Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
File:                     JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json)
Hash identifier:          Y34MEzxfM71h2NsbLl8V/3OZm3Oq1r1dnaJE07ssT4A=
Subject key identifier:   B5:7C:B1:4B:07:87:DB:47:97:56:F2:A5:58:8D:1F:AB:C9:AC:F9:2C
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Certificate issuer:       /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
Manifest number:          DC
Signing time:             Mon 01 Jun 2026 07:25:28 +0000
Manifest this update:     Mon 01 Jun 2026 07:25:27 +0000
Manifest next update:     Mon 08 Jun 2026 07:25:27 +0000
Files and hashes:         1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: QIo1d/ZfFAxhkRrwnAE5/gzyVaRxGPN+cks13L5O5CM=)
                          2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: PGIqw8BHbURwduSPg9mp4INfNEkXZEuiYDqUDhxyyK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
                          rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
        Validity
            Not Before: Jun  1 07:25:27 2026 GMT
            Not After : Jun  8 07:25:27 2026 GMT
        Subject: CN=6a1d33e8-2ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:e2:72:47:65:39:ec:8e:f9:b5:9e:9c:43:
                    87:71:9c:36:75:34:df:5c:56:5f:d6:d6:78:3e:f0:
                    b3:80:04:f9:d2:fd:a3:6b:10:d6:be:2c:a4:c8:82:
                    af:80:12:e2:6d:82:73:39:2c:a1:bc:30:27:7f:e2:
                    d5:dd:89:a3:5a:e3:e8:c0:4a:e5:64:10:8c:3d:10:
                    fd:7a:bf:c3:87:fb:b1:d5:e6:00:82:8d:3a:80:7b:
                    f6:84:67:63:4e:0f:b1:24:0a:5d:ea:bc:a2:ca:5e:
                    00:db:a3:7c:57:bc:24:06:f4:04:da:49:18:4a:cc:
                    75:4f:48:a3:80:de:65:55:62:df:a5:1d:91:55:13:
                    08:f3:3a:3f:b9:d5:74:bd:b6:3c:78:2a:de:b6:a7:
                    f4:98:a0:73:7c:bc:2a:a0:29:6e:ba:11:a2:dc:92:
                    81:7d:ff:4c:46:1a:de:dd:d4:73:7e:6c:b9:ec:7f:
                    b2:92:ab:e0:c9:43:c6:05:da:30:43:dd:db:82:da:
                    58:f6:d1:4b:46:b5:77:50:61:ee:f7:a3:04:3d:f9:
                    d9:79:98:ed:9f:13:90:43:f3:55:91:55:9f:d0:c4:
                    ad:29:d7:3b:fa:d2:f2:53:4d:18:6a:ef:e1:e6:d4:
                    07:b8:44:df:f9:03:e3:b5:a6:6c:11:17:4d:1e:26:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:B1:4B:07:87:DB:47:97:56:F2:A5:58:8D:1F:AB:C9:AC:F9:2C
            X509v3 Authority Key Identifier:
                keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:35:d0:67:dc:07:d7:e7:9a:31:ed:39:a8:15:34:99:51:
         bf:fe:a7:ce:cc:bb:04:d2:00:40:2c:8d:c0:05:88:f9:02:3a:
         07:52:19:a3:86:19:c4:17:74:db:58:ec:f5:e6:ed:10:23:18:
         2d:a2:b6:1e:47:27:90:d8:1c:d9:26:db:3c:1f:e2:3a:67:0a:
         dd:ad:f5:64:2d:b9:50:7f:a7:d8:86:65:10:78:53:2a:21:9d:
         49:69:de:29:60:3f:e5:fa:78:a1:01:76:2a:70:13:1e:b3:eb:
         78:25:68:2f:9d:5c:40:5a:29:9a:8f:3e:d5:d7:ce:db:50:a4:
         6b:2f:4a:8e:1b:71:4c:1d:f2:56:20:ed:d8:6c:8e:a3:a4:b0:
         d7:3c:f7:3c:ae:17:6e:5c:f2:1e:78:16:e6:ca:1e:a8:c0:9b:
         28:98:9e:91:a3:3e:5e:79:b7:6c:0e:a8:1c:26:ac:29:a7:90:
         ef:00:d7:f4:6a:fc:47:a7:ba:48:94:c7:f2:91:1b:ac:5a:c0:
         88:88:b9:f3:57:b5:4d:82:39:54:ec:0a:62:66:a3:5e:6a:7c:
         a1:d1:b2:57:87:9f:7d:36:5d:78:eb:76:61:4b:46:59:5d:31:
         bd:e5:16:04:2f:c7:7d:38:34:01:fc:a5:3a:f0:d3:34:c9:16:
         07:fe:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:00:10 2026 by rpki-client