Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File:                     1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier:          TjVO90U6dAdH/CL/qIEzN7L1utLwrAwDzmD3sP+1qS8=
Subject key identifier:   91:65:5C:01:E7:50:7F:44:C4:0E:58:6C:D4:6C:CB:5A:38:39:62:F6
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer:       /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial:       04BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number:          04B1
Signing time:             Mon 22 Jun 2026 23:58:23 +0000
Manifest this update:     Mon 22 Jun 2026 23:58:22 +0000
Manifest next update:     Mon 29 Jun 2026 23:58:22 +0000
Files and hashes:         1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: tYoNTfNhjLgUiExqiHYotnUxZYHlBRezYb7xlNV6SgA=)
                          2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: 53xSQQ9Bxh94fQZ470RfHLjvIXQRf/E6MeWzNjwS2HI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
                          rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
        Validity
            Not Before: Jun 22 23:58:22 2026 GMT
            Not After : Jun 29 23:58:22 2026 GMT
        Subject: CN=6a39cc1f-765d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:bb:94:1b:d8:dd:26:66:bf:fb:ac:24:1f:
                    23:c9:05:f9:6c:ca:bd:10:c1:67:af:ee:f5:16:ca:
                    92:f9:83:e2:76:60:0e:ec:18:3a:a9:60:66:f4:8f:
                    89:96:31:b6:98:bb:e2:cc:6e:3b:26:2f:2e:ec:43:
                    14:7d:8c:06:5a:4a:68:1b:bb:64:8b:c3:98:d9:e3:
                    e4:05:95:77:be:43:eb:3c:22:31:12:d9:28:a9:8b:
                    a2:41:dc:c5:3d:7d:84:c2:09:f5:b8:c6:aa:56:74:
                    5b:fa:a7:1d:c2:67:96:1b:ec:0a:91:70:b9:b5:c6:
                    4b:c5:be:e3:38:e1:74:dc:dd:48:e9:07:43:d0:7c:
                    fb:54:29:91:e1:49:94:d6:76:27:7b:71:e0:86:f2:
                    d1:1c:6d:38:63:60:33:47:59:dc:c5:5d:77:0b:87:
                    df:53:35:bb:69:ed:b6:df:45:37:0f:d1:73:55:cd:
                    73:14:69:47:9e:34:84:14:f7:5b:3c:a8:04:3c:14:
                    61:43:4d:7f:d7:4c:e5:d8:ea:64:ad:ea:79:40:5b:
                    87:76:7b:22:8b:7c:2b:2a:32:08:d6:fc:e5:74:5c:
                    b8:5a:89:48:83:63:6f:a8:75:26:2a:f0:9c:d4:d8:
                    d2:e5:90:9f:29:63:c3:a9:51:1e:f8:c3:57:a7:b5:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:65:5C:01:E7:50:7F:44:C4:0E:58:6C:D4:6C:CB:5A:38:39:62:F6
            X509v3 Authority Key Identifier:
                keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:07:84:97:69:51:46:ac:39:47:f2:68:67:88:c3:1b:d6:e5:
         77:d2:c7:ba:7a:38:2d:3b:e8:f7:a1:16:d6:92:50:cf:ad:eb:
         a3:f9:26:84:66:7a:6c:fc:a7:e7:68:d7:be:65:d3:5f:0a:09:
         71:93:31:31:10:f6:10:ff:68:8a:98:53:b1:1b:ed:7f:00:04:
         b8:4b:2b:b9:3d:b6:d6:42:66:d9:a4:a6:76:b7:01:36:25:a1:
         d2:ee:a5:18:1b:70:53:5b:83:13:78:e0:24:58:29:6c:ae:70:
         5c:18:d4:78:65:b1:92:2e:12:c6:34:7e:f9:84:02:1d:27:1d:
         9e:3b:30:a7:a3:fe:7c:e3:f5:7e:e2:c4:ab:01:93:ac:e7:a9:
         68:ac:44:7a:e5:b7:c3:f2:2e:39:dd:4c:79:a3:30:f8:62:f7:
         9c:be:47:61:c3:7a:7d:8b:b2:38:fe:3a:64:06:97:b5:bc:e0:
         4c:45:ab:08:72:ae:ee:21:64:36:87:bd:2d:7a:fd:88:2f:63:
         d8:66:2d:1c:69:eb:eb:d4:e1:5b:c4:c2:72:62:ba:d5:78:cd:
         60:10:c9:a1:7a:6d:ff:1c:8f:98:66:ea:09:f3:4f:d0:20:ee:
         81:2a:ff:e1:c8:33:1b:7d:5b:83:17:53:22:8c:6b:a0:d5:f2:
         26:6b:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:02 2026 by rpki-client