Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
File:                     Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft (raw, json)
Hash identifier:          vDLffElhzU/brYJF9GOhSCg2AZAQkySYt9u9cN3iklQ=
Subject key identifier:   D4:BC:E2:81:5A:E7:88:97:51:D0:CF:60:D0:BB:A3:A2:C3:A5:82:55
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
Manifest number:          06C8
Signing time:             Mon 20 Apr 2026 23:00:50 +0000
Manifest this update:     Mon 20 Apr 2026 23:00:50 +0000
Manifest next update:     Mon 27 Apr 2026 23:00:50 +0000
Files and hashes:         1: Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl (hash: 0Twyt7/vuheWbS/3Cwv5hxA2S1CivyFjO1NLhNHYAHg=)
                          2: 9A7D9276665111EEAD781D28C4F9AE02.roa (hash: BJaSiVoSokQxrhGiLv/oX18AGrZPY90wOA5NxAdk59c=)
                          3: 62F20360FC0311F088645FFF736F56BC.roa (hash: SIHWwYL0uWaK9uo7ION7zRVJxcQKKkWilM2j1ebTScc=)
                          4: F9666A06953911F0842CD338C4F9AE02.roa (hash: E8uiuGObbODWSGPYr3Y36QDryuITyoHlU3bs80B4Q0s=)
                          5: 52564FC4836B11EE960BCA6FC4F9AE02.roa (hash: QymuSlHRWmacf4u9uk/iLy0S0hfu393CiwDQwmQHEJo=)
                          6: F412434CEC5811F0BA858F3E4B6F56BC.roa (hash: 3gJ0JjSufsJQV4FJopiJzqDoqnWMAYfObfBz+eYqLps=)
                          7: 76FA56B208B611EDACE57065C4F9AE02.roa (hash: vecIogljs1xHPZHn3FzKK0TZjt+0AHT1gggrM0IJZ8c=)
                          8: 76C6B0C8105511EC92580578C4F9AE02.roa (hash: I5IGNfDAcCqMdSJ73zaXYF9WCs5VXx3LWGfer+NSPMg=)
                          9: 32E806F8878111EF9723F25DC4F9AE02.roa (hash: 098M3+B8DvGi6B5GSbiGZgVhsNi595tFhog+h0pHCM8=)
                          10: 4235F184DACE11EE8E67437CC4F9AE02.roa (hash: h0H6nTvx1Xpv/diXdiCYwVNaEDqOkg9JcLdgvgz05zQ=)
                          11: A3F69D08606D11F0AFBFBA71C4F9AE02.roa (hash: NxLslj6PNBWfXukHnU9a3/K8IzFaLjD1nFWnRTiAMK8=)
                          12: 3962A56E5E0611EF8CB1F080C4F9AE02.roa (hash: YXnfiIe66c2o1Lsy0W6LJvegaVgKR9Jr1m4tuPkFmnY=)
                          13: D2E2FC0C027411F1BB34E46C2D3D8C67.roa (hash: 3MeSl5Q+l04dslawOPPM43+H6/Pz8lJTdv+OK+PnY2o=)
                          14: 9E8B4A3AB3B111EF8237BD72C4F9AE02.roa (hash: +9WgcDM0ngocRMTdlkXWSI94vVT+KAsAZM0UomlRILc=)
                          15: E13F8A68B3B011EF831E2748C4F9AE02.roa (hash: tpwivFGUdTZvI8BturbAcozmq/Op8lHL9yAt9uZfEGw=)
                          16: 73D3C5B808B611EDACE57065C4F9AE02.roa (hash: Kg2nIYzQhtuDp3xi3nmYblUoBPsdcFhaSn7iGVl57Oo=)
                          17: F008FF08C22111ECB9FFB964C4F9AE02.roa (hash: BO2ap/iba5V9JZKlVjzyyKKKOW+r+ideqFQgzlaGjkc=)
                          18: 46BE2FE6837B11EEB7855E0FC4F9AE02.roa (hash: ejhIquAUjT62Z1WbAXp5NxAiPY7nh5eUHh7ylfUgH9U=)
