Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
File:                     J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json)
Hash identifier:          AuTue+ljtjegXWPzd57OQC9XiXHlnos7ni27NETYC4M=
Subject key identifier:   51:15:2A:D2:70:3D:72:F3:E5:38:16:D2:45:96:44:72:E1:82:1B:28
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Certificate issuer:       /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial:       0B31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
Manifest number:          0B20
Signing time:             Thu 02 Jul 2026 19:28:52 +0000
Manifest this update:     Thu 02 Jul 2026 19:28:52 +0000
Manifest next update:     Thu 09 Jul 2026 19:28:52 +0000
Files and hashes:         1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: zKCvkNOi6HQdR9VmkqKTcwr++ZBus/GVSJ3cK8cFQPI=)
                          2: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: CCWU/slr79ct4FNV5i0TIXfHecnrZ2GwArH1P9tumgo=)
                          3: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: Ela4JYI8D8rs4ZlHfvA7O7Ltq8JCZsgjs+g9KLkdTMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 19:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2865 (0xb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
        Validity
            Not Before: Jul  2 19:28:52 2026 GMT
            Not After : Jul  9 19:28:52 2026 GMT
        Subject: CN=6a46bbf4-4e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:e4:62:87:55:b4:9d:60:c7:16:bf:df:8b:
                    9f:6a:b3:a9:03:d7:c4:7f:73:17:ed:6d:21:8a:bb:
                    61:18:22:89:4b:43:90:fa:64:7d:50:3f:56:c3:0d:
                    03:4d:90:e3:c5:ad:16:df:80:fc:60:36:28:59:b0:
                    2f:06:f0:ce:bd:4d:da:62:40:e0:a7:24:27:93:e2:
                    f6:c0:c9:28:1b:1d:f2:ec:fc:9a:1e:db:e4:48:e4:
                    74:67:64:9d:ec:b2:67:10:ff:9a:93:53:31:65:cd:
                    e0:68:86:9a:00:2f:b6:4f:06:69:5a:0c:57:52:50:
                    15:9f:71:ef:52:89:d2:af:a6:e4:ff:70:3b:ad:35:
                    ad:d6:4b:ef:36:20:8f:cd:e2:0a:bc:11:71:48:99:
                    6f:e0:b4:41:9d:ca:4f:c2:76:c3:19:42:2a:1e:9e:
                    45:e3:e5:bc:f1:20:57:2f:c4:82:8c:d5:72:0b:2c:
                    26:49:41:43:81:e1:ff:2e:4d:69:aa:2a:16:6e:f6:
                    7b:7f:8c:f4:36:c6:ec:0b:0f:58:76:18:70:19:ea:
                    a2:7c:06:77:e7:11:44:e7:5f:07:5e:68:06:24:d7:
                    2b:7f:7c:88:73:c2:b7:fc:35:cc:b3:0a:4f:48:18:
                    88:e1:dc:98:3c:43:47:45:b3:df:ef:bc:83:18:15:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:15:2A:D2:70:3D:72:F3:E5:38:16:D2:45:96:44:72:E1:82:1B:28
            X509v3 Authority Key Identifier:
                keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:67:2f:80:0c:48:68:a4:f9:39:d5:61:96:02:cf:a9:18:6b:
         9c:46:ba:7c:15:43:21:3d:52:c7:a1:a0:30:7e:44:a8:ae:22:
         27:52:b2:b3:d1:97:90:6e:c8:26:41:57:c9:0e:af:32:7f:5b:
         6b:2c:35:6f:08:cd:a7:1c:8f:3c:54:0e:32:d5:ba:21:c1:ed:
         04:4d:97:92:e0:65:0f:c4:7a:fc:2f:31:4b:6d:1a:cb:31:9f:
         c4:73:bb:82:10:96:b2:f0:07:85:4a:7b:5b:b3:76:2d:a7:f9:
         a0:13:d9:b4:3e:f6:75:3e:3f:08:8b:f6:1d:1b:14:3f:fc:cd:
         48:9c:dc:b8:d9:4d:c4:bc:98:f7:ab:5c:0d:c0:6d:20:44:18:
         42:c1:d1:1a:c0:97:ab:c1:81:73:df:c7:c8:9a:67:92:e7:f8:
         ee:45:a0:bf:90:22:6a:33:3e:90:d3:a7:ec:7d:e0:c0:c7:a9:
         67:b9:a0:15:b5:41:ac:ec:27:6f:a4:c1:74:e1:ef:cf:48:0e:
         26:ea:d4:99:3f:0e:ee:56:39:9c:0f:dc:8e:cf:8e:90:db:e1:
         9a:2a:8a:7f:d3:4b:5d:bd:11:d2:5f:b7:11:4c:e7:2e:23:d7:
         40:9f:69:07:9d:0c:d4:73:0a:b8:4f:eb:a5:d7:63:04:b3:98:
         06:6f:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:31:06 2026 by rpki-client