Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
File:                     JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json)
Hash identifier:          mfapoZIFs8QxGtKzlpnF1HrUW9AvS2lM9ElNOBui3wY=
Subject key identifier:   9A:6B:37:86:ED:4C:AE:DD:B5:7F:A1:47:36:2C:08:81:F7:51:4B:B3
Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
Certificate issuer:       /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
Manifest number:          0100
Signing time:             Fri 19 Jun 2026 06:23:19 +0000
Manifest this update:     Fri 19 Jun 2026 06:23:18 +0000
Manifest next update:     Fri 26 Jun 2026 06:23:18 +0000
Files and hashes:         1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: xdNzKshxDy3biIrVC2To0jZBVoBzpc06Q5UjlKKig84=)
                          2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: SZZXZtv9x+ZJ89heiQVizmtDvpK3qMjrqCOCy4opKQo=)
                          3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: jw0OlOADXVlEE4I0cP+j9CVDdilfXWfPDRrYPS66FZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jun 2026 06:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
        Validity
            Not Before: Jun 19 06:23:18 2026 GMT
            Not After : Jun 26 06:23:18 2026 GMT
        Subject: CN=6a34e057-1c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:15:85:19:22:b7:0e:14:49:84:a8:a8:e4:
                    5a:03:02:fd:11:ed:aa:8a:6f:86:b9:df:f2:dd:69:
                    d3:1e:2e:39:09:3b:ad:89:76:35:f6:13:3e:6c:7e:
                    74:3a:7c:01:6c:30:ae:e4:5e:ff:ff:55:4f:3d:43:
                    90:72:3c:71:ce:73:cb:06:f1:52:6f:af:be:14:9b:
                    6a:7d:bb:52:7b:eb:2b:9f:0d:b9:d3:62:4c:90:10:
                    3d:8c:45:af:5c:66:a1:ae:a7:41:05:e6:ee:54:a5:
                    2e:00:c0:62:73:76:f3:c4:09:13:e5:aa:b4:1c:eb:
                    a4:e1:1e:6e:a2:3f:5b:60:61:23:33:0b:90:e4:d3:
                    a8:a8:68:e2:24:4d:80:60:70:15:4c:5b:7d:15:89:
                    8a:0f:d7:b9:95:98:75:0c:ad:23:61:b3:f7:52:56:
                    1e:88:e7:ea:7a:c6:30:40:9b:b4:23:75:a8:d9:e8:
                    d3:f2:65:c5:68:75:73:5b:93:2c:66:24:44:ec:f0:
                    cf:96:b0:59:31:15:35:f0:a9:67:f7:3b:ae:22:49:
                    c2:a1:08:e1:a2:23:46:41:ec:2d:97:54:cb:f4:aa:
                    a4:34:e6:a2:64:24:d4:c8:45:8f:9e:67:33:16:c1:
                    a7:d3:d2:e8:6f:e7:f6:bd:c7:f3:8f:a5:69:48:fe:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:37:86:ED:4C:AE:DD:B5:7F:A1:47:36:2C:08:81:F7:51:4B:B3
            X509v3 Authority Key Identifier:
                keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:e3:78:e3:3c:d1:07:d3:2e:b2:4d:6c:7f:36:8b:22:2e:
         29:45:b9:37:3f:09:b5:38:46:a5:ec:a9:26:b3:4f:10:b0:d3:
         22:3f:a9:2d:bb:bd:5a:65:d6:bb:2b:b2:e6:e0:3b:ca:f2:ef:
         64:8f:0c:35:c9:b0:41:93:0a:ba:f9:23:58:cb:7a:68:61:b5:
         d5:36:84:ee:25:1b:39:63:82:fb:1f:93:66:48:6c:2a:ce:0c:
         86:05:39:06:b3:0a:48:7b:62:93:28:14:3f:57:79:62:1e:59:
         18:8b:84:fc:43:6c:fd:d2:8d:ba:79:ea:c3:fa:4e:26:01:b3:
         18:d7:eb:34:38:38:0c:0a:dc:ba:e3:f3:cc:5b:7a:a0:67:92:
         1b:fc:76:25:66:f4:17:ba:68:c9:1a:9c:65:3c:bd:ca:41:c5:
         f1:1b:e6:87:24:76:7c:87:9f:c5:d5:16:e8:fe:d0:01:3d:09:
         af:8c:89:09:89:0b:42:c4:3a:45:e6:62:89:c1:1b:ef:f6:61:
         5b:3f:ca:38:c9:e8:c8:73:28:3c:b3:ed:63:89:34:d5:40:24:
         1e:dd:58:9a:a6:c2:1a:89:a8:1a:77:60:c8:1c:54:68:b8:56:
         33:2c:aa:40:dd:10:f8:6c:b0:1c:97:d0:10:71:ad:7b:39:6f:
         18:39:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:01:59 2026 by rpki-client