Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
File:                     J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json)
Hash identifier:          RrFU3V1hDqU2CBPisA3avmtciX/Y0uo8F8GlUjT+9j0=
Subject key identifier:   75:B8:0D:B8:06:1D:91:5E:68:22:36:9D:97:C0:A4:74:F6:4F:E2:A2
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Certificate issuer:       /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
Manifest number:          ED
Signing time:             Mon 01 Jun 2026 07:19:29 +0000
Manifest this update:     Mon 01 Jun 2026 07:19:29 +0000
Manifest next update:     Mon 08 Jun 2026 07:19:29 +0000
Files and hashes:         1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: T0YTsXzAoLiYpyesKYbmjpHsUbQNeWn4GR1UK8LPBzc=)
                          2: 6D8A3DC29DCD11F0A412CC62C4F9AE02.roa (hash: KteD+gnwfbH1TZydXUFqfSWq7gf/LG4wlbVUwsA7oxE=)
                          3: F31C1B909D3C11F097272925C4F9AE02.roa (hash: wVEbnfEW5GeLuVpd4/zHfbWm/1FWKGn8jJz6Ylxyltw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
                          rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
        Validity
            Not Before: Jun  1 07:19:29 2026 GMT
            Not After : Jun  8 07:19:29 2026 GMT
        Subject: CN=6a1d3281-dca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:bd:8f:00:b2:d7:2d:ca:fd:fb:41:8e:d2:
                    33:5f:1c:4d:7e:43:c4:02:db:cf:b2:9e:ce:11:ad:
                    50:d5:56:4d:85:14:95:4b:c3:4e:6d:1f:df:2d:7a:
                    45:a6:04:40:5a:c8:49:c4:7c:1d:a0:63:b2:6e:61:
                    14:34:8d:d3:76:b0:34:72:b8:8b:99:c4:7f:9a:0e:
                    a4:be:01:c2:83:58:b9:5f:3e:7e:6a:6e:a8:77:17:
                    3e:43:47:3a:23:48:c6:99:a5:63:f9:c4:30:77:63:
                    49:f1:6c:ff:7f:3b:be:26:67:01:12:12:02:d8:f7:
                    7d:a4:19:73:6d:4e:c3:b4:11:9a:82:bf:23:90:b6:
                    96:1a:7e:28:a9:57:1b:17:48:6a:c8:fe:e6:74:f1:
                    bc:57:07:26:c5:3f:52:2e:c7:5c:3e:10:7b:cf:28:
                    ce:7c:e7:ee:0b:f2:5f:f6:a0:2c:4f:07:a0:01:d8:
                    cf:4f:ee:0c:d1:9d:0c:a3:84:5b:10:3f:5f:e2:3d:
                    65:b7:82:36:3e:fe:4e:77:e9:af:60:a7:29:0c:4d:
                    d4:1f:38:c8:df:87:e9:f5:fd:fe:45:60:0e:e8:b5:
                    36:9f:00:5b:5a:b3:66:14:ec:73:18:59:78:ed:c6:
                    9d:80:02:2a:07:62:6c:91:d1:cd:05:e9:06:44:a2:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B8:0D:B8:06:1D:91:5E:68:22:36:9D:97:C0:A4:74:F6:4F:E2:A2
            X509v3 Authority Key Identifier:
                keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:ad:61:26:66:66:b5:cc:64:6b:e9:ac:3e:5b:f7:95:80:
         0a:2c:7e:ab:c9:ea:e1:b5:01:42:47:23:fb:91:63:48:16:34:
         02:74:89:68:55:af:3d:74:57:95:ea:5b:bd:16:91:45:7f:24:
         7a:b8:71:5a:96:ee:e4:d2:8b:59:95:c9:05:ce:c1:39:3a:e5:
         98:a8:51:b7:e2:ed:db:10:75:1d:61:01:a8:5b:68:94:a9:a2:
         6f:ec:28:15:75:9b:df:f7:92:ad:33:c3:6b:70:36:60:1c:c1:
         93:f7:d4:43:2b:6e:4c:d3:c8:ce:09:5d:fa:e5:39:e8:3c:86:
         6d:79:6b:5e:4d:cb:44:e4:90:4f:dd:c2:d8:14:57:cb:54:ac:
         45:91:8f:4c:be:c2:e2:09:5a:11:6f:03:47:be:6c:68:27:65:
         c0:2c:d3:aa:9a:11:ce:24:76:e8:b9:b1:87:ea:d3:98:7c:94:
         b0:a9:15:38:60:b4:f7:f9:67:df:e9:6c:2d:35:29:75:01:cc:
         56:6f:c4:6a:5a:06:2f:fc:fd:11:0a:90:b1:af:9b:1a:43:69:
         1c:f0:6f:80:f7:52:90:6b:ae:1d:95:e4:7f:63:4d:c5:f6:af:
         15:f1:44:41:32:a4:49:6d:77:59:27:bb:d0:9a:4d:59:e0:b6:
         33:09:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:14:36 2026 by rpki-client