Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
File:                     jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json)
Hash identifier:          waZJEx1n27IzGSy0vB2wgvFkypNxoifcDpzHTBQFLok=
Subject key identifier:   19:04:0A:92:30:42:B7:58:10:35:09:3D:EE:A0:B5:68:2F:6D:3F:DB
Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
Certificate issuer:       /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Certificate serial:       09C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
Manifest number:          09B7
Signing time:             Wed 20 May 2026 19:57:32 +0000
Manifest this update:     Wed 20 May 2026 19:57:31 +0000
Manifest next update:     Wed 27 May 2026 19:57:31 +0000
Files and hashes:         1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: zbowFHCEsVmeK+/835P5RkxSM6Ih5oEziAvbV68jEFw=)
                          2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: JBjC/hjIFgijHYWzdFZhAZ7It9/PA5hptGK+4xTPsfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
                          rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
        Validity
            Not Before: May 20 19:57:31 2026 GMT
            Not After : May 27 19:57:31 2026 GMT
        Subject: CN=6a0e122c-acab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:96:ff:86:b9:32:16:dd:ca:01:2a:82:da:
                    9d:fc:19:3e:b3:88:84:69:d0:6c:e0:7f:f4:c5:cd:
                    60:2f:fa:ce:9a:6b:b0:5b:7c:29:81:37:03:fb:dc:
                    3f:d9:dc:85:e9:ac:77:de:35:82:17:0a:7b:78:c1:
                    cb:4b:ea:8b:a1:fb:6c:ce:e5:4e:2c:25:cf:2d:2c:
                    2f:82:30:61:0f:84:ab:1c:67:a8:35:c6:f7:0b:01:
                    04:3a:94:4a:5f:7d:87:2e:20:39:81:30:63:67:66:
                    d3:f1:a1:58:c3:06:75:de:97:6f:1f:f6:f6:02:1e:
                    b8:00:91:71:83:7a:00:4a:01:db:85:8e:eb:c5:fc:
                    9f:d9:7c:7d:42:f4:ad:15:7c:4b:df:77:dd:6e:7d:
                    5d:d4:a2:8e:59:af:e0:cd:e8:43:5f:aa:66:64:61:
                    58:33:1f:e0:22:61:80:4f:a9:ae:19:a5:05:4f:a6:
                    5b:c6:84:3b:68:d6:5b:d7:23:46:37:77:68:1d:cb:
                    08:14:4d:47:8c:ea:4b:c9:00:d9:b5:3d:9b:62:63:
                    57:aa:63:07:0f:6b:12:fe:0b:cb:16:07:5b:bc:a7:
                    f7:e6:95:7f:3e:25:0b:d8:8b:54:68:3b:08:38:3e:
                    0e:32:57:f4:48:4a:b4:8a:90:69:19:cd:3e:f1:e3:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:04:0A:92:30:42:B7:58:10:35:09:3D:EE:A0:B5:68:2F:6D:3F:DB
            X509v3 Authority Key Identifier:
                keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:2b:fe:fb:7a:5e:49:8e:f6:db:ae:57:b7:6e:5e:9f:bc:7e:
         1f:01:6e:4c:d6:b6:2f:31:c3:63:6c:bd:3e:ea:93:0a:77:ae:
         a1:bf:92:0d:8b:fc:bb:4f:e8:44:ca:8e:37:c5:14:81:37:ac:
         64:19:7a:26:f5:fe:68:bc:30:f9:57:da:d9:2c:7b:28:80:93:
         1f:98:54:e8:4a:83:37:e2:16:b0:ff:cb:89:6d:82:b4:d6:6b:
         b9:2c:f8:9a:6f:43:05:4a:55:c6:b4:da:2e:1b:bb:55:b9:3a:
         4d:ec:60:9e:54:f9:fe:67:09:84:dd:12:79:88:89:b1:dd:ff:
         c8:a1:70:4d:15:5b:8d:87:10:c0:a0:30:47:08:8b:56:5f:6c:
         64:74:90:63:86:96:ed:8f:98:2e:8c:97:2e:18:05:c2:3d:b2:
         5a:6d:da:f4:fe:e5:9e:c3:05:25:7a:1f:bd:04:d6:f7:1c:6a:
         d1:2d:56:e3:7d:50:fc:a1:2e:44:16:96:26:b3:80:a8:19:5c:
         9d:6a:fb:5a:f1:78:d9:68:ca:65:f8:5e:7c:fa:b6:bf:ad:cd:
         76:77:ea:3f:59:8a:fd:74:57:ba:a2:6d:f7:27:96:ac:8a:10:
         93:3f:07:96:e1:c3:e1:48:50:aa:3b:ca:f6:56:ff:ad:36:b9:
         ce:ee:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:11 2026 by rpki-client