Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
File:                     CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json)
Hash identifier:          hRKVXuwPt7RAhGdfHxFHW/3XfrRtCIDKirf/d3jNzTc=
Subject key identifier:   50:0C:29:8C:C8:FD:EE:69:7A:BA:61:5E:49:32:E7:40:45:23:69:BF
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0B38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
Manifest number:          0B0C
Signing time:             Sun 26 Jul 2026 19:49:24 +0000
Manifest this update:     Sun 26 Jul 2026 19:49:24 +0000
Manifest next update:     Sun 02 Aug 2026 19:49:24 +0000
Files and hashes:         1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: FluDG+irrc5wJijw1aPDTR5e2JynWwWIdYOePqckNqo=)
                          2: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: SETDgSSjufmhfsxB9BdsWp+M1dD0A3n7br+cido47bY=)
                          3: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: y0XDl+o2I2x4dYgUjwQy+20VZVGgOcUuaeOK8CyrDMY=)
                          4: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: zpF/iroph1goI9vLyet3Iu/iExhp9GIw9FnnLOzuZ1s=)
                          5: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: Ct86T16HFRZmaEpY/N6uhciriyN1LPVcCReU3E2/ThE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2872 (0xb38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Jul 26 19:49:24 2026 GMT
            Not After : Aug  2 19:49:24 2026 GMT
        Subject: CN=6a6664c4-9d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:c5:d5:26:84:31:ba:9f:ae:ef:61:bf:ae:
                    2b:26:17:61:8c:c6:96:a0:61:9a:6b:39:a5:11:38:
                    ce:c6:6b:f1:51:34:54:12:ff:76:7b:f6:2e:f2:e1:
                    54:78:aa:98:12:ae:3a:15:9d:48:ef:f2:15:65:37:
                    a5:6a:38:65:e1:b3:79:d4:7d:56:a0:44:3b:35:0b:
                    bd:8e:29:27:45:21:06:17:18:91:96:4d:ec:ea:b4:
                    b3:fc:92:cb:5c:04:19:a9:15:2c:3f:e5:fb:5f:6a:
                    58:35:48:94:a7:61:34:80:3b:10:e4:1c:32:13:99:
                    1e:93:be:f3:61:ff:92:70:c5:0d:cd:9e:d5:9b:39:
                    8b:f3:4f:a3:69:32:26:ac:81:95:be:af:a0:64:5b:
                    39:18:44:1c:08:bd:98:b1:a1:ee:70:45:15:b4:73:
                    08:98:4b:d1:72:95:2f:fa:7f:29:18:5f:50:15:56:
                    f8:de:33:45:4d:fb:ae:94:b0:6a:e7:7e:c9:bd:f1:
                    55:e3:b7:a2:1a:3e:06:9d:18:82:00:56:fd:e4:c9:
                    e1:63:c9:1f:2d:dd:a6:2d:ed:ec:a2:3d:ae:cc:6d:
                    5d:bd:4d:09:f2:58:fc:0e:90:bf:4a:5e:a0:74:3e:
                    8f:24:5e:ef:bc:09:56:8c:7b:37:87:1c:26:f7:1c:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0C:29:8C:C8:FD:EE:69:7A:BA:61:5E:49:32:E7:40:45:23:69:BF
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:6d:23:48:0e:d7:b7:af:19:28:0b:3c:fc:22:7e:51:ed:eb:
         a1:98:fb:c1:8f:e8:16:76:c4:60:16:1b:76:45:42:68:a7:f0:
         a7:6e:98:38:bf:e8:5e:4d:50:e4:2d:5b:69:c4:c3:25:38:2f:
         cf:20:b4:b7:6b:6c:a5:bb:bd:73:78:15:31:9d:e3:98:0b:cc:
         3f:d6:7b:9a:7a:8a:70:74:c5:19:be:63:d0:9f:2d:30:8e:cc:
         b3:fd:fb:a6:12:10:db:4d:12:4f:2d:8a:d0:32:53:7f:08:91:
         eb:97:41:09:86:35:81:85:69:fb:50:b8:f6:1a:94:c4:8a:26:
         38:35:06:d1:34:e1:83:90:01:f5:a1:08:8f:90:5b:5c:61:66:
         4d:eb:84:de:70:cd:68:19:b4:5a:dd:16:8b:75:1c:68:c6:60:
         3d:94:d4:87:38:2c:51:3c:03:a1:fd:43:77:c5:db:ff:12:8a:
         77:3d:8c:4c:e0:e3:93:f3:49:2a:0e:57:47:11:c5:4c:e2:5c:
         41:1e:26:c9:e5:c7:22:e2:20:c5:fe:e9:43:88:d9:bf:53:fa:
         5c:12:c0:72:c7:25:29:91:86:74:73:61:c7:4b:84:0f:a1:01:
         8f:ad:55:03:47:da:ef:a5:bf:61:74:68:27:33:63:c2:e3:3c:
         b1:cd:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:14:45 2026 by rpki-client