                          19: 7480CB3208B611EDACE57065C4F9AE02.roa (hash: lN63KEebTVcyFFCRjM6xGqPNF2fHXMhTXUg86Br9QjA=)
                          20: 99C5A4CC201211EC8520994EC4F9AE02.roa (hash: g6+3/Nd+09wWzT/IggHOuUm4l/0nuIaNBPY5ivuS1rE=)
                          21: FE8AECB2607511F0901D374BC4F9AE02.roa (hash: cVJ6MvA/GWz5prsZvSjMnc4ruMNdwieFGWa8BnQJoyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Apr 20 23:00:50 2026 GMT
            Not After : Apr 27 23:00:50 2026 GMT
        Subject: CN=69e6b022-c2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:80:f3:00:00:fa:37:b8:4c:c8:dc:e9:c6:
                    20:ce:ec:a6:60:15:2f:1b:7d:2a:93:8a:1c:ca:4d:
                    c5:2b:c0:71:85:e0:72:72:08:d5:00:c7:65:df:91:
                    e7:83:21:53:74:eb:de:28:4e:59:54:2b:fa:40:4e:
                    2d:9b:f0:83:bd:7a:d9:ac:06:17:5f:6d:17:b0:4b:
                    de:ca:d2:ad:1b:84:d4:a4:0e:ba:f8:66:29:66:40:
                    c3:74:b1:1c:c5:f2:00:af:46:7d:d3:05:86:06:ee:
                    be:d5:27:ea:45:84:5a:6e:29:f5:24:29:c3:11:7f:
                    25:a0:b7:26:74:c0:37:7d:a6:52:20:7a:eb:f6:89:
                    d5:2c:20:9d:6f:8e:c3:91:80:30:d0:28:02:12:46:
                    25:b0:9b:98:e1:1d:f1:d3:a8:1f:69:8a:78:9c:f8:
                    ff:89:96:cf:3e:3e:73:7e:f1:ac:e9:69:dc:07:f8:
                    53:16:41:15:5f:2f:c8:43:39:05:20:8e:4b:0e:63:
                    5e:6d:6d:1d:83:e9:3e:69:dd:65:92:0f:1b:8f:6c:
                    a1:d2:db:95:85:df:4d:e0:d3:00:f7:ad:e9:05:e2:
                    9e:a1:5d:72:69:7c:bd:3d:a2:c0:cf:69:43:4e:9b:
                    cc:4e:ff:96:d0:cf:88:0e:3a:51:b6:39:40:52:22:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:E2:81:5A:E7:88:97:51:D0:CF:60:D0:BB:A3:A2:C3:A5:82:55
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:43:32:2a:7c:88:b4:8e:58:07:2b:c3:0a:5b:64:d6:be:
         cf:99:b2:34:6c:ff:89:db:a1:5a:26:37:d1:3d:e1:bb:59:a4:
         a0:f5:c4:ba:ce:56:4d:0d:70:d2:92:07:e0:be:f2:a4:27:39:
         f5:91:68:7b:b7:b5:21:a2:6a:e4:b9:41:3f:44:95:ca:cd:c5:
         b5:f2:30:0f:ea:a8:14:f2:56:b9:aa:aa:4b:83:10:e7:71:b8:
         88:16:97:f0:04:44:9f:7b:aa:ed:52:90:ab:74:d5:4e:14:8d:
         50:6b:ae:78:5a:82:4c:a7:45:5b:8b:2e:74:b9:20:ee:0b:79:
         db:36:ed:d2:fc:1a:fd:c1:f0:98:1f:bc:a0:41:6b:cb:67:c0:
         0c:54:62:fa:58:57:36:06:8d:79:31:38:38:8b:9c:87:00:a3:
         13:5f:48:b6:5c:be:04:b4:02:46:a1:7e:ba:a6:30:14:c4:13:
         11:df:25:55:b2:82:d5:ba:ae:b1:a3:05:a5:40:32:83:e2:dd:
         47:aa:66:1d:41:6c:6e:b7:9c:dd:63:2c:14:86:ae:bf:3c:ca:
         22:be:a4:ef:99:f2:44:87:3d:f3:92:44:48:91:db:50:07:5d:
         35:78:8e:26:4c:b5:5a:95:71:fd:72:53:d2:51:3e:a8:06:6c:
         51:f8:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:35:35 2026 by rpki-client