Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          qzix4sAcZxlRkcZE7+RWJ2pWR/F3gQ+OEna3J8zYGeY=
Subject key identifier:   35:2E:77:F2:1F:67:2C:94:06:75:58:4A:21:24:0F:B1:29:91:A0:E9
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0D87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0D78
Signing time:             Sun 26 Jul 2026 18:13:31 +0000
Manifest this update:     Sun 26 Jul 2026 18:13:31 +0000
Manifest next update:     Sun 02 Aug 2026 18:13:31 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: tLTXDGMreIXlMSP7x/E67UDSB5vf8P5ir/+qRwFzIYI=)
                          2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: QLA/RgvuaonKg9bW/z2IbJYEpT3gfx5VJ79vVBjWg0o=)
                          3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 89YxSryYm31Rbj8lSds/XzwttXebIp1udXTMfTHqmfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 18:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3463 (0xd87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: Jul 26 18:13:31 2026 GMT
            Not After : Aug  2 18:13:31 2026 GMT
        Subject: CN=6a664e4b-875e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:64:c3:7f:96:6e:52:5a:ef:37:6b:2a:a6:
                    c6:58:80:b4:90:06:4e:67:0c:71:08:b5:7e:cb:51:
                    a6:1b:26:33:7d:1f:84:31:69:fe:53:1d:35:6e:36:
                    1a:c9:3c:dc:75:0f:21:92:17:28:59:4e:03:16:bd:
                    ae:5d:2e:2a:b8:1b:ce:19:40:2b:ec:56:fd:00:93:
                    ad:50:6e:65:28:23:df:9a:53:ef:7b:ce:93:dc:32:
                    33:b7:a2:a7:6e:85:f1:cb:63:45:26:ce:9b:b3:65:
                    cf:c0:77:8d:8b:86:c4:71:9c:7f:78:d8:f4:5d:f3:
                    0c:d5:ba:9b:78:70:f0:ae:dc:a7:3a:8e:c0:95:eb:
                    3f:6e:e7:a6:7a:7e:cf:09:37:3c:f5:00:d9:03:9c:
                    d8:73:97:1a:ea:9f:50:bc:01:66:db:d7:8e:f4:3a:
                    db:39:5f:7b:3d:2c:bd:23:2b:9d:3a:91:d7:0d:85:
                    a2:3f:93:6c:5d:a2:5c:65:76:2f:b7:e2:64:6c:dd:
                    33:86:cc:e6:e0:fc:2a:8b:d6:7a:17:66:14:a2:6e:
                    34:65:86:ee:e5:ac:5f:5a:8b:68:a5:fb:d1:44:ac:
                    3a:ce:84:73:71:59:85:8b:54:71:a6:69:e6:18:cc:
                    03:c9:1c:45:e1:82:f1:db:1e:48:b5:47:b1:e6:76:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2E:77:F2:1F:67:2C:94:06:75:58:4A:21:24:0F:B1:29:91:A0:E9
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:65:a8:64:cf:ef:b9:85:69:f0:12:10:33:8c:a3:cf:4f:6b:
         fe:3c:84:6c:88:1f:7b:1b:a7:6d:29:a2:50:31:68:99:60:b4:
         8f:29:f8:75:02:93:50:af:71:f4:56:15:e4:b7:59:11:4d:ea:
         77:57:b9:cc:f3:fc:94:65:d0:3c:a7:6c:15:9a:5d:57:dc:b0:
         ab:d3:de:e3:99:8b:be:e4:0a:83:b9:ad:c4:3b:cd:4c:85:a2:
         86:e0:d1:16:0f:e2:0e:6c:e3:7a:20:77:d7:d4:f6:56:9f:30:
         a6:ff:d0:30:0f:86:e7:3d:9b:5b:e1:03:aa:6a:e3:3f:45:b4:
         f0:28:be:14:5c:44:6b:8c:55:3a:d2:1b:34:ce:23:81:0d:f8:
         c9:f8:1f:0c:a7:d7:0e:09:a4:d2:50:dd:76:09:19:1c:db:18:
         5e:40:b6:9b:e5:ea:3e:f4:d3:00:ca:02:00:17:4b:a9:52:b2:
         80:94:18:45:eb:93:5e:95:38:09:45:c4:0b:c4:0e:cc:47:d8:
         53:c7:9c:95:27:d8:9b:07:b9:7e:22:1d:e2:54:99:99:f9:6b:
         74:39:95:cd:dd:d0:d2:27:18:3a:20:cf:86:20:a3:d2:3d:cc:
         14:5e:2c:5e:30:cc:b0:12:3e:1b:3e:25:94:68:84:54:15:16:
         b4:97:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:34:53 2026 by rpki-client