Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
File:                     jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json)
Hash identifier:          5WYqtr26+HBbDaF759NrRZhfj5fFuQglJyk6XUsnHrA=
Subject key identifier:   14:8A:11:6F:C0:72:34:DA:DA:39:FE:01:D2:2F:36:72:CD:7F:C6:7F
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Certificate issuer:       /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
Manifest number:          07AE
Signing time:             Wed 08 Jul 2026 22:18:27 +0000
Manifest this update:     Wed 08 Jul 2026 22:18:27 +0000
Manifest next update:     Wed 15 Jul 2026 22:18:27 +0000
Files and hashes:         1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: 6IOCRgip5EkvZJa4WXfqNnhFCKvjQGnrEvKltfvCchE=)
                          2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: hAtG+f9sTyDBDIC3yzVKMSXyXaV2HtV+sHcFaEmD/HU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
                          rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 22:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
        Validity
            Not Before: Jul  8 22:18:27 2026 GMT
            Not After : Jul 15 22:18:27 2026 GMT
        Subject: CN=6a4eccb3-31bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:44:60:fe:83:6a:eb:3f:08:1e:82:cd:09:
                    8e:e8:78:5c:78:e8:a6:ab:9f:c5:b6:4f:54:4e:15:
                    00:51:0b:cb:8d:1d:2f:58:d9:a0:8d:17:94:7c:80:
                    3d:19:23:6c:b7:77:01:78:dc:7c:5b:81:f2:bc:ef:
                    cb:be:2a:44:28:38:f3:90:cc:4c:7a:ea:ed:2a:0d:
                    26:58:03:fb:01:a8:79:7c:c3:ac:e0:ed:b2:00:24:
                    ca:61:c5:2d:18:c4:01:0e:d4:c0:e5:ed:4d:de:6c:
                    44:97:eb:52:b9:be:41:d7:7e:04:1d:65:07:a4:88:
                    6c:83:d7:20:28:7a:dc:e3:8e:3a:f7:5e:d3:3b:aa:
                    73:b8:dc:84:56:38:f5:30:a6:8a:0e:1a:67:77:81:
                    78:40:93:3d:b7:ce:b0:c2:4e:3b:fa:c5:a8:92:f1:
                    80:61:cb:8d:e2:ad:b9:46:d6:97:28:db:14:42:f2:
                    ef:41:4a:1c:b2:81:81:06:4e:c5:97:99:63:9a:c8:
                    70:6c:9f:9e:df:77:b0:e1:0e:8a:51:ad:cf:0f:53:
                    6b:c7:a1:1e:1a:b7:5b:0d:a9:6a:cd:3d:06:24:9f:
                    2e:0a:2e:e1:65:35:66:f7:e6:5d:78:7f:2d:1b:12:
                    89:2e:6c:76:3c:5a:8e:b2:39:50:12:ff:05:af:20:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8A:11:6F:C0:72:34:DA:DA:39:FE:01:D2:2F:36:72:CD:7F:C6:7F
            X509v3 Authority Key Identifier:
                keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:6b:46:b5:43:60:43:8e:6d:12:f1:83:2a:2c:02:be:36:
         ac:f1:f6:66:e5:51:55:aa:16:cf:d8:34:de:77:98:13:f8:5f:
         06:16:75:a5:e6:e5:58:7b:93:e6:fc:2a:b6:02:37:4a:eb:c7:
         74:40:6e:1a:d2:87:76:ed:bf:fb:86:37:0f:e6:38:85:99:8c:
         c2:71:7e:d6:03:6d:f9:0b:e0:42:9f:5c:53:96:8c:ba:22:45:
         bc:20:13:3e:3f:bb:bb:4e:61:9f:02:4f:d6:67:f4:3c:69:41:
         4d:aa:a7:a0:bd:e8:f1:8c:67:96:ef:2c:34:6a:03:d5:91:16:
         b9:a6:1d:34:13:7c:a7:aa:4f:bb:5d:6b:c7:cb:e1:e4:fc:6f:
         af:19:02:7d:4a:7f:d6:71:bd:c7:3c:d7:10:0a:1e:42:84:7a:
         41:58:ba:17:55:fc:92:75:aa:2a:a8:c7:97:d8:22:94:80:dc:
         1b:61:95:c3:7f:a6:48:d9:61:b6:7c:9f:80:c1:31:6d:bd:4c:
         e8:06:a5:26:0d:4c:b9:ad:3e:10:4c:89:41:b0:88:c8:5e:74:
         c5:2e:9e:a0:2c:c4:4e:d8:d9:95:73:e7:86:e2:a8:90:7c:86:
         d1:c0:74:e9:6a:23:bb:c5:7e:3a:cf:86:00:0d:17:d3:c7:44:
         0d:a4:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:40:28 2026 by rpki-client