Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File:                     JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier:          gXMxXV638rOKHsij9y/Zl4Ffcs/ztbcSgcKlJnZ9pQk=
Subject key identifier:   1C:0D:8B:64:FC:90:1B:E0:4E:D9:65:31:AC:0B:44:89:A4:15:A1:78
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer:       /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number:          6D
Signing time:             Wed 19 Aug 2026 08:43:36 +0000
Manifest this update:     Wed 19 Aug 2026 08:43:35 +0000
Manifest next update:     Wed 26 Aug 2026 08:43:35 +0000
Files and hashes:         1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: fAMVE9hFYsMCkp3TZfqGi/HoA3efWzXr7ZHiDe+PzHc=)
                          2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: d6S2IX4DR/rLbqbsWRy4XlJUKZ6LC3VVHK1EodAZfjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
        Validity
            Not Before: Aug 19 08:43:35 2026 GMT
            Not After : Aug 26 08:43:35 2026 GMT
        Subject: CN=6a856cb8-7f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:26:4f:44:ac:df:d6:bf:00:57:5e:23:ec:
                    0c:c7:a9:58:57:99:a0:17:3e:e6:ce:a3:3f:46:bf:
                    08:00:69:2a:76:54:89:1b:49:7a:64:53:47:89:75:
                    70:09:da:ba:ec:d8:39:7b:8b:d8:df:ce:e1:da:a6:
                    19:f2:7b:1b:e3:0a:44:59:40:44:4d:18:8f:9b:14:
                    1f:e0:db:af:78:d9:ed:7a:b2:53:20:ea:eb:32:e5:
                    8e:10:a5:02:73:87:4d:df:a5:3b:b7:ec:e7:c0:2b:
                    10:66:d4:0d:44:85:6a:31:8b:41:42:56:9f:7a:45:
                    49:cd:ba:0a:6d:72:85:af:15:ba:7b:01:36:06:5e:
                    8d:de:a6:d3:22:ac:61:20:49:dd:8e:89:91:11:1d:
                    f4:41:40:30:a4:59:07:d0:3d:88:b6:07:9c:62:62:
                    7f:6f:96:fc:8f:99:cb:97:b3:56:59:f1:63:65:24:
                    de:c4:b1:2a:23:1f:96:0f:3a:0a:ff:8c:f3:ee:ca:
                    b9:5a:57:4e:92:27:e8:52:97:39:6d:aa:4f:d1:8f:
                    43:e8:15:cd:81:cc:fb:29:52:b5:05:e6:17:a6:d3:
                    91:13:af:eb:4f:1a:67:50:94:1a:ed:70:5c:5a:4b:
                    01:d0:39:b6:fd:a4:94:d5:f6:09:a5:6a:d5:cf:36:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0D:8B:64:FC:90:1B:E0:4E:D9:65:31:AC:0B:44:89:A4:15:A1:78
            X509v3 Authority Key Identifier:
                keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:46:ac:c3:e0:7a:43:92:85:44:7c:47:a4:c3:d9:c8:23:
         a9:b4:21:26:a5:c4:62:d8:e8:af:d7:9c:81:ed:45:b5:d7:d4:
         6f:4a:bc:bd:ff:ab:f5:00:fd:a6:3f:b4:2c:f9:ad:00:6e:55:
         32:d9:6b:0c:58:ad:a0:1f:4a:13:05:30:20:3a:5d:e8:8f:8a:
         8a:f6:6a:f0:81:6b:63:72:dc:2d:0a:d0:59:ac:bc:fb:e7:fe:
         f2:ba:28:4e:4e:70:f7:3d:3d:d6:fc:cf:f1:c0:9e:9d:a5:fb:
         30:06:9e:91:14:52:1b:87:cd:9e:5f:f3:51:ed:09:4d:ca:59:
         22:b4:f0:d6:f6:8d:f2:ee:04:90:fa:32:12:ec:b8:aa:2b:8f:
         7e:60:7a:99:be:26:9c:92:26:18:1a:b4:45:20:23:f2:c5:02:
         ef:7c:5b:2c:c1:6d:94:0e:c4:23:d5:83:61:9f:65:22:b3:51:
         10:53:d4:97:49:ef:0f:b6:d9:97:75:bc:ba:6a:88:55:f1:5e:
         a7:6b:de:5a:27:65:36:27:ce:a6:fd:76:3e:3c:c9:94:2c:66:
         92:81:df:95:76:40:90:15:46:69:ff:45:e8:f4:c1:cf:dd:3b:
         82:b5:82:89:fb:e9:fe:72:dd:93:dc:e7:15:0a:00:93:1f:1f:
         0c:af:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:14:36 2026 by rpki-client