Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
File:                     rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json)
Hash identifier:          P804++KjEEZlZEKcPXxqHskbYT1jdes0zNwCwgGGjgw=
Subject key identifier:   06:7D:91:99:0D:F0:5E:41:B7:56:A8:FA:2B:B9:7F:D3:B0:77:E7:56
Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76
Certificate issuer:       /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
Manifest number:          0600
Signing time:             Mon 22 Jun 2026 22:56:56 +0000
Manifest this update:     Mon 22 Jun 2026 22:56:56 +0000
Manifest next update:     Mon 29 Jun 2026 22:56:56 +0000
Files and hashes:         1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: JTeuAprzYuaBa6p60PIhbaWyPe2a7MLDMcYLHjatSMo=)
                          2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: E9L/fSBsEiJgj7MSEnbJce39tV6PzwUKgXlGLqPfyJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl
                          rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EB0B, serialNumber=AE3FA65349551660DFF48C497E8378A630B98376
        Validity
            Not Before: Jun 22 22:56:56 2026 GMT
            Not After : Jun 29 22:56:56 2026 GMT
        Subject: CN=6a39bdb8-f99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2d:bf:44:bd:1d:6a:d3:4c:14:b7:ba:c0:c7:
                    4c:fd:ce:69:06:31:e1:51:10:48:ee:bd:a7:af:f4:
                    ee:1c:27:bc:d5:96:71:d8:04:2f:bb:00:8c:e4:c1:
                    fa:53:f7:5a:62:16:08:37:78:23:8f:1d:0a:71:58:
                    47:76:49:d2:fb:3e:94:c6:ca:0a:7b:f8:00:be:bb:
                    5e:d5:13:0e:36:4d:e3:3c:d2:5d:93:52:a1:b7:a2:
                    da:a4:ca:a1:0f:3f:6c:70:b2:ac:ad:5b:c5:98:04:
                    fd:33:4c:46:8e:0f:11:8b:ab:52:b3:22:05:63:0f:
                    5f:67:88:9b:c5:e8:e6:5e:98:a3:5a:b6:c2:d4:ba:
                    d6:23:69:2f:8f:39:cb:93:90:08:f5:d8:c9:51:32:
                    8a:e7:d1:9a:76:83:30:0f:8b:6c:66:9f:45:37:8c:
                    58:a6:10:dd:20:b0:2d:4f:31:79:39:29:ac:44:0a:
                    b3:10:d3:f9:d8:f5:84:c9:f0:0a:1a:3f:6b:ab:49:
                    a4:7d:15:ba:a6:cc:91:1d:93:c1:3c:a0:6b:b4:2a:
                    33:fa:6a:68:fb:4b:e2:08:b6:72:0d:aa:33:12:08:
                    4b:1a:84:8e:7d:ed:39:69:35:3d:33:0e:60:bf:63:
                    3b:cb:69:f2:66:51:7e:8d:c9:49:d4:5f:88:8b:d3:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7D:91:99:0D:F0:5E:41:B7:56:A8:FA:2B:B9:7F:D3:B0:77:E7:56
            X509v3 Authority Key Identifier:
                keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f4:c5:22:3f:db:a5:9f:b7:b2:66:dd:2b:52:54:2d:38:63:
         14:a4:d9:d0:cd:18:71:a7:0e:ab:93:36:e6:17:39:9a:08:03:
         1d:0f:5c:7e:34:8d:f8:c9:4f:1d:ce:af:e8:49:05:d9:bb:11:
         66:6d:13:f2:19:7a:36:b9:3f:e3:08:81:b2:de:67:20:7e:12:
         ca:3e:ea:3a:e3:34:a5:73:54:17:3e:46:ac:06:e2:b8:e4:8d:
         8b:d0:3f:22:54:13:7f:0b:c0:8b:6d:53:7e:22:91:c9:70:77:
         03:9e:27:02:9a:0e:f9:f0:b6:75:87:1e:49:bb:b9:d5:66:cf:
         38:c3:5f:09:b5:8a:45:6d:8f:c8:31:e8:f4:21:45:fb:ea:7d:
         d5:b8:cb:bb:88:46:6a:a2:12:f5:69:f0:a4:bb:6a:ca:b4:55:
         49:0c:f6:ef:8b:d9:6e:c6:5d:03:fd:31:76:76:3c:1e:34:d4:
         a3:f1:66:5a:52:c5:d5:3a:f1:05:6e:a7:27:5a:e3:66:9a:41:
         e9:18:9a:d9:71:16:aa:01:84:c6:5f:2a:51:77:c7:a6:6a:32:
         96:73:02:e5:19:78:0e:64:cd:d7:55:f8:b0:5e:c5:dd:42:a4:
         63:51:d2:1c:c6:44:f3:6f:17:d5:ee:b8:1c:50:2e:f5:cf:36:
         76:da:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:16 2026 by rpki-client