Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
File:                     JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json)
Hash identifier:          bIuiFlQVA5LHkHtg5UQubIOKpBHDYugTogNns21t65o=
Subject key identifier:   41:A7:11:82:FD:0D:14:DA:4C:F2:40:52:58:9D:56:63:5F:73:6A:98
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Certificate issuer:       /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial:       1D8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
Manifest number:          1D5E
Signing time:             Wed 20 May 2026 16:07:21 +0000
Manifest this update:     Wed 20 May 2026 16:07:21 +0000
Manifest next update:     Wed 27 May 2026 16:07:21 +0000
Files and hashes:         1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: qojKw0ciy1n2z0kZsCr0iIR0FHVSvReQw55XBOR0IkA=)
                          2: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: GqVSysEStyyTYZvIjsTnjfhM2c5KJJEiabWbXtomulo=)
                          3: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: xTllv0TZOEMAn/qQnLiwyozD3bbL+lexznwQYHXLWKU=)
                          4: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: 5BzxW+L4vSDnf3Mt8f4xne60eMyftYTFgf6t3n4xIJQ=)
                          5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: HaArSzXQPWVclTurOjmYRFehXALwDSZqwgKX4Y1qn/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7562 (0x1d8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
        Validity
            Not Before: May 20 16:07:21 2026 GMT
            Not After : May 27 16:07:21 2026 GMT
        Subject: CN=6a0ddc39-4186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:dd:2d:62:6b:97:73:a6:1f:70:d5:67:a2:
                    31:9a:ba:11:9a:01:ca:ee:c8:ee:d6:b5:fc:d6:c0:
                    53:a5:3e:2b:ec:ef:09:c4:b5:35:7b:05:32:05:59:
                    5d:5d:9e:d3:21:97:51:52:85:4c:a7:d7:bb:16:57:
                    12:f0:07:83:21:27:81:7a:d0:a8:f0:37:6e:b4:e9:
                    99:9b:11:83:79:bd:31:6c:3c:cf:55:5b:9a:8a:be:
                    4a:f6:2b:92:e5:3f:64:f2:b6:46:51:30:0e:9f:7d:
                    c6:05:da:39:45:8d:e3:3e:88:d5:f9:d6:54:37:4b:
                    c7:27:9c:77:0f:da:40:03:4f:c7:b5:fb:e3:0c:94:
                    35:1a:f8:98:23:78:e8:06:11:93:d1:15:8b:bc:50:
                    76:06:e7:ed:64:d4:f2:1c:5d:73:19:3b:41:74:be:
                    26:31:e1:5d:6b:63:4e:0a:46:68:f0:81:cc:8f:26:
                    41:ec:cb:54:8c:ca:7f:99:b7:2a:08:68:28:e1:d4:
                    53:9b:18:1d:6f:1c:1c:95:22:45:25:98:86:11:29:
                    3e:aa:aa:3b:fc:4c:fb:a4:38:bd:7c:64:d8:76:85:
                    19:71:1c:cc:60:57:8b:75:47:be:96:83:b7:bc:ac:
                    1f:5b:7e:a8:9d:bd:ed:2a:9e:d0:ef:03:d5:01:49:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:11:82:FD:0D:14:DA:4C:F2:40:52:58:9D:56:63:5F:73:6A:98
            X509v3 Authority Key Identifier:
                keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b6:88:1c:73:63:90:1b:9c:86:cf:05:95:90:37:2b:02:c7:
         47:c8:f0:79:d1:4e:88:98:76:db:19:30:3f:b8:19:b8:5a:f1:
         03:83:66:b0:e2:99:a6:a6:dd:ed:a3:f4:2c:18:cd:2a:1a:07:
         01:3a:dd:30:66:d6:a3:f0:67:e4:6c:31:79:b9:5d:a6:67:49:
         44:bd:86:72:96:d0:17:49:c3:d1:67:8a:3c:de:b8:db:ab:f3:
         e0:9a:0e:1e:be:21:05:c9:40:46:e8:54:63:b9:04:fe:c4:da:
         6d:2f:24:e2:59:05:d6:b8:ba:00:68:ae:af:52:fb:20:f8:27:
         d9:b2:75:1a:7e:b0:24:f6:e1:89:da:71:b1:57:a2:e1:4e:e1:
         11:1c:68:3d:56:f4:c4:4a:42:3b:78:f9:b8:b7:60:39:c0:2f:
         85:6d:e6:ab:1e:6f:12:5c:38:4b:b0:f2:b8:97:6c:29:49:ba:
         03:69:64:25:e6:11:71:be:7a:bb:fe:66:ff:95:df:5a:ea:b5:
         48:fc:5e:07:7f:4f:e0:5d:53:ae:6e:e2:39:cf:41:0b:fd:ed:
         42:30:0f:75:1c:c9:2b:f3:1d:cf:17:6b:a0:ae:e0:97:d1:54:
         68:19:8c:9c:f2:73:fb:f3:36:4b:9c:7e:68:de:e7:80:c9:56:
         5b:39:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:02 2026 by rpki-client