Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
File:                     JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json)
Hash identifier:          F0Gz2QwUELviaWYigQn/LYIWaUS/fGnKhKYTu50mVI0=
Subject key identifier:   DA:65:14:F3:20:04:60:90:A6:A0:15:E3:1E:41:E6:92:04:44:C9:E5
Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09
Certificate issuer:       /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
Manifest number:          0107
Signing time:             Thu 13 Aug 2026 05:51:02 +0000
Manifest this update:     Thu 13 Aug 2026 05:51:01 +0000
Manifest next update:     Thu 20 Aug 2026 05:51:01 +0000
Files and hashes:         1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: Nd0X0T9EperfWvyxsYFsCP0+9wDYQuShIQ4zEjfuZPI=)
                          2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: JDWX9UuqHKo4in7tq3/puQm/PTl4j1DhM/0eE9MXDA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl
                          rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 05:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
        Validity
            Not Before: Aug 13 05:51:01 2026 GMT
            Not After : Aug 20 05:51:01 2026 GMT
        Subject: CN=6a7d5b46-df3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:bc:bd:29:d3:0d:3f:ae:5c:f0:64:f5:a3:
                    71:66:c2:dd:89:65:31:d3:ca:98:29:64:ba:32:24:
                    c3:ec:94:7f:9c:71:2d:1d:a6:ca:fe:8d:7c:44:c4:
                    2c:4b:9d:81:e8:0d:66:62:d2:c1:6f:56:00:1a:dd:
                    ab:a1:92:67:36:f2:a4:70:53:8f:56:3f:5c:e5:c0:
                    f7:ed:84:0c:d0:67:06:3c:45:48:30:5d:51:69:d2:
                    e8:a4:e2:84:f9:e4:60:06:0f:82:9c:45:04:0e:49:
                    79:cb:a8:ed:38:29:f2:bd:74:35:55:9d:69:c2:02:
                    7e:ea:06:73:42:8d:28:78:84:68:62:4f:04:d5:c0:
                    8e:19:d7:57:7f:8f:18:ab:0d:47:c4:f4:50:0e:26:
                    7c:07:42:e7:18:73:08:b4:36:67:92:d8:fd:02:4d:
                    07:6a:f7:22:8d:73:9e:35:b5:ef:fa:d4:75:62:9a:
                    14:9c:1a:67:62:2e:2f:3d:6c:57:7c:5a:1e:5e:88:
                    d5:7d:b7:ba:77:e6:b9:4a:88:60:c3:ce:8c:31:ad:
                    4e:4c:16:dc:be:07:5e:30:e2:93:e8:58:92:c8:31:
                    90:58:fd:2a:4f:16:d8:41:f9:d9:34:1a:00:be:13:
                    fb:89:60:16:88:50:a1:0d:7a:7b:26:c5:ec:c9:89:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:14:F3:20:04:60:90:A6:A0:15:E3:1E:41:E6:92:04:44:C9:E5
            X509v3 Authority Key Identifier:
                keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2d:ba:03:5f:b0:b0:29:49:11:83:3f:83:a8:3e:19:65:6d:
         55:e3:e1:a6:85:57:fb:ba:09:1a:44:45:ee:51:3a:d6:db:b5:
         7c:df:f5:61:0d:2c:c5:8a:32:47:2e:33:92:c6:1e:a9:1f:4d:
         ae:75:d7:d0:a7:a1:87:1f:f4:10:18:69:8f:f8:b6:68:2a:e6:
         42:42:e6:46:95:b2:f8:46:5d:74:6b:ec:7d:27:36:e1:2b:6e:
         f1:c3:61:86:39:c5:f6:ad:73:5d:5a:f5:28:8f:db:d8:60:c2:
         ff:da:a0:b5:10:e5:b8:cf:63:13:64:3f:8d:e2:9c:e4:c8:af:
         fb:ba:e0:56:b6:10:bb:f8:8d:a3:68:db:3e:88:60:09:b4:42:
         a6:6d:24:34:eb:e1:fc:5e:84:7b:5e:49:4e:f1:15:64:14:4b:
         56:c8:ad:24:9f:89:c4:3b:62:d1:5c:b5:5f:36:a8:18:d9:a6:
         55:bf:57:24:9c:53:a7:55:89:3c:84:10:e1:14:8f:04:22:de:
         3f:07:28:69:10:ec:b8:fa:79:73:24:a3:18:85:95:61:d6:6d:
         b1:e7:13:ae:6b:38:88:f6:a1:bb:81:4f:40:cd:bc:cd:a8:f7:
         de:e5:79:e9:e8:f0:a2:3f:69:c4:73:f2:82:68:2b:31:1c:f0:
         eb:7d:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:00:23 2026 by rpki-client