Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
File:                     JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json)
Hash identifier:          6IeeXPzBjrGJDrv7kTnpe141H/R9tN0xkQuPOKp6RiA=
Subject key identifier:   2B:83:0D:69:2D:79:4C:B0:58:7A:40:E9:6C:85:4C:3B:E0:8D:1A:1B
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Certificate issuer:       /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial:       08C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
Manifest number:          13B3
Signing time:             Wed 20 May 2026 19:22:07 +0000
Manifest this update:     Wed 20 May 2026 19:22:06 +0000
Manifest next update:     Wed 27 May 2026 19:22:06 +0000
Files and hashes:         1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: i2GWFeAm2h1PEyg9N1S3hdjXUNhPqZHDaWz0jqg8p3g=)
                          2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: yGyRKh06TFma60wn7/oVG0CZ1hXIDiNrfwQrrBtGYeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
                          rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
        Validity
            Not Before: May 20 19:22:06 2026 GMT
            Not After : May 27 19:22:06 2026 GMT
        Subject: CN=6a0e09df-b79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:fb:10:fd:d7:cd:45:2f:b6:02:78:b2:49:
                    47:27:d3:6b:9c:94:f3:be:84:3a:3e:f9:b5:a4:50:
                    93:b1:67:da:ca:18:76:4e:77:44:7f:a7:03:a5:54:
                    a1:d4:53:76:a8:2c:64:3f:e4:b2:2d:f9:f9:61:1a:
                    82:8d:46:73:cc:a4:fc:ae:a3:6d:f6:1f:65:52:6f:
                    a7:a7:5a:da:c1:48:00:bb:6a:1d:6a:ee:77:a6:2d:
                    b7:56:63:b2:e3:11:e0:10:65:27:19:54:2f:2c:aa:
                    c4:74:b5:84:2b:82:35:55:ed:0e:9d:17:4f:4e:97:
                    29:bd:b4:16:01:0e:f1:63:18:de:71:1d:8c:80:aa:
                    69:66:94:55:87:42:84:07:96:7b:7c:6f:e9:cb:97:
                    28:0b:ac:ab:27:b9:2a:11:e0:67:a3:57:03:6f:8b:
                    15:88:48:12:46:91:45:b1:62:9e:88:1c:27:5f:a4:
                    b1:56:13:51:4a:cf:55:86:65:78:5a:a1:fa:19:83:
                    7d:0a:b8:b1:43:f9:b8:20:db:fa:0a:46:71:74:b0:
                    13:d9:c5:a5:97:b4:d9:31:5e:eb:d2:1e:26:7e:8f:
                    c1:69:a0:c5:55:35:69:0b:70:b8:4e:8f:09:76:43:
                    d1:12:46:ea:5d:16:c9:fe:44:73:ac:3f:5e:49:8f:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:83:0D:69:2D:79:4C:B0:58:7A:40:E9:6C:85:4C:3B:E0:8D:1A:1B
            X509v3 Authority Key Identifier:
                keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:da:43:8d:e2:f4:fa:12:b3:53:ca:9c:7f:a0:3c:e7:d3:19:
         57:93:33:f0:1d:cb:20:65:41:36:01:6a:9e:84:a5:92:3b:cc:
         6b:73:09:4a:e4:1e:ab:a5:e0:2e:72:98:db:5a:82:14:94:45:
         ff:1b:26:58:15:49:92:e6:a0:7a:0e:49:4b:a8:c3:d7:e7:e2:
         c0:4a:01:64:d4:a6:45:65:ff:1e:8c:f3:e0:f6:fe:45:8b:f2:
         ad:de:c7:99:78:a7:cc:0a:4d:2b:85:cd:66:17:66:f1:e5:ac:
         b6:6d:f0:85:8c:4d:08:ab:14:f6:13:74:b6:d7:fe:a3:67:67:
         65:e2:9b:cc:65:6c:dc:64:ba:46:d3:25:af:ad:d4:d9:96:48:
         54:02:5c:e2:66:78:21:b6:f2:8b:e3:08:f2:87:3a:29:36:5c:
         05:4b:73:01:58:09:8d:15:3d:9d:1d:aa:d2:ba:cc:1a:ad:c0:
         9e:b9:f5:24:4c:6c:0b:ae:a1:a7:6c:fa:19:ea:c7:31:d9:4a:
         5f:b1:a7:a6:23:33:b3:57:81:ce:62:e7:30:07:d5:3a:55:f8:
         41:80:9a:85:d0:75:a4:b7:85:8a:5f:02:da:d1:f2:09:6a:08:
         79:73:1f:2f:2f:83:2f:a2:13:8f:1e:46:1e:9d:4b:bf:33:60:
         4f:28:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:05:11 2026 by rpki-client