Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
File:                     jKszW_vzkiyQjyAPyLk4vIHMkwI.mft (raw, json)
Hash identifier:          QOXfW+3fmOJtZoqqT1xrLoZDOJWMfr5p4PFL/9OJjlE=
Subject key identifier:   F3:C0:8B:5A:DB:B9:54:E6:23:EA:46:F5:E5:47:86:BD:2B:17:56:85
Authority key identifier: 8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02
Certificate issuer:       /CN=A91F8AD4/serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
Manifest number:          19
Signing time:             Fri 17 Jul 2026 10:18:36 +0000
Manifest this update:     Fri 17 Jul 2026 10:18:35 +0000
Manifest next update:     Fri 24 Jul 2026 10:18:35 +0000
Files and hashes:         1: jKszW_vzkiyQjyAPyLk4vIHMkwI.crl (hash: DtRIcnFZs4H7IaAPg5E3Sk/w0UhyNguUgcTtnu6VZKQ=)
                          2: 0D504AD25B6411F1BCACB5ED9D833773.roa (hash: 3iyJLgKvX9P6A2EKlBdLN7L+RbKwbi8Xb0hFQxLvoas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AD4, serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302
        Validity
            Not Before: Jul 17 10:18:35 2026 GMT
            Not After : Jul 24 10:18:35 2026 GMT
        Subject: CN=6a5a017b-de28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:25:fc:cb:db:c8:4f:8f:4a:d4:95:59:2c:
                    14:0a:7c:30:d4:22:e4:95:75:62:23:0f:29:1c:d9:
                    f7:23:1a:3a:1b:20:07:30:db:11:60:70:cc:29:f4:
                    dd:da:27:44:7c:2e:53:aa:77:93:27:46:28:8a:ee:
                    44:ec:32:74:a0:1c:7c:2d:da:62:7e:5e:51:b6:80:
                    16:9b:5d:00:ac:51:ed:c7:85:82:eb:48:66:a7:5e:
                    ae:7a:5d:67:b3:81:17:39:6a:cb:0d:5a:7b:8e:f7:
                    12:59:3b:a8:b6:1c:6f:71:3e:91:4f:14:62:3c:70:
                    8b:46:60:4c:90:55:1f:40:cc:b9:fb:e6:ba:d8:5d:
                    69:65:39:2f:3d:e4:be:5c:e3:8b:cb:13:74:ac:02:
                    44:51:b9:5c:3d:68:d8:2d:3a:4d:3d:b4:a0:20:19:
                    30:b5:f7:d2:39:0d:96:3d:b8:73:7b:d1:aa:be:2b:
                    b9:79:75:a6:dd:da:50:d0:c0:45:4b:f0:9d:c8:75:
                    fe:c9:93:91:18:86:ff:7d:5e:4c:26:d7:26:2b:af:
                    66:40:f0:d9:33:33:7a:d0:0c:28:fb:4b:c5:9d:82:
                    6d:1f:3d:94:70:e1:66:d8:9d:cb:85:ff:91:7b:4a:
                    88:14:89:84:7c:1b:80:e3:3d:60:ef:36:46:60:18:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:8B:5A:DB:B9:54:E6:23:EA:46:F5:E5:47:86:BD:2B:17:56:85
            X509v3 Authority Key Identifier:
