Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          O1dhKo20GHhokyApNcutS1IEJbHizlm8lBIhH0Dx49I=
Subject key identifier:   38:1A:C4:5C:A5:DF:1D:7B:17:C3:DF:85:D1:03:37:ED:35:85:13:09
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          0127
Signing time:             Tue 23 Jun 2026 06:04:51 +0000
Manifest this update:     Tue 23 Jun 2026 06:04:50 +0000
Manifest next update:     Tue 30 Jun 2026 06:04:50 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: +buaScx7PJH/ISpun2AfUMnHYDMF8dFYNu1iCb3clU0=)
                          2: 5090FDECFF2E11F099E36B6D89EE528E.roa (hash: SVmKKWgD8wzJ//9zHCIQvh7qq3NDelAnKECCPch2U6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 06:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Jun 23 06:04:50 2026 GMT
            Not After : Jun 30 06:04:50 2026 GMT
        Subject: CN=6a3a2203-4981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:94:96:94:f9:be:f0:51:4e:68:02:23:66:
                    a0:17:d7:f7:8e:d9:2a:c6:c2:ef:4e:80:86:78:75:
                    89:e6:66:ed:34:64:e0:95:72:20:82:4f:38:f8:8d:
                    5b:3c:5b:98:22:20:3e:90:ad:39:30:7a:43:5c:29:
                    f1:bd:1b:a4:90:d3:61:dc:2c:0e:53:2d:ca:49:44:
                    e3:53:ae:eb:33:c1:0d:72:6c:e5:27:c6:3e:fd:c3:
                    b9:12:e3:91:19:d4:61:84:f2:9e:25:cd:8f:7b:59:
                    a4:f1:4f:b3:ec:b9:27:3e:51:ad:98:96:2f:7b:df:
                    2d:df:7c:70:23:7c:8c:bd:da:b5:44:e8:0b:32:c0:
                    ef:8f:85:4d:d9:28:7d:c1:81:72:39:03:b2:e3:7d:
                    4a:8e:ce:e6:c3:df:5e:e6:00:59:cb:86:4b:64:1b:
                    4f:0a:84:9d:61:bc:27:b4:82:6c:43:d8:6c:78:8a:
                    50:70:ca:c4:1d:7c:65:2b:23:c7:1a:cc:ef:ef:be:
                    47:35:f4:61:71:b9:8f:10:27:64:fa:89:2a:41:e5:
                    6d:11:b4:f6:6e:5a:d2:d6:8c:5b:dd:2c:2b:3e:ab:
                    dc:79:5e:d4:24:aa:40:53:40:e5:a9:bd:f4:2e:ab:
                    15:56:10:51:f5:d7:0f:54:fe:82:89:17:50:b7:20:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:C4:5C:A5:DF:1D:7B:17:C3:DF:85:D1:03:37:ED:35:85:13:09
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:e3:a7:69:b2:de:db:11:bc:8a:54:52:f4:d6:0c:ed:15:
         22:cb:20:7d:94:72:f7:8f:f2:57:52:cb:65:0a:77:12:1b:91:
         a2:ce:49:b4:79:f7:46:09:03:01:65:16:6c:8a:a6:f2:01:18:
         e9:f5:a9:21:ea:00:32:6c:39:53:d9:d3:ba:61:e4:39:95:29:
         d7:ca:48:73:3e:5b:ea:3a:26:ac:54:d2:11:b5:c7:75:0d:b7:
         b2:70:6e:aa:13:c7:78:ab:89:ce:27:d9:43:eb:03:86:75:b1:
         31:3a:fe:ed:1c:aa:3f:0e:7c:ae:7b:00:6c:34:7a:c6:50:31:
         e3:95:ce:8b:d9:7a:90:a6:f9:c1:52:4a:4e:f6:54:9b:19:a6:
         a3:ff:e7:9b:0c:af:de:6b:d2:e1:46:f6:18:cf:31:a5:81:2a:
         6c:86:c3:1b:66:ea:f6:89:82:2a:33:ba:e3:c5:45:39:dc:7d:
         b3:c9:97:3b:2f:69:85:95:73:cf:d6:b1:25:21:61:43:23:84:
         d4:97:d0:e2:c9:87:b1:4c:ca:0f:41:e3:63:4a:5f:29:c2:86:
         d9:e4:c8:07:e7:bf:c7:3d:80:6c:5b:be:54:14:08:51:25:e9:
         84:bc:bf:ce:a4:03:34:25:5b:34:86:17:5b:e2:c2:20:7e:21:
         ec:62:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:29:54 2026 by rpki-client