Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
File:                     jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json)
Hash identifier:          tf6ypGCHmQfZnsmQYc5ug63DtDScM4h4u+6TTR722SQ=
Subject key identifier:   7A:DF:EF:AA:C1:98:EC:4A:1F:79:D6:45:C5:F4:0C:4A:3F:48:66:D4
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0B84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
Manifest number:          0B11
Signing time:             Wed 10 Jun 2026 19:26:46 +0000
Manifest this update:     Wed 10 Jun 2026 19:26:46 +0000
Manifest next update:     Wed 17 Jun 2026 19:26:46 +0000
Files and hashes:         1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: q3iAhsjMcZ3yYLJBzIkSsXppQRIjgQCi9HezG1Nq43w=)
                          2: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: KY96V7nPX5oq3FzsE82d+7qiOhZ/q030YiLdCFM2iGI=)
                          3: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: b9jxPZOZDnRvzE7CGYRtx0ipIG0fk5b1zujNyCQ0yI0=)
                          4: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: A7d/aeiJtUu4K+fswUeowBZEDmHgn1F1Svvc5b1xWTc=)
                          5: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=)
                          6: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=)
                          7: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=)
                          8: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: NMa7UpL5w1Txgsqxfm+5UqMg/zQgfsv4FmRfVL5Sn+c=)
                          9: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 7FNm1lP1Pe3hdsBxuVhe1eOrgDF7OuaVieb5lKlg9LI=)
                          10: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=)
                          11: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: HwFnU0dCqCQrz33mSD+K9rw/y8Y1TbFJLnxiPnPYqwc=)
                          12: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: Al2kZd3bm7sIrq8HRQFPgDS+45qqXFnhmN7j5M3C30g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2948 (0xb84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Jun 10 19:26:46 2026 GMT
            Not After : Jun 17 19:26:46 2026 GMT
        Subject: CN=6a29ba76-e701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:d0:99:02:ee:aa:73:2d:f6:fa:f3:50:64:
                    c1:7c:eb:a5:18:b5:4c:49:99:c1:81:69:51:a5:14:
                    30:9f:20:28:2c:b0:c6:fb:33:66:6f:51:54:71:57:
                    41:9d:79:08:c2:b4:60:42:2f:d3:7e:20:03:c8:7b:
                    b0:ee:98:c5:1d:3f:ad:6f:cf:47:1b:a0:98:9a:73:
                    bb:17:47:4b:53:77:a2:c6:31:6c:dd:52:fb:e5:6b:
                    f5:27:94:2a:b3:91:16:df:04:a5:68:6f:32:6b:8f:
                    ba:15:1c:5a:33:ab:30:a4:ad:75:5c:02:14:0a:63:
                    0d:68:28:07:0c:fc:e4:c5:a3:d7:ac:53:2b:0f:83:
                    f4:f9:ff:c0:e1:57:a4:be:2d:51:52:a2:c4:12:39:
                    5a:98:cc:cf:15:d5:9b:65:51:67:f2:f2:43:65:db:
                    68:24:d6:0a:ae:31:3c:61:16:d8:71:4e:f3:76:ba:
                    8f:90:b7:f9:c9:81:87:95:c6:73:26:d0:55:4c:c3:
                    19:ff:57:3d:ab:91:85:24:20:a7:f1:dd:0f:65:2f:
                    8f:f9:e4:57:85:8b:f3:e3:9b:44:80:e0:a6:3f:eb:
                    3d:04:dd:7e:ea:d3:02:5b:50:7c:8d:e3:fa:df:d3:
                    f5:5e:8a:c7:b2:72:e6:21:ba:45:24:f8:8c:e8:cf:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:EF:AA:C1:98:EC:4A:1F:79:D6:45:C5:F4:0C:4A:3F:48:66:D4
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9a:a7:18:5e:87:43:5a:c6:c0:4b:ff:45:9d:42:66:be:a0:
         8e:00:b9:82:18:8d:60:02:02:16:d7:5e:84:fb:f1:73:b8:07:
         93:f2:fa:88:f3:60:46:dc:bd:82:26:55:fb:b9:82:4c:18:fc:
         fe:a1:18:c7:28:0f:35:e2:f8:5a:89:06:64:72:f9:b3:51:f7:
         bd:38:fd:70:3f:f2:6f:fb:a6:a7:15:25:8d:f1:f4:3a:51:ab:
         90:f5:6c:34:0c:2f:48:71:93:a8:4d:00:2c:76:86:3c:20:fa:
         1c:00:c4:7d:86:ed:48:2f:d9:c1:36:83:2b:cf:48:a7:2b:33:
         e0:c1:42:78:b2:31:1a:15:d8:b5:a7:6a:b2:3f:b6:51:6a:c0:
         06:08:d6:6b:1f:49:8f:cd:81:c4:12:be:28:cb:d4:bc:98:c1:
         30:6a:30:4e:ba:3a:29:13:d4:b2:42:43:91:89:50:d2:2e:59:
         46:c4:00:c4:06:04:f4:9a:11:46:25:6e:c8:33:85:43:a6:63:
         97:4b:6d:b8:b1:4a:6d:8d:24:01:80:88:a3:b8:e4:51:3a:53:
         5c:75:37:24:57:d2:c0:ee:41:3a:58:bb:eb:cc:1b:de:ce:2a:
         e2:2f:f0:55:56:4e:90:f1:6f:50:dc:53:52:eb:a7:d8:89:11:
         65:5c:02:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4
MDZBNTIxOEEwHhcNMjYwNjEwMTkyNjQ2WhcNMjYwNjE3MTkyNjQ2WjAYMRYwFAYD
VQQDEw02YTI5YmE3Ni1lNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2DbQmQLuqnMt9vrzUGTBfOulGLVMSZnBgWlRpRQwnyAoLLDG+zNmb1FUcVdB
nXkIwrRgQi/TfiADyHuw7pjFHT+tb89HG6CYmnO7F0dLU3eixjFs3VL75Wv1J5Qq
s5EW3wSlaG8ya4+6FRxaM6swpK11XAIUCmMNaCgHDPzkxaPXrFMrD4P0+f/A4Vek
vi1RUqLEEjlamMzPFdWbZVFn8vJDZdtoJNYKrjE8YRbYcU7zdrqPkLf5yYGHlcZz
JtBVTMMZ/1c9q5GFJCCn8d0PZS+P+eRXhYvz45tEgOCmP+s9BN1+6tMCW1B8jeP6
39P1XorHsnLmIbpFJPiM6M9gNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrf76rB
mOxKH3nWRcX0DEo/SGbUMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz
Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK
eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAZqnGF6HQ1rGwEv/RZ1CZr6gjgC5ghiNYAICFtdehPvxc7gHk/L6iPNgRty9
giZV+7mCTBj8/qEYxygPNeL4WokGZHL5s1H3vTj9cD/yb/umpxUljfH0OlGrkPVs
NAwvSHGTqE0ALHaGPCD6HADEfYbtSC/ZwTaDK89Ipysz4MFCeLIxGhXYtadqsj+2
UWrABgjWax9Jj82BxBK+KMvUvJjBMGowTro6KRPUskJDkYlQ0i5ZRsQAxAYE9JoR
RiVuyDOFQ6Zjl0ttuLFKbY0kAYCIo7jkUTpTXHU3JFfSwO5BOli768wb3s4q4i/w
VVZOkPFvUNxTUuun2IkRZVwCXw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:15 2026 by rpki-client