Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File:                     jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier:          jALH8nr0+nHsVtubg6FBg7NaoQb8DgtpKubNRYoKq04=
Subject key identifier:   46:43:D6:A6:58:D1:38:23:C4:53:E3:85:03:DA:7C:66:C0:6C:EC:F9
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer:       /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial:       1C8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number:          1C82
Signing time:             Wed 20 May 2026 16:10:49 +0000
Manifest this update:     Wed 20 May 2026 16:10:48 +0000
Manifest next update:     Wed 27 May 2026 16:10:48 +0000
Files and hashes:         1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: Lowjtqy0UPuHu+7AmeAgbkJha2zyFXdJ+cIa5PZuwUw=)
                          2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: k4TlMYilN23yIOsOzxylamYG8qpDaep1a1zgx1W7uB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
                          rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7311 (0x1c8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
        Validity
            Not Before: May 20 16:10:48 2026 GMT
            Not After : May 27 16:10:48 2026 GMT
        Subject: CN=6a0ddd09-4e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:30:a8:40:f8:36:21:58:5a:d4:82:1d:f5:
                    13:93:b7:b1:e9:b7:10:a8:1e:eb:e7:4a:18:7c:45:
                    25:5b:54:48:0f:10:fd:c8:89:5c:a1:63:fd:89:fa:
                    6c:da:98:de:58:93:e7:61:45:97:cd:1b:61:05:25:
                    7b:7a:8a:6c:1a:6e:eb:f6:27:93:ff:ff:6f:eb:fd:
                    9f:72:f0:14:85:69:88:8f:c6:10:c8:c6:2b:cc:f0:
                    9e:f9:99:35:e9:b1:44:75:56:8e:ee:2e:f6:98:56:
                    bc:f2:27:0b:ae:40:42:e7:a1:21:a8:a5:67:7c:02:
                    80:ab:6e:18:10:02:73:38:ad:7c:32:6e:0e:b5:79:
                    d8:da:3b:1f:68:69:31:ff:3f:f3:fb:54:27:bb:cd:
                    ba:a1:02:ed:28:b1:f3:84:03:e3:ee:4c:30:1a:f0:
                    04:eb:30:de:1a:8a:1c:ae:fe:b0:a4:0b:72:2a:a5:
                    55:7d:84:90:c7:a6:56:d5:63:e2:24:64:74:b6:33:
                    48:ad:71:20:ab:7c:8d:4c:b2:ee:40:c0:df:b3:90:
                    49:b5:cd:e5:99:28:96:4c:aa:06:d3:65:8b:3d:f7:
                    16:16:de:dc:f4:9f:60:63:50:5d:f7:ef:ca:b5:37:
                    58:ed:c3:76:f9:d0:d9:a1:c3:39:ce:b0:47:ce:ca:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:43:D6:A6:58:D1:38:23:C4:53:E3:85:03:DA:7C:66:C0:6C:EC:F9
            X509v3 Authority Key Identifier:
                keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0f:f7:34:08:6f:b0:8d:ed:24:e6:28:9b:74:9f:18:1f:5f:
         c6:81:1e:04:8f:53:18:12:26:c6:ba:d9:aa:89:fc:6c:5e:fd:
         44:07:f5:c3:29:98:08:7e:65:72:26:98:24:d9:21:93:88:e8:
         3f:39:ab:a4:a2:b0:dc:a5:fc:a2:79:3e:8f:a7:3f:c5:94:6d:
         69:7b:d5:61:01:12:de:13:7f:f1:d7:5f:25:38:20:33:83:96:
         4b:f1:05:49:2b:0f:11:b1:d4:46:4a:42:ac:bb:27:8f:28:2c:
         ca:78:99:15:d9:e5:9b:46:6e:d9:27:72:49:68:bf:e1:e6:82:
         77:ef:9e:dd:10:e2:d5:fd:8b:97:35:63:81:4a:5d:d0:49:c9:
         26:3e:eb:33:9a:30:a5:e5:cc:f7:5a:0c:2f:10:b3:eb:83:a8:
         2c:70:5e:a2:c5:0f:74:b1:16:23:0c:21:79:71:35:53:c2:0c:
         dc:e1:03:91:65:ad:42:cc:b9:41:0f:1d:0a:25:64:bb:89:03:
         ca:b7:eb:fe:62:f4:49:c4:c4:28:18:e8:8a:5c:aa:0b:85:f0:
         05:87:81:be:33:97:1b:72:0d:59:9a:4e:0e:23:fb:97:54:d2:
         8d:0c:d5:3f:86:61:be:9f:1a:8d:98:9e:2e:4a:30:83:da:05:
         c3:57:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:57:54 2026 by rpki-client