Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
File:                     j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json)
Hash identifier:          u3vM5c8eqbJ9LNQ1Q3bVs2krvp8kIFCZxmIp2GALlRk=
Subject key identifier:   66:B6:8B:46:FE:72:A0:FC:55:1A:7F:F9:68:9D:44:07:7F:A6:49:B9
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Certificate issuer:       /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial:       0882
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
Manifest number:          085B
Signing time:             Wed 20 May 2026 20:50:46 +0000
Manifest this update:     Wed 20 May 2026 20:50:46 +0000
Manifest next update:     Wed 27 May 2026 20:50:46 +0000
Files and hashes:         1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: AriTyGcF7CeEyDqaz/i5AklFo7KTFykIvJMe8BlR/DY=)
                          2: 66D426F0E55D11F0B49EA6E0396F56BC.roa (hash: MLnSJZ7wlMAlzMFJZwoCnvZfMjGPgiWNcDMGC+8J2FI=)
                          3: AFDBAB82BAE911F09182A92BC4F9AE02.roa (hash: PVjkDP7T0tezEoMksg6Sf8gOirpdO87qwsau6puOlUc=)
                          4: 97786014BAE711F08A930863C4F9AE02.roa (hash: n9Kxrr3pps9EWJc6FJJvW5XN8lfbolwtiiuJt22fhTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
                          rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2178 (0x882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
        Validity
            Not Before: May 20 20:50:46 2026 GMT
            Not After : May 27 20:50:46 2026 GMT
        Subject: CN=6a0e1ea6-2458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e5:f7:78:41:f6:be:b3:20:9f:20:9b:94:b0:
                    94:2a:dc:2e:3b:0d:ad:f1:d4:c9:be:45:01:10:1b:
                    f0:0f:e8:7b:09:d4:44:23:00:b8:ed:03:32:29:0f:
                    3c:20:40:b3:bc:51:fc:bf:43:52:15:f0:56:cc:d3:
                    52:04:8a:c4:43:c1:67:3c:ac:9f:7d:64:1c:7d:00:
                    b6:9d:cf:82:76:ac:40:3b:7a:dd:ab:df:9c:96:74:
                    e6:36:a9:23:bd:c7:90:c1:9e:0d:34:65:b2:5b:a8:
                    fc:ef:65:2e:75:24:c6:a4:5b:a1:31:b9:77:a4:0e:
                    0b:7b:6d:d9:a8:99:3f:40:ff:7b:80:aa:b6:c3:0a:
                    76:db:b1:bc:34:8d:1a:43:bc:e6:5e:31:35:de:53:
                    fd:1b:d7:43:da:02:14:72:42:4d:67:df:70:38:48:
                    3d:b7:f0:92:b1:6d:66:fc:86:fb:e4:c7:cb:ee:da:
                    dc:03:81:f2:6a:eb:55:10:22:1a:64:eb:88:6f:8e:
                    fb:a4:8e:49:6a:3b:52:cf:24:25:20:39:00:e2:e7:
                    a3:99:38:e9:20:c2:39:35:84:d1:cf:85:72:0e:71:
                    9e:87:40:c2:96:76:be:cc:12:91:5f:f6:ef:65:54:
                    0e:73:75:47:87:06:1f:20:3a:79:ec:13:91:13:b7:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B6:8B:46:FE:72:A0:FC:55:1A:7F:F9:68:9D:44:07:7F:A6:49:B9
            X509v3 Authority Key Identifier:
                keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:cc:79:49:9f:ee:67:77:63:f8:22:d6:11:9b:2d:bc:ba:
         d9:cd:e6:11:44:02:82:22:8b:74:2b:fb:25:b7:db:b5:2f:3d:
         41:1a:c4:76:f7:78:ed:1f:6e:87:80:3a:a8:ae:2f:51:87:94:
         dc:36:14:7a:19:f0:a0:26:14:0c:3b:65:df:7e:e6:c5:72:b8:
         60:1a:4a:71:b0:b1:c8:7f:1a:15:bb:a4:46:e9:8a:e8:84:6f:
         2a:c6:ef:00:d3:14:dc:fb:1e:54:d4:fb:b9:79:7e:96:6e:3b:
         fd:41:cf:47:7c:50:9a:5a:68:48:d3:5f:5e:9c:82:60:0c:5f:
         ad:71:45:ce:f9:b7:c4:57:de:a1:b6:b9:33:c2:ba:27:30:3d:
         57:13:da:6c:53:e1:cc:a1:c0:66:22:8b:a8:63:29:d7:94:8c:
         54:a5:4c:9b:60:72:ca:9c:74:01:93:78:ca:b4:d2:df:b7:86:
         59:20:a8:36:c8:41:18:4f:22:0f:e2:1d:02:a9:09:d3:78:ba:
         26:2e:bd:3d:a3:83:c3:b3:fd:19:f9:5c:bd:65:da:e3:43:8f:
         9a:73:d9:89:a3:18:a6:d1:80:0d:8d:cf:15:f2:0c:e6:ae:69:
         d9:35:57:ec:42:20:d3:c6:41:9f:a5:03:ca:74:86:31:a0:f5:
         a0:e0:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:11 2026 by rpki-client