Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File:                     JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier:          i8krVmYNvvgckQWizXUtiJiFLlBp0cGkK4MbRcl1HRM=
Subject key identifier:   C8:64:0A:AA:84:5E:53:19:7B:75:F8:D0:24:22:AC:A3:30:5A:CE:E3
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       300A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number:          2FF4
Signing time:             Tue 18 Aug 2026 15:31:17 +0000
Manifest this update:     Tue 18 Aug 2026 15:31:16 +0000
Manifest next update:     Tue 25 Aug 2026 15:31:16 +0000
Files and hashes:         1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: +f8HLsovClHTR6WrdhdycRUK6YxKwYCQ4LSu6C18ZpU=)
                          2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: qMI0+qSJUDBOM2XBKVGT0iY5F9iduz0xMqXjCiho+4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12298 (0x300a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Aug 18 15:31:16 2026 GMT
            Not After : Aug 25 15:31:16 2026 GMT
        Subject: CN=6a847ac5-ffbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:a0:e4:91:64:3c:a1:67:cb:57:f4:fe:f9:
                    09:9f:64:73:88:52:aa:5e:d3:c7:24:18:40:99:c9:
                    f1:fc:b6:3a:e4:e7:3e:35:4c:c4:46:a0:c2:b6:41:
                    0c:e0:db:20:2d:58:fa:65:f6:73:83:fd:be:91:f8:
                    f2:95:36:9e:a5:c8:84:22:d0:23:a4:6a:02:a9:a4:
                    e8:42:8c:80:d9:e3:9e:54:29:49:d5:63:1b:8f:08:
                    65:71:d4:91:04:c7:09:ac:d1:5f:aa:c6:f7:73:47:
                    1d:71:b0:b5:e7:31:16:6f:79:0d:93:c6:11:a0:18:
                    9f:00:15:95:5b:cc:75:02:ea:b3:fb:69:c3:92:5d:
                    6c:85:a5:73:69:52:3b:1d:91:5b:99:4d:22:70:e2:
                    a9:df:48:d5:c5:60:43:c2:a8:5c:cb:bd:5a:a6:c5:
                    79:f3:28:cf:44:7a:46:cb:23:0a:2a:ee:fb:59:5d:
                    f4:f7:7f:a3:f0:01:f9:b8:ac:3c:f4:41:ff:25:cd:
                    41:e1:20:8e:31:2e:a4:ce:ea:73:67:b0:c9:c1:6d:
                    d4:10:3c:12:93:da:16:94:c8:52:4b:2e:47:f6:50:
                    e5:90:4c:9e:18:fc:85:b3:49:75:2f:76:4c:d4:e9:
                    f5:54:89:b6:0b:f6:d5:7c:19:d5:0a:e5:52:6e:ed:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:64:0A:AA:84:5E:53:19:7B:75:F8:D0:24:22:AC:A3:30:5A:CE:E3
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bd:8a:d0:71:b4:64:cd:e8:b8:4e:7b:f3:85:8e:64:7c:1e:
         82:ec:41:d5:7b:b9:9a:97:7e:e2:43:83:a9:d2:ee:e5:22:2e:
         15:6e:79:f1:e9:ca:99:3a:e1:15:f8:39:0a:e0:c7:dc:66:0b:
         57:36:6f:d3:98:84:a3:0b:c4:56:58:41:27:76:0e:bf:a6:bb:
         33:4f:38:77:50:ff:50:38:02:d8:34:1c:09:fc:46:39:23:2d:
         de:06:be:70:44:e3:aa:af:55:e4:63:da:54:0f:88:a9:59:5b:
         5d:56:e3:05:b3:39:ae:24:ed:e8:d9:bf:0f:ae:22:10:2c:f9:
         14:e3:22:29:67:d8:cd:9f:b8:39:ef:f7:1d:45:f8:1f:2b:a4:
         5a:69:39:e7:14:e5:d8:b1:47:7e:38:2b:f8:06:ae:31:cd:a3:
         99:29:00:53:8a:53:b3:53:32:9f:74:97:35:85:32:ce:ce:94:
         f3:a2:d5:0a:c1:71:e9:70:32:db:bf:3c:db:03:b5:7e:cc:59:
         c9:af:8d:81:7c:58:a5:11:bb:96:ff:8b:ea:f8:14:6f:e7:9b:
         40:04:65:c2:31:17:e5:1c:6a:0f:43:33:86:35:8e:77:5c:71:
         ea:09:d6:5c:1d:23:41:c3:19:5c:62:79:66:38:eb:fb:c2:e0:
         c1:14:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:11 2026 by rpki-client