Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File:                     jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier:          5Q4lkZYW9B8OJE6Hul/YBdEfIJLLz4Mnu6gv+5eMWTE=
Subject key identifier:   12:14:8B:C0:12:F7:CE:8E:FA:1D:20:C9:D0:BA:7C:F4:06:D7:B1:3E
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer:       /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number:          77
Signing time:             Mon 01 Jun 2026 08:43:17 +0000
Manifest this update:     Mon 01 Jun 2026 08:43:17 +0000
Manifest next update:     Mon 08 Jun 2026 08:43:17 +0000
Files and hashes:         1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: zmrH9K22awWbaiiZ7QXfJdkejkZ79OCeJR0GxssIpbg=)
                          2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: nCUAwcVtKiknK/x07jx8AEGgjWAlFPwBHEfe76OnWT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
                          rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
        Validity
            Not Before: Jun  1 08:43:17 2026 GMT
            Not After : Jun  8 08:43:17 2026 GMT
        Subject: CN=6a1d4625-76cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:ff:15:da:0f:52:4b:24:fe:af:f9:51:34:
                    e8:f9:d3:5d:a0:ff:3d:da:b3:71:b2:46:eb:16:b1:
                    c2:4a:65:10:8a:21:dc:e8:be:0e:90:ef:c4:ec:39:
                    aa:65:0c:dc:50:59:5f:60:c6:c3:8a:df:d2:f9:22:
                    f5:2f:a8:01:e3:08:fd:d7:06:e4:eb:c7:e1:e1:e3:
                    5d:7d:7d:68:15:45:96:80:2c:58:a7:5d:6b:7a:24:
                    48:ae:84:14:16:38:66:e7:fd:52:10:31:4d:79:0f:
                    0f:79:09:58:cc:07:04:4b:98:96:c3:8f:c0:3b:67:
                    12:00:39:ab:0b:d6:65:48:6f:9a:a4:d5:8e:cd:88:
                    52:d5:da:fe:84:23:bd:b5:0a:f2:dd:4d:1a:f3:42:
                    76:07:f5:62:02:27:bf:be:05:0b:3a:6d:b0:88:9a:
                    31:e9:25:0d:8d:14:f4:e0:96:f0:96:e1:ba:c5:66:
                    2f:7d:f0:52:b7:57:3c:f5:ad:71:3a:73:ee:ab:ff:
                    40:c7:e0:9e:c5:69:c5:91:4a:7e:84:15:58:d6:19:
                    21:bb:3f:7f:3e:85:fb:fe:a9:f4:05:23:65:05:85:
                    f6:5c:28:35:49:cc:99:e9:1b:2b:95:fa:2d:6f:4e:
                    03:1a:c4:e0:e5:78:a5:f6:3e:0c:9b:e8:cd:72:84:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:14:8B:C0:12:F7:CE:8E:FA:1D:20:C9:D0:BA:7C:F4:06:D7:B1:3E
            X509v3 Authority Key Identifier:
                keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0c:d5:37:8f:70:9e:2b:09:8f:39:40:9b:ac:2d:79:3c:9e:
         16:67:36:5a:8f:97:fe:68:f1:e6:50:68:5a:82:ef:3f:46:b0:
         ea:e1:52:67:8d:ec:3b:69:73:2a:f5:e0:21:5a:fe:7f:59:33:
         38:5d:81:55:5f:37:62:1c:a1:3d:cf:14:29:5e:23:2b:fe:4b:
         e4:58:cb:b4:0a:5f:c6:7f:21:9f:52:f1:5a:b8:b3:e6:bb:c0:
         85:33:59:5e:bc:51:cf:8e:39:72:5a:42:1a:a9:88:24:b8:99:
         b9:c6:ec:6b:fa:89:5e:24:cf:f0:02:a3:9b:68:0f:e9:2a:ce:
         f8:60:3b:e7:ea:e8:de:23:cd:88:41:0a:24:bc:d6:8f:2f:57:
         d4:7d:91:d3:d4:59:34:3d:d5:ca:a6:ed:a8:d6:8d:59:83:1d:
         6d:82:14:b5:e9:b8:58:45:9f:61:14:ee:96:05:c0:4c:30:12:
         94:2d:ab:1a:9a:9a:24:c3:6b:9b:b0:1a:0b:6f:39:99:54:86:
         56:9a:73:e1:bc:27:07:91:0e:1d:03:7f:e0:c6:cf:d3:6d:75:
         b1:e7:d4:90:a7:e7:6d:61:10:ea:c9:dc:14:dc:0e:bd:7e:8f:
         1a:45:5b:d9:b0:eb:a6:a3:87:c7:0e:e5:11:e1:21:8e:89:26:
         f8:d0:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:41 2026 by rpki-client