Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
File:                     JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json)
Hash identifier:          GZE6aGDGRzEz/AGFLy+HsYntlRobuSdxQzS5tMR15do=
Subject key identifier:   43:EE:BD:4A:2F:D9:7C:C1:FD:8A:65:B3:7A:3B:7E:BC:A3:55:4E:AE
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Certificate issuer:       /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
Manifest number:          0147
Signing time:             Mon 01 Jun 2026 06:07:28 +0000
Manifest this update:     Mon 01 Jun 2026 06:07:27 +0000
Manifest next update:     Mon 08 Jun 2026 06:07:27 +0000
Files and hashes:         1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: dxPGG5kniKu7djU7GMScmSyZs92KmZKoKu5ADtE92NY=)
                          2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: XkQ1uVk/uXSTQGxlpz6vDp4cVf/noCzCGg0tuyD68XM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
                          rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
        Validity
            Not Before: Jun  1 06:07:27 2026 GMT
            Not After : Jun  8 06:07:27 2026 GMT
        Subject: CN=6a1d21a0-7167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:84:95:27:71:34:56:21:e8:fb:17:63:5f:
                    5b:0d:17:db:3d:ed:1b:75:47:aa:de:7e:87:e0:d5:
                    9e:75:70:d7:49:cd:ee:27:7e:0d:a2:34:a0:29:b2:
                    01:cd:fe:b9:6b:33:12:19:9b:e6:d5:d5:ca:2a:d2:
                    e1:c7:6a:3b:49:20:52:42:bd:17:2b:bb:a9:43:10:
                    82:e0:00:df:17:ef:ea:f7:b2:ee:1e:e4:e9:ed:9b:
                    51:ac:09:19:d9:6b:f6:25:eb:7d:e4:74:d9:d6:8d:
                    26:1a:99:85:02:26:42:c6:58:38:9c:7f:2c:8b:24:
                    8f:4e:61:08:32:e2:bc:98:d1:1f:d6:b4:af:33:d2:
                    bf:84:8d:85:c3:8f:de:de:93:2a:fd:20:0b:50:12:
                    29:eb:51:da:3b:61:de:f1:aa:b3:e5:af:54:6d:0d:
                    1f:72:72:d0:fb:5e:83:7f:a4:c5:bc:3d:0c:24:cc:
                    8f:ca:da:e2:83:6f:5c:ab:01:4a:21:2a:07:d7:e2:
                    0b:fa:2a:97:fc:b8:88:f7:20:c2:1e:84:48:ef:ae:
                    96:44:13:c2:a4:69:5d:a5:2a:c8:1a:0f:03:88:df:
                    12:88:5f:19:d6:a6:9d:42:39:c8:2d:1a:6e:18:88:
                    96:1f:fc:72:3d:4a:5a:9b:61:10:45:7b:ba:39:fa:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EE:BD:4A:2F:D9:7C:C1:FD:8A:65:B3:7A:3B:7E:BC:A3:55:4E:AE
            X509v3 Authority Key Identifier:
                keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:80:33:ec:b8:10:ca:ea:3e:13:90:10:b4:98:87:4d:6a:
         4e:c1:b8:ea:af:1c:04:b0:bf:ec:80:b4:54:c6:2b:83:4f:c6:
         e6:10:42:4d:bf:dc:1e:d6:2e:a4:a5:f1:05:5f:06:63:6d:c4:
         ac:be:4a:77:ca:8b:02:a9:d7:cd:5f:32:f7:ca:c3:ee:2c:94:
         b9:4f:5c:b5:aa:fc:4b:79:fe:95:65:e0:66:f2:06:34:d4:6d:
         68:de:7f:fa:7d:f0:ec:55:7f:04:c0:1e:1e:c2:ee:79:f2:1e:
         dc:a2:19:12:5d:29:d2:fa:fb:85:b7:2f:95:d9:fc:e7:93:d0:
         3c:01:9d:3c:8c:3a:57:1f:a6:ad:d2:e1:5d:2e:20:f9:8f:8b:
         50:57:59:81:0b:2e:a5:cc:a9:e5:75:7b:7d:5a:c4:c2:c4:76:
         2c:fc:61:1b:90:10:16:54:5e:3a:ae:b6:41:0c:54:b8:16:bc:
         e0:76:cd:24:74:18:62:5a:8e:08:98:cb:d2:bb:7f:e1:ad:fb:
         e9:44:ba:4e:54:10:24:e6:41:cf:f4:1a:d2:7e:2c:6b:45:25:
         ed:98:28:74:7d:7c:e6:30:63:a2:bd:57:ba:c6:2b:b0:b9:d8:
         35:87:82:e9:02:8f:82:48:08:9c:a2:1f:6f:56:fe:21:2e:f1:
         26:9c:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:53 2026 by rpki-client