Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File:                     JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier:          rWt881qLMxynu4o2vddQZFeA0j5F2DvhuPSxfIlSgrY=
Subject key identifier:   BE:73:5C:C9:89:1F:9A:3A:B4:D8:4F:9D:76:86:DB:77:76:E5:CF:86
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer:       /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial:       3594
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number:          357E
Signing time:             Tue 18 Aug 2026 15:20:24 +0000
Manifest this update:     Tue 18 Aug 2026 15:20:23 +0000
Manifest next update:     Tue 25 Aug 2026 15:20:23 +0000
Files and hashes:         1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: wdkm/dbE+5ECO/svw7xSapXwlbveOeiK7AW31ly1vfc=)
                          2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: ip48wthcZQj2yzO90ZC3ETY+zndLk/B6YcMLzIWEh4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13716 (0x3594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
        Validity
            Not Before: Aug 18 15:20:23 2026 GMT
            Not After : Aug 25 15:20:23 2026 GMT
        Subject: CN=6a847838-d134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:c6:b8:57:a7:98:99:38:cd:e7:0b:72:af:
                    58:a7:19:4b:2e:c9:b8:3e:b0:ca:ec:9e:26:b5:6c:
                    7a:8b:15:54:27:14:ec:83:67:10:64:9c:c0:8f:64:
                    3b:6a:b9:5c:d7:db:33:2e:70:5d:e8:89:44:0b:e2:
                    c6:9e:8e:06:06:78:10:1a:c2:d2:6a:2f:f2:5e:68:
                    c1:a6:11:8b:fe:09:b0:9b:f1:73:50:33:0e:db:a2:
                    dd:5d:a7:0a:cf:04:f1:bb:5c:ff:e5:df:55:8b:89:
                    aa:fd:5e:dc:3d:f2:4f:28:c3:cf:3d:fe:c1:3f:85:
                    7b:7d:3d:b4:57:1a:a4:0e:4d:d4:d1:76:fe:8b:81:
                    89:51:36:71:b8:f4:14:8f:84:72:a7:c0:99:7d:b0:
                    66:4e:10:4d:6f:08:bf:2d:b6:d8:4d:6a:9e:56:84:
                    67:d4:d6:2c:5c:d1:e2:63:63:c5:05:aa:5b:5f:6a:
                    39:d9:34:c7:4e:f8:cc:66:71:6a:87:75:13:6b:09:
                    5e:58:86:2c:54:bb:48:7e:68:d1:4f:0b:48:02:df:
                    a3:c9:ad:81:09:b2:41:33:54:0d:9e:dc:b2:10:3a:
                    95:e8:73:e6:d8:f7:1b:ef:71:8a:ee:a4:77:53:35:
                    3c:f6:51:31:f8:79:83:15:a3:aa:00:82:cb:1c:1a:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:73:5C:C9:89:1F:9A:3A:B4:D8:4F:9D:76:86:DB:77:76:E5:CF:86
            X509v3 Authority Key Identifier:
                keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:af:9c:a3:c0:71:e3:7f:ee:ba:0a:b5:e3:cc:2f:1b:fe:d4:
         26:5a:ce:0f:78:3e:71:2c:8f:08:bb:23:06:27:d8:4a:60:91:
         5b:7d:7d:ae:32:22:25:56:fb:a9:a2:8d:ba:83:c7:8f:a9:e4:
         e1:6e:68:6d:ac:cd:e9:8a:65:2e:dc:1d:ca:5f:d6:f7:36:87:
         f2:bf:95:7b:84:6e:de:93:00:c3:55:ef:ba:47:6e:b4:53:39:
         73:52:d9:f1:c3:52:e2:d9:57:f4:a7:4a:66:ee:51:89:7e:cb:
         3d:0e:24:44:65:10:c1:6c:37:a9:8c:24:d8:7e:81:23:25:d3:
         2b:fd:f9:38:b6:f7:24:a3:f8:73:b1:d6:1c:a9:32:60:b2:a0:
         d2:2e:be:38:7b:5c:1d:c8:c5:30:01:c7:01:0c:2f:8f:a0:23:
         81:0b:6b:cb:ad:8b:66:b0:c0:26:a8:1f:92:10:5a:10:3c:5b:
         88:64:34:74:bc:73:5d:4e:a6:d4:6f:78:8e:af:e8:55:75:a1:
         b3:c2:bb:a5:e2:68:0f:c3:a4:45:16:26:71:cc:a6:e6:d9:39:
         61:f6:8c:53:9f:84:f3:c5:1d:e0:57:a3:54:f0:43:2c:76:0d:
         29:ee:77:04:41:26:05:76:02:6a:51:31:67:7e:5d:64:73:0e:
         6a:9b:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:07 2026 by rpki-client