Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
File:                     JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json)
Hash identifier:          g8i0U+tnTkgNVYzifNA5IM44+tC/bdhxbz9QoJYewgs=
Subject key identifier:   E1:70:46:D1:02:15:FD:E2:1A:ED:62:17:0B:81:62:6B:FB:C4:78:17
Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
Certificate issuer:       /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
Manifest number:          01BB
Signing time:             Fri 15 May 2026 03:54:19 +0000
Manifest this update:     Fri 15 May 2026 03:54:19 +0000
Manifest next update:     Fri 22 May 2026 03:54:19 +0000
Files and hashes:         1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: jbCK0IG0UNtFQuNGrjILVeG9nFoyzCW4CWU8DI2rGZU=)
                          2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: 8g6DGym5X06XbbSD/tbM94k9PEbw+g3fC0hmurAHwv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl
                          rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 03:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB
        Validity
            Not Before: May 15 03:54:19 2026 GMT
            Not After : May 22 03:54:19 2026 GMT
        Subject: CN=6a0698eb-64bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a2:8c:44:82:0e:6e:87:4d:3f:f1:ac:b2:9e:
                    17:2f:fd:4d:da:6a:d3:24:b6:c4:93:35:94:8c:b0:
                    ce:d8:ec:bc:f9:3a:ab:49:97:f4:68:52:93:1f:3f:
                    61:8b:4a:c3:8e:50:36:ab:8c:a1:0a:c5:88:d6:00:
                    39:4c:3e:5a:38:70:fd:a7:2a:4a:96:8c:71:0f:2b:
                    55:db:ee:b6:29:84:85:35:17:b1:d6:0e:c3:1a:fe:
                    a8:e1:95:a5:19:54:f3:ad:16:71:d3:d1:75:23:7a:
                    38:2d:e6:c1:a4:8e:91:2c:14:85:3f:53:1b:97:b1:
                    b9:b8:30:0e:da:f7:c9:f5:ce:00:38:d8:69:7c:cc:
                    cc:77:d3:53:12:cf:7b:1c:dd:f7:22:04:80:82:c3:
                    06:c4:55:8a:a7:47:75:96:cc:16:d6:d2:69:e2:87:
                    6a:26:3d:d6:09:14:55:3f:81:78:09:63:d7:a9:33:
                    82:f1:22:49:b5:90:2b:bf:e5:57:0d:d1:5c:d5:7f:
                    e4:dd:16:40:95:31:28:80:4f:f9:84:87:1c:81:4f:
                    30:a5:74:ba:52:81:a3:62:86:7c:b0:78:04:9b:90:
                    3d:42:47:44:25:ac:d2:d0:98:9e:a4:84:17:2d:de:
                    ef:ca:4a:08:2d:a9:f8:68:50:04:b3:56:67:a4:bb:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:70:46:D1:02:15:FD:E2:1A:ED:62:17:0B:81:62:6B:FB:C4:78:17
            X509v3 Authority Key Identifier:
                keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ea:36:f0:2f:0a:d2:62:6c:93:c9:a3:85:34:a0:17:27:41:
         1f:cf:b4:2c:8d:04:62:33:78:ee:1c:ec:44:da:5a:35:80:36:
         a1:7a:3d:b9:27:e9:2f:cd:71:e7:bb:f3:5b:4f:ed:99:2b:df:
         4f:39:ec:ac:cd:1f:3e:fa:b4:62:d1:4b:94:2c:b8:0c:25:24:
         a5:78:7a:ce:e0:c6:14:5e:bb:be:3a:b1:95:f6:45:3b:03:86:
         75:db:98:60:f4:b2:09:44:b1:ae:47:f2:a6:f1:87:91:5d:09:
         c5:53:06:81:17:ef:4b:48:49:f9:37:bc:f5:9c:bc:10:5a:f6:
         17:df:c5:ae:56:95:7d:0d:9c:e2:ab:ba:b6:a1:05:13:48:60:
         2c:b6:f2:6a:f2:33:6e:fb:4e:66:bb:ef:35:79:b8:a4:17:dd:
         b4:7c:6b:bd:7e:d2:95:29:d8:c1:d8:7b:80:fa:ea:64:f1:c5:
         49:73:96:d0:2b:cc:af:df:58:6c:d8:7c:76:39:fb:37:7c:95:
         91:7d:53:11:02:d5:d8:3c:fb:6b:f6:0c:ff:f5:b2:83:bf:42:
         9b:7e:22:d2:0e:4c:73:69:e7:6a:bd:34:0f:c9:c1:8f:f2:e0:
         9d:41:ba:c2:57:29:81:8d:bb:1b:dd:3f:de:90:83:84:19:51:
         36:3f:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:39 2026 by rpki-client