Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
File:                     CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json)
Hash identifier:          LNFUhuClZCxZWBfBgi/RTOcb3m+1SPqQUJkTJGftHjA=
Subject key identifier:   47:9E:AC:0F:91:90:2B:B9:87:51:9D:B6:EB:38:71:62:BA:36:EF:C6
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0B1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
Manifest number:          0AF4
Signing time:             Fri 12 Jun 2026 19:26:31 +0000
Manifest this update:     Fri 12 Jun 2026 19:26:30 +0000
Manifest next update:     Fri 19 Jun 2026 19:26:30 +0000
Files and hashes:         1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: vHfL96UU4DuwXJFYVySrC35xhlFG0QEq3u2UNuWMACk=)
                          2: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: AzvWvbrPiuhKiBHdJfjBxy5Ra/OUuOns6Vjq7S/FHI8=)
                          3: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: bueneiv4zkp1hJi+0Ko6hSLY2lsE8PKm4m/3t84VQKA=)
                          4: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: Y5wKsH1cPWNKRGL2sR47JtUL6S3wrlsTRofvAYJPq3Y=)
                          5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: vfLHTt29kOm1Z7Kfy6jmmNrQQkJF27JhRO5eWjZJVw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Jun 12 19:26:30 2026 GMT
            Not After : Jun 19 19:26:30 2026 GMT
        Subject: CN=6a2c5d67-8450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b5:36:a9:04:62:70:85:37:61:77:46:91:36:
                    59:f5:27:a9:47:52:66:64:d8:b1:23:55:98:de:9c:
                    66:9d:4f:c3:f6:0a:c6:74:5c:d1:e1:f2:eb:5a:2f:
                    2e:71:26:a5:28:b2:73:16:10:8e:77:85:fc:7f:4f:
                    fb:59:91:8e:43:33:c6:a6:f7:f7:58:0f:60:70:95:
                    a1:e3:85:3f:dd:da:e0:d3:4e:60:08:8c:00:8b:82:
                    68:03:eb:42:3b:da:cd:0d:15:f3:ac:68:a5:79:71:
                    08:1c:3d:46:66:91:ac:4d:29:69:56:10:9a:89:b6:
                    6b:3f:3f:7d:ef:27:f3:7a:12:51:4c:24:8e:d4:9e:
                    34:02:98:d4:69:a8:26:57:07:0d:a6:96:be:12:95:
                    1a:10:83:18:c6:59:67:c9:f7:2a:26:e8:6f:ae:08:
                    67:a5:b7:45:68:d4:5e:eb:1a:ed:48:0c:12:c5:73:
                    e6:9d:00:a5:81:e9:82:0f:25:0f:c7:6a:77:00:a6:
                    1d:d5:2c:f9:25:84:36:19:be:4e:7d:e3:1c:df:dd:
                    a5:19:e8:27:f3:40:31:89:a2:7f:e2:0b:d1:72:e5:
                    22:26:12:b6:e0:1a:b4:d7:14:7e:a3:7e:77:5b:20:
                    4a:65:57:58:ad:b6:ad:5e:c4:34:2f:b5:fe:15:cc:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:AC:0F:91:90:2B:B9:87:51:9D:B6:EB:38:71:62:BA:36:EF:C6
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:31:27:b2:15:44:a6:11:65:6a:ac:41:de:39:57:61:ac:cc:
         4b:5a:b2:81:e2:82:ce:3e:f3:31:7b:5a:5b:86:ea:e0:a6:60:
         ae:c5:23:92:5b:32:7e:13:16:fc:2c:b8:0d:9b:74:38:f6:7c:
         e2:bb:8e:c5:62:a0:b9:4b:4d:bf:49:a1:f5:56:5d:7a:66:dc:
         dd:eb:16:3d:e5:0f:b6:e5:07:d8:b1:eb:e3:8a:d7:e1:e7:d7:
         54:12:89:03:89:dd:76:a0:7f:05:e7:ed:b4:0b:99:54:04:b9:
         7e:07:4e:c6:bd:14:63:be:0c:e8:c3:0b:05:0e:d6:6e:84:7d:
         5f:90:07:79:3c:2b:b4:0a:e5:0c:a0:c9:02:e1:dd:f2:26:38:
         11:69:87:ff:92:30:9c:cb:fa:62:39:d0:82:c1:b0:cc:18:51:
         8c:ac:a3:b0:7f:39:51:18:64:f2:b2:55:26:ed:8f:ef:34:8f:
         13:0d:3e:ba:71:7b:c0:6f:04:00:d7:56:a5:ec:83:e8:07:81:
         78:27:61:fc:25:de:8c:22:34:02:7e:89:cb:bb:57:1c:b2:71:
         00:d5:4f:81:41:bc:80:2a:16:e9:77:63:cf:20:c5:de:3c:82:
         ad:94:81:cb:34:d8:34:11:cb:6e:1f:f8:15:2d:04:82:f9:6f:
         e0:a4:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:32:45 2026 by rpki-client