Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File:                     JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier:          ijQsoVGv1KugRSXQZ9aOfYIapddf4Wz/gDl/enpQj8o=
Subject key identifier:   30:1A:3F:6B:EE:97:CD:77:F6:FD:EB:0B:C2:25:32:E4:11:D4:67:4A
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer:       /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number:          01B7
Signing time:             Fri 17 Jul 2026 05:02:14 +0000
Manifest this update:     Fri 17 Jul 2026 05:02:13 +0000
Manifest next update:     Fri 24 Jul 2026 05:02:13 +0000
Files and hashes:         1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: uMiMPmuasRBA2EzGtArZGwWVLPu/sIYyVY0u1A1B76k=)
                          2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
                          3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
                          rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
        Validity
            Not Before: Jul 17 05:02:13 2026 GMT
            Not After : Jul 24 05:02:13 2026 GMT
        Subject: CN=6a59b756-2017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:69:b3:3c:02:e2:1e:55:1a:ad:1c:2f:b3:
                    c2:44:af:b8:48:f2:f0:f1:41:11:6f:05:f4:79:85:
                    92:9e:12:b0:64:80:7d:12:6c:99:ab:2b:77:3c:65:
                    77:98:92:d1:81:3c:fc:a7:26:8a:d3:aa:39:f7:9c:
                    89:88:27:df:6b:cb:4e:a9:dc:db:a7:46:cd:95:d3:
                    3e:4f:d3:f2:19:51:0f:c1:be:12:38:e4:ac:cb:6f:
                    7f:1b:7c:9a:9d:be:f5:80:13:31:6b:a4:ab:c3:82:
                    d3:8c:59:85:20:7f:c7:b3:db:e0:3f:1d:fc:02:11:
                    2c:b6:10:cd:43:89:60:3f:a1:ed:70:b2:da:6a:e0:
                    45:82:48:cc:9c:bd:a4:41:4f:46:ff:90:82:85:73:
                    1d:9a:b4:3f:7b:75:c5:2b:3a:34:70:dd:e3:19:b3:
                    30:a3:75:e4:79:c4:90:20:56:6c:80:1c:de:86:6f:
                    d9:18:c4:5e:29:8e:fb:2e:2d:2d:08:c7:9a:bb:b5:
                    e0:02:c9:86:a2:34:56:34:c2:f8:ac:6d:79:7b:31:
                    f8:75:d7:95:5b:97:d4:de:11:01:4b:ea:33:14:82:
                    a8:f9:2b:e0:39:e0:a0:6c:52:f5:1a:fe:43:fa:ee:
                    a8:7a:0e:ff:ca:6e:3c:a9:9f:ec:1e:be:da:06:24:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1A:3F:6B:EE:97:CD:77:F6:FD:EB:0B:C2:25:32:E4:11:D4:67:4A
            X509v3 Authority Key Identifier:
                keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b7:66:72:de:5d:bc:f6:aa:d7:d1:99:db:ef:40:71:bc:6a:
         ac:5c:84:a8:91:ca:53:89:3b:e9:65:7f:03:2e:9c:82:91:59:
         4f:d2:73:b3:6c:87:e4:7b:79:58:39:2f:88:82:44:25:32:ff:
         4c:3a:be:6b:ef:14:9d:c9:4c:cc:76:3d:fd:95:05:09:e7:e5:
         d2:fc:0d:86:5a:af:c2:2f:3a:e6:b9:d3:de:b4:2d:9c:dd:b7:
         6e:99:bb:1c:36:f2:86:75:d7:5e:be:ca:c7:bd:75:b8:55:06:
         4e:67:25:2c:47:3a:90:7e:2a:91:03:d5:29:54:85:6a:c3:dc:
         9c:16:4d:a9:e7:55:35:08:96:3b:9a:24:37:ab:8e:8c:77:ed:
         a6:86:d6:52:84:ab:1a:89:03:2b:c5:29:0b:41:40:c9:9e:98:
         43:b8:94:d0:da:8d:b2:2a:d2:8c:6e:38:27:ce:ee:6e:21:b0:
         82:b3:ff:08:e4:91:70:79:9d:dc:0b:cf:67:5d:55:cc:d4:a5:
         6b:6e:f5:d8:b7:fa:50:97:be:02:c5:e6:5f:4d:54:b8:39:ec:
         93:d9:88:08:ce:8f:90:1d:7d:fd:d1:86:e5:dc:84:6e:2c:42:
         ec:26:82:b9:1a:aa:30:33:df:61:11:7d:6e:33:84:15:45:d7:
         ec:17:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:19:34 2026 by rpki-client