Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
File:                     JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json)
Hash identifier:          vYEbWAffAEdoIwEkGETHFkbTxTwWVfrtcwQ9hc5xLx4=
Subject key identifier:   1A:5D:CA:88:1D:2B:B9:06:2C:80:FD:D6:84:76:D1:ED:CA:32:7A:49
Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Certificate issuer:       /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Certificate serial:       0EE1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
Manifest number:          0ED3
Signing time:             Mon 22 Jun 2026 17:38:38 +0000
Manifest this update:     Mon 22 Jun 2026 17:38:38 +0000
Manifest next update:     Mon 29 Jun 2026 17:38:38 +0000
Files and hashes:         1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: emOgMzXsNmyqTD1opNRkoDn0nn5FqqfoWl7JTK+aN88=)
                          2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: IEnqgZAlKovuD6MzCecMuoV1aCeVk9H0qwnKaqYXSEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl
                          rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3809 (0xee1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
        Validity
            Not Before: Jun 22 17:38:38 2026 GMT
            Not After : Jun 29 17:38:38 2026 GMT
        Subject: CN=6a39731e-ab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:e4:cd:1c:09:8c:73:4b:14:d7:73:39:3b:
                    70:27:2a:e5:9c:08:33:a3:bd:a5:d6:80:86:7a:9e:
                    e0:b5:66:dc:6c:7e:4e:b4:c4:2c:ef:27:a0:a2:42:
                    60:f8:29:69:e9:9e:f8:06:36:0e:1c:41:35:6c:f1:
                    6a:45:78:10:66:84:9b:98:4f:9d:43:d7:35:7c:1b:
                    2a:de:78:e3:3e:03:9b:26:44:74:b4:98:cc:b8:e7:
                    31:0b:94:af:49:5b:38:40:c4:83:cd:01:cb:a2:3f:
                    bb:64:d3:5a:7e:3b:fa:c7:3b:3b:1b:4d:8b:64:64:
                    cb:19:54:9f:cd:9d:6f:69:30:18:67:8d:97:ee:02:
                    9c:47:1a:e4:89:ba:4d:d7:c4:81:4f:d1:53:da:7e:
                    4f:28:12:51:95:26:7a:59:4f:53:5c:59:c8:27:0a:
                    9f:7b:cb:b8:2e:b6:ec:3e:8e:26:90:8f:3e:bb:af:
                    21:1f:37:a2:cd:f7:b8:fc:1c:f7:27:c9:c5:6b:19:
                    02:2c:91:06:77:d9:de:e0:38:51:a7:91:42:68:b5:
                    f6:2f:f6:57:b3:74:9e:fd:07:3c:1d:07:13:23:ca:
                    ea:38:ea:d0:48:f9:c4:b2:8d:ef:34:b9:c8:88:a6:
                    19:9a:5d:2a:fc:e1:3f:bb:2f:fd:c3:5f:a4:8f:ef:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:CA:88:1D:2B:B9:06:2C:80:FD:D6:84:76:D1:ED:CA:32:7A:49
            X509v3 Authority Key Identifier:
                keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:45:d4:da:05:a9:1d:a6:72:54:7a:47:86:19:3a:39:d2:c7:
         42:c5:e7:9f:7e:a9:c9:3f:d6:4b:d3:f9:3c:db:51:2a:9d:39:
         95:ef:25:ba:88:a3:3d:73:6a:16:28:ac:be:21:ab:ec:8d:9f:
         40:0f:f5:ad:6f:19:ba:31:43:51:20:7e:b5:60:ff:a0:8d:05:
         85:b5:86:07:f9:d2:8f:f6:7a:48:4a:82:6b:ca:ae:7f:70:f6:
         79:08:42:6c:77:62:5a:2d:c3:25:1a:df:99:bf:27:71:4a:2b:
         1a:de:84:31:2d:4e:49:d4:75:c5:78:c8:bf:f5:b5:a8:c6:0f:
         2b:83:18:a1:d9:7b:3e:dd:ab:09:38:be:b0:df:ee:cd:ea:be:
         82:ec:64:08:3b:af:38:bb:17:98:2d:a3:6a:03:58:85:df:1a:
         fd:ea:7d:3a:27:1c:72:2d:ce:9e:6b:4a:33:2d:f2:24:8a:45:
         02:0a:5a:58:86:72:70:66:0c:50:78:1f:43:a7:f9:81:ae:11:
         75:aa:9f:a4:b2:c8:25:ac:f7:42:1b:58:70:64:23:8e:f0:78:
         f5:60:54:14:44:1d:e9:a6:bd:ea:de:a6:89:83:e5:3b:63:a2:
         f2:f9:c4:9f:89:58:4b:89:82:94:2a:82:57:1a:2b:55:f9:0e:
         e2:b1:bd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:00 2026 by rpki-client