Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File:                     jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier:          NUlQyyEGap4Ou5l4dfCimTea1Ye0jh4Swqt0ajPLtA0=
Subject key identifier:   A3:0E:71:9A:28:BC:51:7E:25:2E:6D:EF:5E:08:89:25:83:F1:EA:2E
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       02CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number:          02BD
Signing time:             Wed 01 Jul 2026 02:29:38 +0000
Manifest this update:     Wed 01 Jul 2026 02:29:38 +0000
Manifest next update:     Wed 08 Jul 2026 02:29:38 +0000
Files and hashes:         1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: nfrEOo6RH3pJkjwbkqA253U965EK5RlYZntKloqjOdw=)
                          2: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: ItDB42YA4akVh7SOSm7en+1Za7DGiN8sAhKI1UhXvfY=)
                          3: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: SHGrRXj8iL8y62i+lXT9bwWoMs/o/3OL7e7V5YLO+Uk=)
                          4: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: Vebt9O/IkdXmftIw76IOG9N8DrlxVAK/4Vf1+tpsbVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 02:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: Jul  1 02:29:38 2026 GMT
            Not After : Jul  8 02:29:38 2026 GMT
        Subject: CN=6a447b92-2c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:fa:aa:bb:ef:f3:00:1f:48:a0:4c:23:c7:
                    d2:c2:e2:98:a5:ca:d8:be:4d:07:f0:b6:b3:a2:a2:
                    c6:76:15:cd:ee:fb:f8:d1:bd:a9:db:5b:b5:b5:4b:
                    fb:7b:4f:62:21:a6:c8:6e:f3:20:7a:b1:8d:14:5e:
                    26:b5:8a:78:8e:0a:1d:2a:e7:60:56:62:6b:34:82:
                    44:cc:ad:c5:50:13:8f:2d:ef:27:91:0b:aa:90:9e:
                    2c:97:3e:23:f6:d9:0b:0d:5a:8b:c6:74:be:cd:33:
                    d9:b7:83:d2:26:d6:f6:e0:e8:cd:40:67:8f:55:96:
                    17:e3:ec:ef:42:40:a7:d3:30:65:ef:96:d8:14:29:
                    17:f8:e0:55:a1:03:f0:21:2d:23:af:64:9c:f8:23:
                    00:32:f3:23:5f:9c:b9:d0:a3:a3:c6:8e:1c:99:fc:
                    e1:84:a2:ed:00:39:00:74:ff:b6:a2:70:30:c1:82:
                    d8:9a:58:62:62:de:b8:a3:1a:40:60:88:b7:e9:65:
                    34:d0:70:1a:82:be:36:9b:c2:df:85:5b:eb:39:0f:
                    76:65:b4:1b:23:00:f3:f4:ba:c3:26:7f:02:7d:aa:
                    ef:30:35:2b:86:e5:11:c2:e0:f7:3a:44:6a:f3:55:
                    ad:a5:a3:c5:54:71:08:9f:43:4a:ef:e1:2d:91:ba:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0E:71:9A:28:BC:51:7E:25:2E:6D:EF:5E:08:89:25:83:F1:EA:2E
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:30:3e:de:ab:8a:b4:85:62:2d:43:96:3e:94:53:a8:a4:f9:
         6f:f1:dc:fc:ee:a9:fc:b8:78:83:8a:7c:7d:eb:dc:2b:aa:00:
         62:92:6a:19:67:d8:9d:d9:d4:d6:af:7b:60:39:6f:a2:63:9f:
         d6:6c:a8:70:57:68:61:e5:e2:26:62:6c:c3:1f:bf:96:51:dd:
         c5:bb:e9:ce:5c:89:78:70:5c:fe:d8:b0:2b:ba:4a:b8:ce:ef:
         17:fa:67:40:42:9f:1e:db:87:41:ac:7c:9b:03:cf:c6:3b:ff:
         be:ed:82:79:f7:1e:5f:e1:f3:69:3c:80:a4:8d:9b:60:ae:e8:
         5a:4a:99:44:ad:5e:b1:5c:96:28:8d:ed:de:27:cb:b6:6f:0e:
         d7:45:53:35:3d:1b:b9:38:d2:03:e0:d6:70:cd:ed:25:44:d3:
         59:16:92:1d:9e:8e:82:90:65:7f:dc:a0:61:b4:14:1f:8e:4c:
         f1:08:c7:55:f2:ae:3c:d0:11:fb:2d:ac:51:9b:39:a7:4e:7c:
         60:6e:a1:68:38:f6:a7:6b:88:ea:ae:8f:74:e5:35:7d:18:8d:
         2f:c0:23:a3:7c:e8:01:2c:7c:99:df:4c:f2:c5:5f:6f:b9:95:
         a2:6d:fd:85:dc:0d:b7:fa:2c:77:df:f7:2d:5d:f3:56:ed:40:
         a2:17:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:26:44 2026 by rpki-client