                keyid:8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:f8:90:8a:03:ce:a8:2d:05:1b:a0:8b:16:9b:1b:85:91:
         cd:4b:ab:a4:71:67:1e:b5:27:68:9d:81:da:e0:f5:ce:e9:c2:
         51:9b:6a:28:e7:78:1f:04:61:10:5e:0b:e0:ed:9e:b3:e9:80:
         b5:fa:21:0a:c8:c7:da:1f:81:b5:2b:9d:d9:f5:d3:fa:a5:76:
         9a:92:93:24:cf:fc:66:06:c2:bf:47:75:3a:cc:59:4a:ed:c9:
         5f:7a:86:7b:06:6e:be:78:64:37:dd:e7:df:e7:41:b1:6d:7a:
         7a:7c:c1:94:18:8a:1d:69:1d:f4:a3:76:02:af:38:08:bc:09:
         c3:3d:49:bf:5f:bd:37:fd:a0:d2:00:b8:10:6a:86:47:6f:9c:
         3d:fb:f3:eb:04:e6:7c:ae:aa:22:69:00:d8:e8:9e:7f:3b:38:
         1f:b4:66:fb:9d:0a:a9:9d:12:ce:a9:82:b1:7a:dc:ab:77:f3:
         41:0e:7f:fb:82:38:64:17:43:3b:77:04:de:9a:bb:e8:fc:6c:
         55:97:a9:c8:e3:1a:20:e3:df:f1:8e:d7:0a:cb:b9:2a:11:b6:
         e1:36:78:a3:56:11:2a:2f:bc:bb:25:68:29:25:ad:d0:9f:e5:
         54:13:b2:f9:b4:0b:77:c2:a8:f0:0b:48:8f:11:e6:f9:c4:03:
         44:07:54:d6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OEFENDExMC8GA1UEBRMoOENBQjMzNUJGQkYzOTIyQzkwOEYyMDBGQzhCOTM4QkM4
MUNDOTMwMjAeFw0yNjA3MTcxMDE4MzVaFw0yNjA3MjQxMDE4MzVaMBgxFjAUBgNV
BAMTDTZhNWEwMTdiLWRlMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyfCX8y9vIT49K1JVZLBQKfDDUIuSVdWIjDykc2fcjGjobIAcw2xFgcMwp9N3a
J0R8LlOqd5MnRiiK7kTsMnSgHHwt2mJ+XlG2gBabXQCsUe3HhYLrSGanXq56XWez
gRc5assNWnuO9xJZO6i2HG9xPpFPFGI8cItGYEyQVR9AzLn75rrYXWllOS895L5c
44vLE3SsAkRRuVw9aNgtOk09tKAgGTC199I5DZY9uHN70aq+K7l5dabd2lDQwEVL
8J3Idf7Jk5EYhv99Xkwm1yYrr2ZA8NkzM3rQDCj7S8Wdgm0fPZRw4WbYncuF/5F7
SogUiYR8G4DjPWDvNkZgGIxRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU88CLWtu5
VOYj6kb15UeGvSsXVoUwHwYDVR0jBBgwFoAUjKszW/vzkiyQjyAPyLk4vIHMkwIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4QUQ0LzlGQTE0QThDNUI2
MjExRjE5MzQwQjlFRTlDODMzNzczL2pLc3pXX3Z6a2l5UWp5QVB5TGs0dklITWt3
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaktzeldfdnpraXlRanlBUHlMazR2SUhNa3dJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4
QUQ0LzlGQTE0QThDNUI2MjExRjE5MzQwQjlFRTlDODMzNzczL2pLc3pXX3Z6a2l5
UWp5QVB5TGs0dklITWt3SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAj0fiQigPOqC0FG6CLFpsbhZHNS6ukcWcetSdonYHa4PXO6cJRm2oo53gfBGEQ
Xgvg7Z6z6YC1+iEKyMfaH4G1K53Z9dP6pXaakpMkz/xmBsK/R3U6zFlK7clfeoZ7
Bm6+eGQ33eff50GxbXp6fMGUGIodaR30o3YCrzgIvAnDPUm/X703/aDSALgQaoZH
b5w9+/PrBOZ8rqoiaQDY6J5/OzgftGb7nQqpnRLOqYKxetyrd/NBDn/7gjhkF0M7
dwTemrvo/GxVl6nI4xog49/xjtcKy7kqEbbhNnijVhEqL7y7JWgpJa3Qn+VUE7L5
tAt3wqjwC0iPEeb5xANEB1TW
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:02 2026 by rpki-client