Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File:                     jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier:          acxQ+XFb0WjTY8W3hbjmWDj3ABNhzx4Rmk7w2ZQbkLc=
Subject key identifier:   0E:03:3F:91:DF:1C:D2:16:9A:69:DB:8D:23:4E:52:13:49:FC:D3:57
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer:       /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial:       035B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number:          0347
Signing time:             Fri 17 Jul 2026 01:40:34 +0000
Manifest this update:     Fri 17 Jul 2026 01:40:33 +0000
Manifest next update:     Fri 24 Jul 2026 01:40:33 +0000
Files and hashes:         1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: 81uj4+tqO1Q28TjU2sVKnvNLTcot6O1EfJ3BeizfjTo=)
                          2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: 1mXamlMRo+ynaPA8W7H/iitEtpOpPxGXkmBb/9Xr46Q=)
                          3: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: JTCJHh69k1g6LsEeAeM2Hs2Q1LgwGJihuuvBont3+Bk=)
                          4: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: /vT4MYU/3jKkJcjNaNb1mfWNyyHR7KkpU4ZY/TkRULE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
                          rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 01:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
        Validity
            Not Before: Jul 17 01:40:33 2026 GMT
            Not After : Jul 24 01:40:33 2026 GMT
        Subject: CN=6a598812-a809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:dd:3d:e5:fb:63:fd:14:f6:db:09:b4:3e:
                    21:0f:9d:fa:a4:06:17:30:d2:32:b2:71:67:a3:a3:
                    c4:12:c0:65:9e:3b:35:28:71:3d:c2:8a:74:e0:fd:
                    d8:a8:5e:52:66:78:d4:08:08:9c:10:8e:32:f1:bf:
                    ff:3a:87:bb:4d:2a:57:9f:c5:79:99:e5:1c:84:e9:
                    16:d8:cb:26:aa:41:7c:ad:71:54:83:b2:7c:32:5b:
                    a8:a9:4e:11:c3:96:fc:d5:c9:13:18:e9:d3:54:47:
                    2a:51:41:4b:16:d0:16:a0:57:95:73:a6:90:20:73:
                    f2:61:ad:b2:de:b3:0b:63:01:de:5b:cf:6b:3e:ab:
                    7d:ce:56:bf:22:00:b2:f0:08:fb:b8:ad:c3:5a:90:
                    7b:5c:2d:dd:d6:67:33:10:01:ff:4e:17:32:5f:95:
                    10:5b:f4:ac:98:75:3b:06:7b:b3:5a:73:a5:66:b3:
                    3a:37:7a:e7:1c:6f:fd:7d:4e:66:97:07:13:03:81:
                    d5:be:59:7b:c2:ca:45:e1:68:60:dc:f3:08:16:8f:
                    be:99:41:bb:5e:16:38:ac:bd:19:e0:01:f1:e5:e7:
                    76:fb:d7:08:39:68:99:34:97:08:28:d7:ad:8f:b3:
                    66:c5:7b:99:6e:ce:6c:19:ca:7f:69:1b:88:8f:95:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:03:3F:91:DF:1C:D2:16:9A:69:DB:8D:23:4E:52:13:49:FC:D3:57
            X509v3 Authority Key Identifier:
                keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:64:e0:23:63:c0:5c:11:08:dc:7e:0d:17:4a:24:b1:2c:56:
         da:db:3f:fa:44:45:aa:1c:d3:2a:1f:1f:2c:c6:1c:b7:ba:ba:
         07:93:95:bc:26:a7:65:3c:87:b0:70:22:53:74:25:b8:58:c8:
         c7:93:9d:6b:43:d8:07:4f:f5:cc:4b:98:61:15:61:90:38:eb:
         19:cd:bb:ad:ef:6e:54:b5:45:31:2c:59:57:59:88:5a:2d:12:
         b6:f3:7c:67:3c:c8:b4:93:5f:60:34:10:8e:24:fc:8c:d8:da:
         c4:c6:0b:11:89:b7:d7:a3:1b:a0:34:9a:47:4a:17:86:30:96:
         d6:dd:2f:e3:67:73:c7:dd:63:ef:31:b0:09:0f:cf:44:5e:de:
         39:92:ff:a7:59:87:ae:c1:e0:49:22:81:50:8b:4e:c8:91:70:
         89:23:37:d7:d1:02:aa:f5:f7:3f:91:f1:e4:ff:d2:b9:fd:a4:
         2c:c7:1f:9a:32:9a:64:22:46:68:2b:70:ac:d0:b3:8b:9c:ad:
         cf:09:29:17:42:e9:e8:29:ec:55:95:86:e7:46:e7:53:8d:31:
         49:b9:da:84:34:5d:9f:45:55:ba:96:5d:0c:58:18:49:6c:f1:
         c5:b3:bc:c4:52:69:7d:4f:14:f4:df:6a:5d:78:fa:67:fe:ed:
         59:17:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:16:40 2026 by rpki-client