Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File:                     jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier:          XaST7sQa7ujCo5k1aT47gqPc9ngpf0D71NFB77y/MQo=
Subject key identifier:   B4:BC:E2:06:A1:15:DE:8E:8B:FA:06:E4:06:36:E7:F1:84:0C:79:7E
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer:       /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial:       0AFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number:          0AEF
Signing time:             Thu 04 Jun 2026 19:25:10 +0000
Manifest this update:     Thu 04 Jun 2026 19:25:10 +0000
Manifest next update:     Thu 11 Jun 2026 19:25:10 +0000
Files and hashes:         1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: loc+DhFSTdDBux4NXzu+sKrgwA4Fgm+RJIM2iYC/7Y8=)
                          2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: /3arRZXVLdrfm4u9cutgJAx+ZHiHzLIvVvAU7Zs/f38=)
                          3: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2813 (0xafd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
        Validity
            Not Before: Jun  4 19:25:10 2026 GMT
            Not After : Jun 11 19:25:10 2026 GMT
        Subject: CN=6a21d116-f224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:2b:db:dd:84:9f:fc:cc:7b:61:d7:d6:3e:
                    7b:c9:d1:4c:36:29:5b:6a:9f:b1:d5:e2:99:ac:4e:
                    9f:dd:9b:d7:d7:47:8b:5d:84:6d:1c:c4:0a:39:65:
                    0c:8b:56:d0:8c:5f:b3:6d:7b:72:d1:e5:1e:b4:d3:
                    6e:d4:ca:74:77:eb:3d:c8:18:b4:56:33:80:ca:20:
                    34:80:ab:04:89:42:93:38:4c:e5:74:e2:f5:9d:2a:
                    a9:a5:96:4c:b5:be:19:0d:11:c6:b7:4c:1f:ab:5f:
                    15:01:01:2d:14:95:f6:e0:ad:5e:2e:87:a0:93:ef:
                    f5:81:7e:31:26:ee:9f:14:90:f4:da:df:39:09:4a:
                    12:2c:28:86:79:e4:21:dc:8b:50:2c:80:9d:17:8c:
                    d6:cb:53:39:7a:7f:6e:07:a6:d2:b4:2d:04:26:03:
                    8e:54:83:83:07:81:a8:24:fa:ce:c3:88:d6:e2:bc:
                    8b:57:29:5a:cf:d6:cb:3b:33:ce:ba:6f:dc:22:8c:
                    15:e9:42:db:97:68:17:f4:d9:1d:53:c0:b5:be:12:
                    fc:5d:b1:a7:7c:5b:fc:91:4f:ce:b1:55:86:f4:37:
                    38:66:8e:bb:32:a6:62:a6:68:b0:b0:48:35:75:a6:
                    0f:d6:94:d6:07:40:b2:6d:f2:ac:d8:1d:72:fd:1a:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BC:E2:06:A1:15:DE:8E:8B:FA:06:E4:06:36:E7:F1:84:0C:79:7E
            X509v3 Authority Key Identifier:
                keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:fa:0e:c6:b6:0f:55:5a:cc:b0:ec:0e:6d:0d:03:96:79:
         85:a5:29:4c:1a:c9:c4:c7:97:b6:28:5a:52:b6:ed:60:58:23:
         0e:7a:7f:90:4e:f1:10:fc:07:a6:24:25:11:d8:50:1f:be:a2:
         76:bc:61:dd:ef:fb:c5:47:28:1e:59:a4:c6:10:85:b9:4c:40:
         c2:49:e0:97:7d:38:e3:ca:10:26:b3:d8:12:14:42:24:ed:31:
         3d:b6:c4:c1:e3:50:be:1e:77:87:db:60:c4:89:03:0d:4b:9d:
         0c:b6:5f:3d:35:53:83:dd:a1:4b:70:4b:6c:66:1c:a7:c8:18:
         1c:59:1e:81:40:97:dd:93:8c:d2:04:11:80:ab:45:2b:9e:10:
         99:87:54:ca:81:51:c5:c3:88:7f:45:4c:78:72:8f:59:9d:d8:
         71:0c:9c:40:83:67:41:d8:b9:01:02:de:b7:b8:40:82:5d:8f:
         65:e3:89:3a:50:35:70:94:45:2b:50:aa:1b:42:38:cf:17:4d:
         5a:b5:6b:c6:5c:74:cf:34:fc:94:27:c8:15:f4:7e:df:8d:1f:
         d1:47:cb:c4:d6:37:dc:e9:ee:27:83:61:d4:b0:48:a2:27:bd:
         0c:dd:15:03:f0:d8:6c:6c:e5:be:d0:a9:ab:60:fe:2c:8f:9f:
         73:11:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:29:34 2026 by rpki-client