Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
File:                     JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json)
Hash identifier:          nCQOLWn9f80z37/B3Z/AiIb/xehOcnPZzqBktP8bROs=
Subject key identifier:   09:C4:1B:65:10:6E:0E:97:A6:E7:D7:C8:51:FD:65:3F:15:94:FB:A3
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Certificate issuer:       /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial:       0D08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
Manifest number:          0CF6
Signing time:             Wed 20 May 2026 18:21:36 +0000
Manifest this update:     Wed 20 May 2026 18:21:35 +0000
Manifest next update:     Wed 27 May 2026 18:21:35 +0000
Files and hashes:         1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: qoa3GGK/mN+tTKr8MNu1uCSKtQcAGtu+Y61xnIkUc7Y=)
                          2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: 3M325K9PcHmy3y6ghRr+Gv64zJGXAL4b/FNW6UDE+Hg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3336 (0xd08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
        Validity
            Not Before: May 20 18:21:35 2026 GMT
            Not After : May 27 18:21:35 2026 GMT
        Subject: CN=6a0dfbb0-4852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:3a:a5:76:65:2e:c7:74:49:8c:b9:e4:ed:
                    08:61:56:55:7c:4b:1a:21:45:aa:fa:b9:1d:32:99:
                    21:99:64:b2:cb:ca:0b:fe:c9:d4:73:de:fe:94:6d:
                    20:1d:3f:83:df:e6:5a:cb:28:9f:99:fb:b1:ac:bd:
                    c9:52:58:a6:a1:15:13:33:8f:b5:ea:6e:03:51:20:
                    a3:09:d9:65:12:fc:4f:93:f8:5c:fa:c5:bb:9e:14:
                    28:28:9d:1c:3e:ff:72:52:37:d9:a8:49:e6:08:3e:
                    5e:b3:3c:16:ca:40:e6:4b:4f:68:10:6e:09:38:a7:
                    25:f8:9b:88:2f:1e:0a:54:1c:57:40:06:17:38:6d:
                    84:63:23:90:96:c5:2d:b1:9e:38:b9:74:9d:63:31:
                    86:e8:0f:a6:1b:6d:ad:ea:f7:f6:9e:5a:75:3c:26:
                    81:ad:f8:a3:c0:60:22:e3:d7:d8:a3:af:2c:f1:ae:
                    1e:e5:ee:02:3d:37:3d:3e:7f:bb:5c:67:1b:2d:64:
                    fc:f1:47:d6:77:a8:c5:72:a2:15:52:e7:68:03:22:
                    80:0d:b4:ba:75:13:f8:8d:25:68:48:aa:62:7a:10:
                    29:d8:43:d8:b4:d7:c8:4b:bd:cd:f5:77:b9:45:4f:
                    8b:08:cd:af:ba:9a:3b:ac:19:fd:58:b2:6c:00:bb:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:1B:65:10:6E:0E:97:A6:E7:D7:C8:51:FD:65:3F:15:94:FB:A3
            X509v3 Authority Key Identifier:
                keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:ac:dd:43:70:de:49:30:26:81:8d:f7:39:f4:bc:de:24:
         de:fa:14:b2:44:c5:44:72:47:14:23:c8:27:6e:7d:e7:82:c1:
         60:11:3d:be:fb:17:e5:fb:62:68:e0:5b:21:d9:17:2a:a4:12:
         1e:ae:39:02:83:77:12:fb:d3:99:0a:f4:a5:3c:86:cf:98:d4:
         bb:1e:62:af:19:c8:32:79:27:06:bf:72:20:12:e4:75:a9:ca:
         d5:66:75:76:4a:02:85:32:70:83:e2:08:58:c5:3e:b9:18:b1:
         15:b5:95:d1:b6:4f:1a:7e:16:8b:1e:2c:4f:10:af:47:3f:58:
         ce:2d:11:ab:e0:30:ba:36:e8:83:b9:5d:f4:af:51:81:06:e8:
         2d:a1:40:8e:97:ae:99:ac:54:3a:6d:15:25:a6:fe:d1:a3:05:
         1c:99:6d:6e:f8:4e:2d:28:f6:7d:7c:b5:d3:83:02:54:e5:c4:
         29:44:70:77:c1:92:ce:66:ab:72:5d:47:e5:ce:83:16:22:ee:
         22:03:9d:f5:7e:a8:29:59:a2:a7:45:1c:12:3e:58:67:dd:09:
         59:72:ab:66:0c:70:c8:55:1c:f0:58:fb:3a:23:4b:30:18:81:
         ac:da:eb:9b:6e:6b:c5:0e:10:8d:56:1d:9d:47:4c:b8:0b:d1:
         f8:e1:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:42 2026 by rpki-client