Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
File:                     J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json)
Hash identifier:          2+MaeNjT3wyAc8lA8+KFmG6T87IL6vmJKeXQtmCumZ0=
Subject key identifier:   11:9F:30:F7:34:06:8D:F4:C5:FA:6E:41:E3:F4:6E:81:75:8B:55:FC
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Certificate issuer:       /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial:       16DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
Manifest number:          16CD
Signing time:             Mon 22 Jun 2026 16:39:39 +0000
Manifest this update:     Mon 22 Jun 2026 16:39:38 +0000
Manifest next update:     Mon 29 Jun 2026 16:39:38 +0000
Files and hashes:         1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: nsUoJpv1rzdC1GqMImtDRIkPxsq+9yBnk/Bqec+Jh1U=)
                          2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: v/SZ7H/SLnlGFkwwxhkg6bW6tjnET9pIm6y1CUX4oos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5855 (0x16df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
        Validity
            Not Before: Jun 22 16:39:38 2026 GMT
            Not After : Jun 29 16:39:38 2026 GMT
        Subject: CN=6a39654b-b9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:f0:92:76:c0:33:c2:2e:ca:df:be:bf:46:
                    32:18:40:90:fb:51:ca:76:da:13:6b:35:b6:5e:f9:
                    8d:1e:39:16:58:4e:63:9f:45:41:b2:a0:44:b9:b8:
                    07:af:93:bb:7d:e7:d2:33:ba:32:11:ca:60:22:ee:
                    ef:7d:dc:cc:52:31:c3:96:47:a6:82:0b:5c:19:08:
                    60:13:73:d7:91:b6:f9:33:52:f6:77:4a:cd:76:58:
                    30:7c:59:c7:f8:45:6f:46:fa:96:14:41:64:29:52:
                    13:96:ca:78:5e:c0:47:de:f1:32:e2:69:f1:68:f2:
                    02:bc:31:4e:55:e3:4f:21:14:ec:cc:c6:da:aa:b9:
                    93:74:4f:de:0d:67:25:57:b3:2d:40:68:af:a4:65:
                    72:dd:a7:f3:d4:89:f4:31:4a:01:1c:fd:61:12:99:
                    4a:3f:a7:06:fe:b2:7e:73:78:3e:b7:1a:09:26:8c:
                    86:6a:85:56:bc:04:cd:d3:3f:3e:71:b4:47:0a:d6:
                    c5:e6:99:fe:3c:3b:61:1b:8e:8b:7f:45:00:84:9a:
                    e5:41:30:18:5f:72:15:73:4e:65:08:20:56:24:e8:
                    b9:ae:52:d3:0e:99:0b:3a:ad:49:65:8e:19:fa:c4:
                    3d:f3:1e:b7:97:f3:5f:04:e3:b3:ad:a0:36:5f:da:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9F:30:F7:34:06:8D:F4:C5:FA:6E:41:E3:F4:6E:81:75:8B:55:FC
            X509v3 Authority Key Identifier:
                keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:28:7f:71:5f:87:9a:3d:42:b1:9a:95:f9:9f:70:12:d6:78:
         89:67:31:78:08:8c:3e:2e:29:65:9f:4e:2c:aa:5f:4e:82:9a:
         fe:4e:10:36:c6:91:5f:5d:fa:11:c2:94:70:c0:09:29:7e:47:
         74:8e:39:31:6e:b7:64:c7:53:b3:99:f3:d1:2a:74:a8:e6:8d:
         4b:95:f8:f0:e0:23:7a:33:c7:a5:5b:8d:a6:c0:7c:ba:ce:38:
         15:35:8b:9a:5a:5a:51:a6:81:10:b2:ca:0c:e1:4b:f3:27:08:
         27:40:55:cf:34:42:bf:d0:fd:1e:83:a0:d0:cd:69:33:d7:e8:
         06:99:32:7c:0e:10:4c:f9:2c:37:2c:b9:32:d3:87:df:4e:8e:
         62:99:8c:ac:e3:6a:d7:2b:46:8b:56:a7:c4:2e:ab:52:ec:ef:
         20:84:ce:9d:bd:1a:28:20:9f:0b:a3:0a:a7:25:45:58:05:45:
         84:0b:6b:6d:08:b2:c2:79:66:f5:b5:ca:b5:6c:8f:0f:8b:af:
         d8:2e:f5:56:3b:9d:14:51:89:68:c9:5c:67:86:8e:1e:a9:93:
         5f:2d:9d:4b:b7:30:e5:90:43:4d:1b:d2:f3:9c:4a:97:af:b2:
         41:2f:e3:f4:3c:3a:68:c7:ef:55:b4:cf:a4:eb:98:3a:52:28:
         59:65:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:23:40 2026 by rpki-client