Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft
File:                     j-7SDCRC6A2K21UYUyH566ymNRk.mft (raw, json)
Hash identifier:          pIHLoRepWaUGsPVx44ujmsTh4+l2JKjhg+Bc8SogG9Q=
Subject key identifier:   FD:90:5B:C6:AD:D2:50:1B:55:84:C6:37:32:BF:12:7F:83:72:B9:7B
Authority key identifier: 8F:EE:D2:0C:24:42:E8:0D:8A:DB:55:18:53:21:F9:EB:AC:A6:35:19
Certificate issuer:       /CN=A91C987A/serialNumber=8FEED20C2442E80D8ADB55185321F9EBACA63519
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft
Manifest number:          14
Signing time:             Wed 19 Aug 2026 09:51:23 +0000
Manifest this update:     Wed 19 Aug 2026 09:51:22 +0000
Manifest next update:     Wed 26 Aug 2026 09:51:22 +0000
Files and hashes:         1: j-7SDCRC6A2K21UYUyH566ymNRk.crl (hash: X+dbx7PimY9KdOkURTvKjBfLknUJHhFdIZJkhIITJJ4=)
                          2: BE253534915611F18490ADCA6911F970.roa (hash: caiLmjkO5oWnKKV5DBoQbkeqp1PZP9RJyWHBUbg7Qdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.crl
                          rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C987A, serialNumber=8FEED20C2442E80D8ADB55185321F9EBACA63519
        Validity
            Not Before: Aug 19 09:51:22 2026 GMT
            Not After : Aug 26 09:51:22 2026 GMT
        Subject: CN=6a857c9b-f4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:f9:8f:49:b9:53:06:09:2d:9f:e9:77:06:
                    d6:14:2f:6d:eb:51:3f:bc:c6:e2:7b:d1:eb:4c:38:
                    5f:5f:95:f2:e4:a2:ab:6d:4c:68:e1:0b:62:02:47:
                    e2:4d:7f:69:bd:ea:d9:7c:6e:bf:af:26:0f:bb:95:
                    ea:b1:f8:a0:71:bf:cd:69:54:be:1e:f0:1e:28:fe:
                    38:0a:82:8b:10:f5:9b:4f:f6:a4:10:7c:22:e5:64:
                    c8:7e:f4:59:cc:87:da:8c:6e:a1:3b:5a:eb:ab:56:
                    c6:bc:8b:5a:61:b0:9a:b2:6f:c2:b1:3f:57:e9:8a:
                    4b:7c:b4:3d:6a:06:69:88:3f:84:3d:b8:6d:fa:1a:
                    3a:75:c7:cd:f7:9b:81:74:21:4b:87:75:a2:3a:e8:
                    98:98:6b:dd:f1:88:c2:7a:2f:2b:e7:dd:a1:90:76:
                    75:b8:36:69:81:6d:25:ed:78:de:c7:d9:76:94:6d:
                    11:a4:6e:14:9e:5d:2c:3f:48:fa:2d:03:3b:b8:14:
                    50:06:b2:38:54:05:79:0d:1b:5e:af:d8:de:30:27:
                    0e:84:aa:fe:47:a8:84:c8:4f:2e:6e:13:f2:bd:77:
                    b9:37:63:7f:e8:48:38:f5:74:3f:ce:6e:f7:e1:18:
                    3e:39:68:8f:d5:50:c2:6a:a6:62:4d:5f:f2:49:bd:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:90:5B:C6:AD:D2:50:1B:55:84:C6:37:32:BF:12:7F:83:72:B9:7B
            X509v3 Authority Key Identifier:
                keyid:8F:EE:D2:0C:24:42:E8:0D:8A:DB:55:18:53:21:F9:EB:AC:A6:35:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:84:40:ab:97:68:eb:f2:3a:07:ad:b0:2e:9b:44:48:c1:cc:
         ff:63:2b:9e:9f:67:70:54:0b:d9:63:3f:d0:15:70:c1:78:58:
         d5:b5:f3:e2:f1:02:6e:e3:92:49:7b:d8:ff:e2:14:dd:93:a8:
         ed:0f:e5:e6:23:f4:07:2b:84:43:02:cf:31:81:94:74:88:90:
         48:ca:b9:2b:cb:b8:05:45:b9:68:31:0b:af:c0:71:58:95:e4:
         55:bf:af:4b:4b:b4:bb:1a:cc:13:a2:c7:d6:9c:ad:fa:f4:27:
         50:9e:75:3b:56:0e:be:1c:92:b7:9c:8c:5c:ac:4c:93:55:a3:
         71:db:8b:24:d0:89:24:eb:43:66:da:3b:7d:c1:93:df:4c:c7:
         b3:07:17:50:91:0a:8a:07:8b:fd:13:d1:1e:f6:34:92:83:0c:
         14:22:4d:33:a4:5c:f3:c0:8b:cf:69:d9:7b:b6:dc:29:2a:a4:
         a3:01:dc:03:e7:49:28:b6:41:10:8e:31:ff:4e:53:9d:ec:ba:
         f8:61:73:d3:0f:79:41:d5:f3:ac:be:4d:9b:bc:aa:9d:02:bb:
         6d:47:c7:29:ce:ab:28:d1:8f:ab:eb:0c:46:da:d3:fa:3b:43:
         b6:b0:88:36:ef:47:63:25:50:14:a1:c7:df:cf:9e:05:4f:e4:
         0b:19:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:30 2026 by rpki-client