Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File:                     MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier:          DDmJN1nxvWHIiq2UeN4Veu5dkkdUKPW+VOHUFTrSXDI=
Subject key identifier:   27:BD:19:FC:D5:52:4D:DE:0A:A7:A2:B3:B2:45:E6:F5:C8:4C:B8:5B
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer:       /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number:          0164
Signing time:             Mon 01 Jun 2026 05:56:34 +0000
Manifest this update:     Mon 01 Jun 2026 05:56:33 +0000
Manifest next update:     Mon 08 Jun 2026 05:56:33 +0000
Files and hashes:         1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: UMg60zTAUCZ/Z9GHTKVOGdfdQDFiCk1X6pbQKe8Q+Bg=)
                          2: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: 9HNmZVsE8qMY9qG/jp14H0D4amK1SUgdtWzVlZ7OP6Q=)
                          3: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: zSJXhjcxuRoRMZAMSvVxgLmiPMxSJBBZzT41UMv2hwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
        Validity
            Not Before: Jun  1 05:56:33 2026 GMT
            Not After : Jun  8 05:56:33 2026 GMT
        Subject: CN=6a1d1f11-1c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:8b:d2:71:e2:67:35:21:92:90:51:4e:77:
                    32:38:bb:2b:9b:51:91:fe:0b:9b:3b:e3:a2:be:f8:
                    72:68:d2:a4:e9:7e:4b:bc:b5:94:07:b5:e6:e8:5d:
                    44:5f:9e:ba:57:3c:e5:13:ec:ce:59:f8:7d:27:93:
                    21:91:8b:ae:93:d7:43:88:47:bc:e7:9c:54:38:30:
                    e4:06:60:b9:c4:69:de:e9:43:26:82:bb:87:df:6f:
                    83:c0:ca:67:95:09:41:89:79:13:a8:04:51:d0:32:
                    ad:70:1f:30:70:45:2f:5d:0e:be:8d:f4:a5:0d:39:
                    9d:27:10:62:eb:5c:a1:51:49:a8:f9:fb:13:6f:7c:
                    2f:7b:2c:56:e4:c6:7c:d3:7f:a2:a1:54:3c:5f:12:
                    3d:3a:07:31:88:98:36:28:2a:3c:0c:4e:39:1f:be:
                    08:26:bb:0a:c5:32:a7:3c:6f:71:cd:69:30:3f:7a:
                    20:5e:59:a9:2e:ac:a5:03:a7:3c:6b:09:e9:97:6b:
                    2e:2c:b5:de:63:fc:13:64:d2:1e:6f:dd:d7:0e:a4:
                    87:51:0e:20:0b:d5:ad:bc:27:0d:e3:35:11:d8:a3:
                    a3:29:da:e6:24:79:74:f7:19:b2:82:4b:a2:99:07:
                    c9:56:70:e9:65:b3:72:9c:ea:5b:ed:75:f5:46:1c:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:19:FC:D5:52:4D:DE:0A:A7:A2:B3:B2:45:E6:F5:C8:4C:B8:5B
            X509v3 Authority Key Identifier:
                keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:4c:6c:05:80:4c:59:50:71:4a:46:6b:c7:a9:cd:2d:2c:
         bb:a7:fe:6a:ec:17:6b:97:b9:a7:01:0f:87:03:58:b1:00:d6:
         62:ba:53:e8:26:0e:5e:f5:7e:6b:40:fa:f8:d2:0a:44:02:1d:
         54:59:1c:f0:68:d2:06:28:43:b7:32:84:fa:34:0e:28:93:1f:
         1b:49:fc:f0:69:c9:e2:1b:37:be:3d:7e:a2:81:13:fd:01:22:
         12:af:3b:58:4d:d9:67:5a:5a:27:d9:5b:9e:d5:40:16:c0:e3:
         3b:9d:3d:cd:a1:19:76:6c:32:16:37:60:67:57:bb:00:ed:a7:
         19:6a:d0:99:c5:79:22:49:e7:02:ac:84:a3:b6:b8:67:6c:3b:
         df:27:e5:57:62:91:aa:46:0a:7c:8d:7e:23:34:71:a7:39:22:
         32:8e:35:0e:f6:6c:46:04:79:46:5d:4a:2e:8d:2a:a9:91:2b:
         6d:44:4d:8a:2f:73:64:d5:7f:a4:95:21:90:c5:db:d7:85:2e:
         3e:61:85:f6:20:b7:0b:92:7d:ef:3e:2c:79:9e:d6:11:7a:48:
         23:81:60:a5:90:4a:26:7c:16:99:16:2c:d5:55:9f:d8:e6:bd:
         21:86:1d:99:49:22:9d:cb:e0:ef:cf:e1:a0:8b:c5:e9:37:74:
         1d:31:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:29 2026 by rpki-client