Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
File:                     JVXtObFvbItoFdVBudg2K50_2Co.mft (raw, json)
Hash identifier:          xfjIS6RsARjbHQfsrvyP1K6zngzaYgv1ojct3vYNsAY=
Subject key identifier:   F1:56:2E:B3:28:42:05:00:9F:7A:B4:1F:08:28:64:FE:34:78:99:4E
Authority key identifier: 25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
Certificate issuer:       /CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
Manifest number:          0297
Signing time:             Thu 21 May 2026 01:45:16 +0000
Manifest this update:     Thu 21 May 2026 01:45:15 +0000
Manifest next update:     Thu 28 May 2026 01:45:15 +0000
Files and hashes:         1: JVXtObFvbItoFdVBudg2K50_2Co.crl (hash: 1atchANBnD88gCaigLugb8UVWOP+J5j6TJLRAnU5Wo0=)
                          2: B37444BA7B3711ED9820E681C4F9AE02.roa (hash: 957/ozl0mmzdFKwz8pqNvAszwXK/KWFHgSx+VTECesM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl
                          rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED836, serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
        Validity
            Not Before: May 21 01:45:15 2026 GMT
            Not After : May 28 01:45:15 2026 GMT
        Subject: CN=6a0e63ac-ac2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:26:38:00:70:1d:eb:4f:59:23:89:12:13:
                    5f:66:8b:0a:a2:0a:33:37:7e:9e:4a:09:b1:62:6c:
                    d8:b6:b2:a1:cc:96:43:aa:16:33:ff:4e:8b:76:57:
                    3d:3f:86:2e:31:7c:92:47:0d:8f:64:4a:a0:f6:79:
                    51:80:d7:c6:5c:92:b5:ec:11:72:be:72:84:0b:cd:
                    a8:c1:84:be:53:51:20:90:c6:38:42:b7:89:cb:81:
                    26:b2:df:87:e9:ad:8a:4e:24:23:a7:18:af:b1:fd:
                    14:d9:84:ef:ae:47:f6:c1:20:db:54:f2:d4:2e:72:
                    6e:f8:01:6d:a2:08:f0:de:74:57:d0:56:64:5f:ab:
                    7e:54:b7:a1:60:d0:6b:f6:9e:a0:ec:2e:92:d0:88:
                    32:9f:75:ec:cf:b5:dc:ff:13:28:fe:2b:77:d4:41:
                    f7:eb:eb:7c:24:da:3e:75:1b:29:b9:b3:18:80:f3:
                    3d:cb:6b:64:52:9e:8c:db:4f:1a:dd:81:2b:1e:22:
                    ee:4c:b6:67:b0:e0:0f:17:64:63:57:27:2e:00:86:
                    6a:f8:16:55:ba:35:74:90:00:c4:8c:46:5a:ce:7e:
                    63:b2:63:20:40:3a:55:54:9b:8c:c9:51:a2:44:57:
                    87:e4:a9:09:47:b2:a2:8e:0d:cd:94:07:8a:a3:de:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:56:2E:B3:28:42:05:00:9F:7A:B4:1F:08:28:64:FE:34:78:99:4E
            X509v3 Authority Key Identifier:
                keyid:25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:87:71:f7:dc:c8:75:0f:c2:83:7e:31:c0:94:1c:b9:71:79:
         c2:ae:37:e4:1e:df:22:b9:f2:d5:80:35:63:ec:ff:c7:73:a9:
         3c:4c:7e:af:f2:3d:4c:56:9b:70:2d:2e:9b:2a:b8:01:b2:23:
         31:ac:09:28:e8:59:02:a8:71:de:83:c8:5d:d6:88:39:8d:77:
         c1:94:89:0b:fa:8f:8b:cb:aa:cb:3b:85:96:12:59:e0:9b:c1:
         44:85:cf:1c:f1:39:1d:d8:3c:26:cf:10:b2:2d:e4:81:02:cf:
         8f:06:b3:8b:04:5e:a9:11:c5:bd:bd:d0:cd:d8:d7:de:6c:5e:
         8b:8c:24:96:70:41:ac:88:00:43:5d:0d:9b:05:3a:35:ba:2e:
         a0:e9:e0:db:38:1f:60:3c:9b:82:57:98:73:52:be:13:96:e1:
         1a:8b:9e:a2:f7:84:2c:fd:bf:ec:03:fa:12:57:3d:47:a0:59:
         24:61:d3:b4:95:dc:c4:74:54:36:b3:e0:48:4a:76:60:28:e7:
         f4:ab:fb:b6:b4:92:98:17:2d:21:b4:6d:98:49:c6:fd:f8:96:
         c7:fb:de:19:f9:e0:51:da:39:b3:cd:24:c3:ff:0d:a9:62:14:
         b8:84:f1:ee:8d:91:0d:7f:b5:1f:ec:31:c8:0e:8c:8a:ba:98:
         63:8e:9e:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ4MzYxMTAvBgNVBAUTKDI1NTVFRDM5QjE2RjZDOEI2ODE1RDU0MUI5RDgzNjJC
OUQzRkQ4MkEwHhcNMjYwNTIxMDE0NTE1WhcNMjYwNTI4MDE0NTE1WjAYMRYwFAYD
VQQDEw02YTBlNjNhYy1hYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu48mOABwHetPWSOJEhNfZosKogozN36eSgmxYmzYtrKhzJZDqhYz/06Ldlc9
P4YuMXySRw2PZEqg9nlRgNfGXJK17BFyvnKEC82owYS+U1EgkMY4QreJy4Emst+H
6a2KTiQjpxivsf0U2YTvrkf2wSDbVPLULnJu+AFtogjw3nRX0FZkX6t+VLehYNBr
9p6g7C6S0Igyn3Xsz7Xc/xMo/it31EH36+t8JNo+dRspubMYgPM9y2tkUp6M208a
3YErHiLuTLZnsOAPF2RjVycuAIZq+BZVujV0kADEjEZazn5jsmMgQDpVVJuMyVGi
RFeH5KkJR7Kijg3NlAeKo95YEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFWLrMo
QgUAn3q0HwgoZP40eJlOMB8GA1UdIwQYMBaAFCVV7Tmxb2yLaBXVQbnYNiudP9gq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDgzNi8zMjFGODk0MDY5
MzIxMUVEODg3Q0QyN0FDNEY5QUUwMi9KVlh0T2JGdmJJdG9GZFZCdWRnMks1MF8y
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWWHRPYkZ2Ykl0b0ZkVkJ1ZGcySzUwXzJDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDgzNi8zMjFGODk0MDY5MzIxMUVEODg3Q0QyN0FDNEY5QUUwMi9KVlh0T2JGdmJJ
dG9GZFZCdWRnMks1MF8yQ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOYdx99zIdQ/Cg34xwJQcuXF5wq435B7fIrny1YA1Y+z/x3OpPEx+r/I9TFab
cC0umyq4AbIjMawJKOhZAqhx3oPIXdaIOY13wZSJC/qPi8uqyzuFlhJZ4JvBRIXP
HPE5Hdg8Js8Qsi3kgQLPjwaziwReqRHFvb3QzdjX3mxei4wklnBBrIgAQ10NmwU6
NbouoOng2zgfYDybgleYc1K+E5bhGoueoveELP2/7AP6Elc9R6BZJGHTtJXcxHRU
NrPgSEp2YCjn9Kv7trSSmBctIbRtmEnG/fiWx/veGfngUdo5s80kw/8NqWIUuITx
7o2RDX+1H+wxyA6MirqYY46erg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:35:15 2026 by rpki-client