Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
File:                     JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json)
Hash identifier:          LGklJpjkP+qm8gQQE6CIN4FVCs9pRj5XbZJovSm11tc=
Subject key identifier:   B2:64:81:07:CF:79:96:61:6F:4B:BF:A0:4A:AC:F4:D6:91:B9:45:0D
Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE
Certificate issuer:       /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
Manifest number:          C9
Signing time:             Wed 19 Aug 2026 07:33:25 +0000
Manifest this update:     Wed 19 Aug 2026 07:33:24 +0000
Manifest next update:     Wed 26 Aug 2026 07:33:24 +0000
Files and hashes:         1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: e+xO8ECR5cFApbAmVBpmFTopIltGGHpy7bxBRLC7Ynk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE
        Validity
            Not Before: Aug 19 07:33:24 2026 GMT
            Not After : Aug 26 07:33:24 2026 GMT
        Subject: CN=6a855c45-85e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:68:82:77:7b:f8:e7:f5:65:61:00:19:ae:
                    44:b1:f6:f6:d2:db:84:f5:7c:1e:eb:23:24:5f:9b:
                    94:38:67:d1:3d:6e:af:c6:3e:43:4c:cf:d2:47:f3:
                    30:c3:6b:7a:9c:1f:4c:a9:46:36:ca:fb:e8:6b:ea:
                    a6:06:27:23:98:21:d4:89:73:ee:b5:bc:52:81:0d:
                    c7:d9:f2:1e:2f:11:83:03:b4:5b:37:9c:a5:38:c2:
                    e0:d9:fc:5e:61:fc:b5:96:70:09:c6:95:44:a3:aa:
                    31:3a:69:0b:e3:da:4c:ea:29:58:75:fb:b3:99:41:
                    bb:f7:e1:b3:90:12:8e:be:86:5d:f6:a8:09:f7:1f:
                    37:fd:a4:1a:65:90:83:1f:15:82:5b:c7:60:00:6a:
                    a7:49:7d:c4:5a:75:9c:5b:08:eb:37:1d:fa:be:e7:
                    4a:3a:00:3b:25:c8:ff:a0:fb:42:ba:c8:05:11:e7:
                    d2:84:ab:a4:55:1a:1b:39:4a:dc:3a:9f:83:8d:7f:
                    77:93:f0:82:d8:fb:51:24:8e:44:cf:07:54:c1:3c:
                    ab:e7:8d:95:07:27:5c:8f:f5:7e:70:7a:97:88:f8:
                    72:bb:3c:d5:08:f1:95:ff:57:50:e2:36:99:31:79:
                    73:42:52:08:02:4f:c9:df:e9:8d:13:c0:84:c6:bc:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:64:81:07:CF:79:96:61:6F:4B:BF:A0:4A:AC:F4:D6:91:B9:45:0D
            X509v3 Authority Key Identifier:
                keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:32:13:c4:a2:14:3d:45:e4:b7:ba:02:20:0c:f1:43:7d:4c:
         df:01:2f:f3:07:c2:c9:9c:a7:54:6b:ac:7b:46:de:e4:ed:e2:
         8a:c1:04:64:d1:6c:1a:61:b6:84:3b:ae:88:f2:a5:13:5c:e0:
         be:21:c5:44:13:64:c5:b7:f4:b2:8b:97:59:66:50:ea:4d:35:
         f4:c9:e5:94:67:34:4d:f3:b7:62:83:26:63:39:a7:c0:c9:b0:
         5e:1a:24:b0:81:78:68:43:e9:62:04:c1:e3:3e:e6:48:c4:35:
         63:4e:7a:65:58:04:1e:c7:6f:13:2e:dc:2a:ff:c0:59:1c:83:
         71:d6:22:6f:f8:81:f2:50:9e:50:a9:38:39:b9:c3:fa:94:af:
         d6:2b:28:e4:2b:fb:19:1e:96:ca:18:df:ae:5f:8f:ec:d6:37:
         d0:2c:5f:50:81:df:2b:98:6f:01:f6:10:e6:b3:55:ce:4f:2a:
         3a:39:f8:5c:9e:6e:7d:90:cc:b5:e5:37:f8:2e:e9:5a:a1:03:
         ae:25:a4:8b:5d:f6:8e:05:e3:f0:24:98:3b:fc:24:87:b4:64:
         8f:77:60:37:82:42:88:64:ee:6c:7b:0f:43:7b:3d:df:3a:28:
         d8:69:8b:34:3e:1b:b9:28:96:84:ef:3a:70:0f:5d:40:48:6f:
         aa:21:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:34 2026 by rpki-client