Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
File:                     jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json)
Hash identifier:          99vpzHupWludXcv0UN8Ynaa3sLGof75v9aTaaiHKYkU=
Subject key identifier:   0B:ED:31:9A:6B:9F:53:58:88:A2:0A:0E:17:20:15:E7:07:35:E3:7A
Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25
Certificate issuer:       /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
Manifest number:          0144
Signing time:             Mon 01 Jun 2026 06:06:21 +0000
Manifest this update:     Mon 01 Jun 2026 06:06:21 +0000
Manifest next update:     Mon 08 Jun 2026 06:06:21 +0000
Files and hashes:         1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: BNSf12uz8lrb4aCInU14Woy0WhG8ZU43K4jyzbVzlrI=)
                          2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 7Hr19q9jXXrB/KrfOgS/kVyNAWzA2gMbqgtJhhgmqUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725
        Validity
            Not Before: Jun  1 06:06:21 2026 GMT
            Not After : Jun  8 06:06:21 2026 GMT
        Subject: CN=6a1d215d-370f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:bc:bf:91:77:41:aa:76:f8:15:8b:84:03:
                    fd:73:98:31:34:97:7d:46:59:b6:55:ee:56:8f:a1:
                    38:7c:9a:3f:00:a3:4f:15:0f:9f:40:1c:94:41:8a:
                    48:4c:be:c2:f7:60:23:51:e4:0a:1a:1b:61:c1:25:
                    4d:6d:9f:29:bf:5b:0e:d9:cd:39:b2:6b:d1:1c:38:
                    58:df:e4:f1:ba:fb:9b:4d:d6:37:c6:f8:54:f0:d9:
                    dd:8e:e2:7e:67:33:c8:81:1b:39:11:9a:17:62:53:
                    d6:00:8d:b7:c9:17:f6:40:5e:76:c5:0c:bd:9e:32:
                    77:e8:a4:ac:88:94:7e:4e:9d:e5:80:2b:a1:75:bb:
                    59:f0:00:68:01:15:56:cd:ef:44:39:b4:7e:42:51:
                    d4:ef:ce:be:55:80:3d:6b:54:c6:bb:bc:5f:54:3b:
                    79:7c:50:b1:dd:11:69:90:17:6f:d4:7e:7d:46:8f:
                    89:84:75:64:1d:2f:37:82:12:88:dd:21:fe:33:06:
                    f7:77:e6:17:f5:e5:98:94:60:de:f6:bd:c3:e8:cc:
                    14:f5:eb:2d:d9:b4:8c:ed:11:75:84:47:96:c1:af:
                    72:c5:93:ba:82:79:9f:7d:96:eb:c7:72:9f:7e:8c:
                    cc:7e:2d:b3:f8:17:e1:08:f7:b0:ff:6a:06:90:ae:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:ED:31:9A:6B:9F:53:58:88:A2:0A:0E:17:20:15:E7:07:35:E3:7A
            X509v3 Authority Key Identifier:
                keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:00:73:6d:00:7f:1d:e7:da:f6:24:78:70:a7:f6:bb:32:
         34:82:b1:81:db:e2:cd:eb:9b:06:1b:5f:b2:3a:f3:a8:15:a7:
         59:0b:77:a1:78:e7:b4:a5:a4:ab:7f:88:58:d6:6f:c6:50:b5:
         8a:36:a2:fa:15:93:98:2e:5c:ca:8d:5a:dd:54:1a:8c:45:bf:
         b7:84:b3:b2:e7:19:a0:95:c8:98:1e:62:a5:1a:eb:26:bb:18:
         05:fa:d8:72:65:b4:a5:b7:58:30:2e:45:61:2f:87:0b:95:45:
         cd:c2:72:c9:0e:ee:c2:bd:c0:61:14:22:48:7b:98:b3:e6:a8:
         8c:45:70:26:5c:70:32:7b:82:3a:35:b7:b5:e6:b5:01:56:c8:
         01:13:da:02:24:1d:bf:12:2c:ef:bc:16:47:80:c1:98:63:c4:
         c9:f7:2f:3f:e0:68:ba:8b:92:96:4d:29:d8:e5:6a:51:c2:77:
         3a:92:f5:c6:6b:27:01:13:db:fb:e8:c4:b0:65:b9:4a:c2:ae:
         5d:4d:bf:f7:41:a6:72:5e:c4:42:9c:b0:78:bc:78:e8:a3:5a:
         36:5c:61:cc:5f:f2:62:7a:76:8e:0c:53:7f:f8:18:73:7c:65:
         b0:01:83:ac:5d:d5:33:57:fa:0e:53:5b:4b:de:cf:47:64:55:
         ec:73:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:41 2026 by rpki-client