Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft
File:                     jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json)
Hash identifier:          DlAeJvviSmk9t2CLLnTi4Ah0wg9fYvWHMgbCix719+Y=
Subject key identifier:   1A:8B:33:BB:E8:F7:39:B0:C0:97:57:68:6F:CE:0E:89:54:88:30:AB
Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0
Certificate issuer:       /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft
Manifest number:          4B
Signing time:             Fri 17 Jul 2026 09:42:17 +0000
Manifest this update:     Fri 17 Jul 2026 09:42:16 +0000
Manifest next update:     Fri 24 Jul 2026 09:42:16 +0000
Files and hashes:         1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: HRy7SEaAWSoVPSfEE4XWb7yYxDtG+OVjP6GGyW86cAM=)
                          2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl
                          rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0
        Validity
            Not Before: Jul 17 09:42:16 2026 GMT
            Not After : Jul 24 09:42:16 2026 GMT
        Subject: CN=6a59f8f9-7d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:9d:58:44:68:25:8f:31:84:96:be:14:e2:
                    a2:64:71:63:79:8c:72:88:52:7f:0d:7f:48:b9:02:
                    2a:e4:d7:c9:43:33:15:80:2e:a5:d2:24:72:8b:5a:
                    85:ec:d5:45:c9:78:6b:d9:da:fe:05:99:b7:58:b8:
                    a2:c7:00:62:fe:31:7e:51:27:e1:e8:87:bf:00:77:
                    08:92:03:59:9b:88:40:e1:09:de:9f:1b:9e:d8:14:
                    c4:43:a5:0f:45:00:88:c8:fe:5a:83:a8:24:37:eb:
                    94:a8:35:b1:be:cf:41:30:38:d4:8e:da:1b:8e:6b:
                    c2:c8:42:a7:7d:79:e3:c9:93:8e:0d:ec:1f:8c:79:
                    eb:83:56:82:d0:fb:83:b9:49:59:64:73:6d:98:56:
                    d0:40:9b:96:99:1b:c7:5f:22:45:bf:5e:72:64:75:
                    ec:50:5a:a9:0d:20:ef:3a:ad:23:77:f8:bc:1f:ed:
                    f1:c4:c5:37:a8:9e:3e:df:da:5b:0a:dc:34:96:c2:
                    0f:6f:39:5a:71:31:51:61:d2:9a:25:76:44:06:3c:
                    5a:3a:62:69:ae:49:e9:18:2c:18:fb:9d:e8:63:b2:
                    03:c4:4b:eb:02:8b:ae:df:db:17:a1:c6:bf:4e:59:
                    be:14:80:cc:15:fe:7c:e6:4a:d2:c5:48:77:3c:26:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8B:33:BB:E8:F7:39:B0:C0:97:57:68:6F:CE:0E:89:54:88:30:AB
            X509v3 Authority Key Identifier:
                keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7f:d2:8f:5b:f5:7c:0b:c0:f3:91:40:40:2a:2b:8c:a8:d6:
         23:c0:86:a1:33:d5:b4:54:ed:16:65:c9:c1:d2:b4:a5:72:9c:
         27:39:56:98:3b:6c:1e:a0:9e:df:84:4a:7e:ae:15:ab:1b:86:
         ac:f8:ca:38:2d:02:d2:d5:b3:8c:a6:b7:ca:15:3c:90:b8:86:
         4c:2d:64:6c:f7:a4:82:48:36:61:30:1c:88:7c:a0:06:dd:1d:
         13:dd:5c:d7:96:de:0e:87:98:fb:59:f9:91:74:05:a1:3e:e2:
         20:81:da:ba:66:82:7a:d7:77:4a:cb:da:e5:0e:72:6a:1b:c7:
         e4:c9:ec:47:e8:97:60:df:b6:b5:00:f0:3c:a9:91:ab:d6:70:
         2c:74:e9:66:ba:26:74:5c:18:25:0a:80:d2:7d:25:1a:79:12:
         22:06:9d:0d:b9:ea:db:f6:91:07:97:98:e9:db:b2:18:a2:4a:
         87:58:a7:c3:6c:1f:a5:cd:5a:8f:57:e0:a4:9f:fd:5d:15:40:
         64:1f:5c:be:48:92:d6:3e:e9:f0:a5:b9:5f:f8:68:c4:d8:ef:
         a6:8c:f7:21:f7:e8:45:44:a3:72:fa:11:bc:f4:55:9d:28:51:
         e5:d8:53:d0:25:87:a7:58:e6:b8:a6:58:09:65:55:ad:de:0f:
         0d:9e:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:08:49 2026 by rpki-client