Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
File:                     JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json)
Hash identifier:          2y3XdxZTR3HA8mNPMfwCFRYeacjrbXl78u01sfF0uXA=
Subject key identifier:   C1:27:2F:F9:3D:45:5E:4E:DD:DB:58:16:01:1C:03:87:58:30:C6:6F
Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A
Certificate issuer:       /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
Manifest number:          FA
Signing time:             Wed 19 Aug 2026 06:56:54 +0000
Manifest this update:     Wed 19 Aug 2026 06:56:53 +0000
Manifest next update:     Wed 26 Aug 2026 06:56:53 +0000
Files and hashes:         1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: J5bw2lVr86bQ6C5AMgD8h65lkeHWe/kMCB5aB+rn14Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl
                          rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A
        Validity
            Not Before: Aug 19 06:56:53 2026 GMT
            Not After : Aug 26 06:56:53 2026 GMT
        Subject: CN=6a8553b5-78dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:7f:03:da:da:45:2a:df:60:dd:5a:e6:b4:
                    43:e1:19:47:10:66:16:67:43:f1:cf:0d:b8:f4:2f:
                    be:fc:0c:f6:72:b4:67:a3:57:6b:a8:65:7d:ad:78:
                    1c:f5:cc:31:3b:64:28:f6:28:43:d1:67:db:eb:4d:
                    6b:3e:8f:23:2f:e3:f3:8f:b9:58:f6:21:02:5a:16:
                    fc:47:95:da:ee:9c:b7:6c:be:f6:37:59:a5:36:e1:
                    5f:8e:fd:ac:3b:fc:b8:64:85:42:27:ff:32:00:d5:
                    77:60:4e:c3:46:cd:27:ae:04:ae:a2:7e:53:a0:84:
                    2b:ba:ce:4c:ec:ac:44:73:5e:16:4a:fa:60:92:b7:
                    60:03:be:d5:e0:31:8b:f3:f3:ec:2d:c2:d7:12:00:
                    ed:e6:8a:d9:c6:c4:c0:62:aa:94:a2:4e:75:4a:1d:
                    10:16:06:d4:33:32:59:2f:3b:05:c8:2d:cf:80:06:
                    d1:50:8c:68:16:b5:8e:4f:54:45:12:d7:98:98:a1:
                    43:af:0a:a6:e8:1f:9b:56:f7:16:5a:52:7f:a3:ac:
                    80:b4:e5:ba:69:c9:5c:80:2b:86:d7:d7:24:61:85:
                    6a:85:02:d9:a1:86:c8:cc:de:38:52:bf:b4:96:9f:
                    56:87:01:00:31:03:78:2e:66:20:8d:e8:1c:95:2d:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:2F:F9:3D:45:5E:4E:DD:DB:58:16:01:1C:03:87:58:30:C6:6F
            X509v3 Authority Key Identifier:
                keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:96:b7:b3:56:01:bc:b9:e0:41:31:f9:70:e8:27:8d:8c:
         45:e8:08:3e:72:48:b9:49:ae:dd:a5:42:d9:35:9c:d6:c2:eb:
         6f:32:9f:f1:64:55:77:3b:78:fe:84:f4:f7:35:4b:8b:2f:af:
         2b:0c:76:50:af:5c:70:91:4b:34:4b:c3:9b:81:b7:0d:da:be:
         ae:90:11:bd:4d:73:42:5f:4c:30:db:9a:99:66:74:81:5e:76:
         8a:e5:4e:fa:de:af:7c:af:7f:65:30:c9:2f:0d:f8:5b:76:c1:
         82:ed:a4:86:13:24:17:6b:42:7e:17:30:3f:ea:30:28:bb:a1:
         de:5d:8a:47:a3:65:bf:32:35:d8:7f:3a:c5:89:34:7d:97:f0:
         7c:6d:5e:bc:5e:9e:e3:80:85:73:5b:86:d6:77:dc:c4:37:5e:
         8a:40:32:58:c8:13:b2:af:b8:ad:3d:cc:65:37:e1:aa:9d:88:
         1f:60:cf:f5:ec:51:f0:e7:71:19:dd:2f:03:cc:b8:35:ff:65:
         80:f5:60:71:ad:58:cd:c7:0c:de:9b:66:33:23:f0:74:95:e7:
         14:4f:e9:11:17:62:98:72:48:95:c9:71:3d:59:1e:96:d6:6e:
         f1:4f:4f:a9:3e:ec:c2:53:54:76:fe:07:bd:8f:f5:bb:e5:ed:
         2e:5c:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:33:12 2026 by rpki-client