:f1:6a:fb:63:2d:58:
         e3:35:47:a3:1d:46:23:91:45:dd:5e:6a:49:ff:05:b1:c8:b5:
         ff:e7:37:08:63:b6:56:9c:3f:89:88:1c:bd:a6:ec:bc:76:0d:
         48:31:a9:d9:36:ce:72:6c:46:e0:da:59:97:00:68:47:13:22:
         04:be:c4:2b:58:63:da:6d:86:4f:8d:0a:04:5a:82:08:48:0a:
         5e:43:03:78:2c:41:5e:a7:b4:62:fa:44:d5:96:bf:44:3c:55:
         55:4a:63:3c:6c:04:c8:82:33:53:62:4b:a4:01:e3:2c:2e:04:
         62:bb:18:96:26:6e:81:d4:87:09:30:f4:84:fc:ea:4b:95:c0:
         fe:73:25:e7:0e:ce:40:48:1e:57:1c:4e:47:d9:8c:99:7d:62:
         a9:d7:21:81:33:e4:19:25:cd:1f:8c:51:40:b4:02:b6:a8:51:
         0c:2d:78:bb:1b:b7:f4:f2:e7:72:d7:ac:e6:16:b3:25:d2:1d:
         cf:b6:f7:a2:ec:bd:63:ff:a9:66:23:25:ad:a6:f1:29:db:19:
         71:0e:48:8f:6b:6a:ed:0f:42:c1:0e:98:5f:aa:f8:8e:22:b7:
         54:0b:b5:de:2a:1f:87:e9:8e:a1:15:46:a1:70:fe:17:61:39:
         e1:49:5d:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U4M0UxMTAvBgNVBAUTKDI2QTExQzU3RjUwQkYzQTFGN0EyNzg0QTFENDk0RDVF
ODk4MzYxQ0QwHhcNMjYwNjAxMDc1NDM5WhcNMjYwNjA4MDc1NDM5WjAYMRYwFAYD
VQQDEw02YTFkM2FjMC1kMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmiNaXK5ppp7LmMNIxoRbRis1PWsNHrWFl/Fzm91frFXV+Ux8TCTYfgfjX6r7
epICSFeuLsnE17rWQ3nP4XPPGfUQCNCq5fStdBfc5gNa2VzFBg0OHhr54bEn6ydE
iyAL8wcse8N1zV3okZCSLGXeEflFXWdGZf3TMzkvPAYk4XlxgkhuCujiLeO1i1vz
SCy3miHvJTjbtYa/WVTjjSPKvuc0GwJpt5pmXqVptc7juv2Hmw8M5FAMw/kHyIyt
bEsWM1+/R/CkKiOEb+xd/TjYGXvmHlda54DOEcUIouVKOOCOwE6DQY14BzoFQ6vY
2uxkUKL8OjwxBkRe4Sb0S0uneQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/BlA70
uo18klMuSMZffVnEjVMUMB8GA1UdIwQYMBaAFCahHFf1C/Oh96J4Sh1JTV6Jg2HN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTgzRS9FQjBGNzU4RTU2
MzExMUYwQTFBQUUyNERDNEY5QUUwMi9KcUVjVl9VTDg2SDNvbmhLSFVsTlhvbURZ
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0pxRWNWX1VMODZIM29uaEtIVWxOWG9tRFljMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTgzRS9FQjBGNzU4RTU2MzExMUYwQTFBQUUyNERDNEY5QUUwMi9KcUVjVl9VTDg2
SDNvbmhLSFVsTlhvbURZYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWinea7C2asix4F1L8Wr7Yy1Y4zVHox1GI5FF3V5qSf8Fsci1/+c3CGO2Vpw/
iYgcvabsvHYNSDGp2TbOcmxG4NpZlwBoRxMiBL7EK1hj2m2GT40KBFqCCEgKXkMD
eCxBXqe0YvpE1Za/RDxVVUpjPGwEyIIzU2JLpAHjLC4EYrsYliZugdSHCTD0hPzq
S5XA/nMl5w7OQEgeVxxOR9mMmX1iqdchgTPkGSXNH4xRQLQCtqhRDC14uxu39PLn
ctes5hazJdIdz7b3ouy9Y/+pZiMlrabxKdsZcQ5Ij2tq7Q9CwQ6YX6r4jiK3VAu1
3iofh+mOoRVGoXD+F2E54Uld9w==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:45 2026 by rpki-client