Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
File:                     JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json)
Hash identifier:          oN4UQzxd1qoQCYns+OwuHrK7oH9X+oTnoFYbKzQMAoM=
Subject key identifier:   6B:32:5F:40:ED:F6:3E:AA:E9:C3:01:26:E8:AE:4A:8C:BC:75:9E:BC
Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
Certificate issuer:       /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Certificate serial:       13B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
Manifest number:          13A7
Signing time:             Tue 18 Aug 2026 17:07:31 +0000
Manifest this update:     Tue 18 Aug 2026 17:07:31 +0000
Manifest next update:     Tue 25 Aug 2026 17:07:31 +0000
Files and hashes:         1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: +cU/qnbMGYjgAD9k5VCb1lKRTtgtOF/+uYPGX4a0yWQ=)
                          2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: JG3g9iT9w5QR/B1gPw603a4JI5sRtUQE35PEFNou9hM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5048 (0x13b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
        Validity
            Not Before: Aug 18 17:07:31 2026 GMT
            Not After : Aug 25 17:07:31 2026 GMT
        Subject: CN=6a849153-5c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:2d:a7:91:de:56:ae:3c:02:a6:8e:56:e1:
                    9a:71:d2:45:da:83:ec:fd:07:29:08:1a:41:60:e6:
                    b9:4c:72:1b:c6:88:3f:10:14:7b:dc:ff:9a:d1:24:
                    a0:19:ba:c8:c8:95:f0:b6:d8:b2:ed:1f:37:5a:27:
                    e9:af:a0:96:25:5c:28:e7:5b:4c:e5:b0:c4:8d:69:
                    a8:68:d8:ff:ec:21:15:af:b9:fb:50:8d:78:58:7b:
                    da:67:4e:3c:aa:3e:5e:f9:9e:6c:ba:53:5b:23:4c:
                    6e:19:9e:0c:e8:c8:e5:e0:2b:bc:5c:ae:30:d8:5a:
                    e2:05:7d:c6:c3:e9:74:23:d5:e8:91:ff:bb:e2:f9:
                    b8:7c:30:66:94:92:6a:2c:3b:30:0a:82:83:b1:d1:
                    5d:2a:08:a6:e1:75:73:23:a3:ea:ba:6e:17:41:75:
                    8c:73:b0:a2:fb:e1:cc:28:50:65:c3:6e:89:0f:5c:
                    04:16:c7:9a:1f:35:36:94:e5:7a:04:74:01:0e:dd:
                    a3:9e:0a:9f:a6:45:d1:3f:be:1d:d8:dd:8a:b4:48:
                    17:6a:0b:f5:a4:a0:77:d0:d4:8a:22:89:84:0e:cf:
                    8b:bf:a4:87:40:c2:16:13:ff:1d:76:cc:41:a9:aa:
                    44:bc:7a:c2:eb:fa:ea:0d:ab:1e:a4:ea:a6:5b:71:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:32:5F:40:ED:F6:3E:AA:E9:C3:01:26:E8:AE:4A:8C:BC:75:9E:BC
            X509v3 Authority Key Identifier:
                keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:40:db:a4:76:99:58:21:c6:a7:86:69:46:bc:71:e5:c3:49:
         71:53:57:22:ee:f0:33:e6:45:24:63:7a:a1:ae:b5:9c:a6:0e:
         a7:42:fb:46:c7:78:d4:44:2d:bc:2f:a4:35:14:0b:fc:b1:6f:
         4e:af:94:5e:cd:d2:35:c0:a4:60:2a:49:92:5f:9e:87:64:5d:
         dc:f0:09:cc:e9:40:73:63:f4:54:9e:bb:11:b9:1a:06:15:6d:
         9a:fa:f9:53:b2:cd:66:34:f0:22:5c:a4:b8:b5:c6:ae:19:91:
         54:a4:23:9c:db:3d:29:90:89:88:27:57:ab:ca:cf:f9:63:c6:
         68:5b:ec:82:3e:b1:af:bd:6c:cf:64:b3:a5:6b:eb:fd:1e:da:
         3c:03:b8:b4:d5:70:70:5f:3f:1e:d1:d0:d7:3c:2e:93:9d:61:
         91:74:69:94:87:c2:2b:5b:2a:c8:27:17:e0:84:fe:83:08:79:
         aa:57:5f:22:32:26:3b:4a:bb:cd:7f:3c:b0:45:a1:11:44:5f:
         9e:db:51:7b:ef:6e:61:09:ce:d8:97:8a:6a:00:7b:49:a8:b4:
         66:2b:c5:f2:97:7e:b7:76:0a:9d:11:27:e8:34:b2:11:d0:1b:
         73:6b:d0:59:f1:09:a9:0f:e1:28:33:e3:12:10:58:35:b1:20:
         19:5d:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:05 2026 by rpki-client