Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
File:                     mjx3F7MXcbj9SW70NsRcXAXxN0w.mft (raw, json)
Hash identifier:          9jJ8Qd9/LsdAnHGmqUffiPLyjeJSQ0VBtG41iB+JbK4=
Subject key identifier:   07:6F:D9:51:09:72:0E:82:1F:C5:06:6A:AB:2F:34:41:41:8E:8A:51
Authority key identifier: 9A:3C:77:17:B3:17:71:B8:FD:49:6E:F4:36:C4:5C:5C:05:F1:37:4C
Certificate issuer:       /CN=A911AA05/serialNumber=9A3C7717B31771B8FD496EF436C45C5C05F1374C
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
Manifest number:          0114
Signing time:             Wed 23 Sep 2026 05:52:45 +0000
Manifest this update:     Wed 23 Sep 2026 05:52:44 +0000
Manifest next update:     Wed 30 Sep 2026 05:52:44 +0000
Files and hashes:         1: mjx3F7MXcbj9SW70NsRcXAXxN0w.crl (hash: XPPX0cIjrkJb7NlJyiC6IRuXjfHdA3QjxONYW7EKyjA=)
                          2: 5047DAFCACDC11F1AC905F28B2EE528E.roa (hash: FS54yN/i/7kq4bVcWcoEs3xvL36ntbwzBWFR7NsFhMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.crl
                          rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AA05, serialNumber=9A3C7717B31771B8FD496EF436C45C5C05F1374C
        Validity
            Not Before: Sep 23 05:52:44 2026 GMT
            Not After : Sep 30 05:52:44 2026 GMT
        Subject: CN=6ab3692c-97d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:51:b7:f0:1c:8e:c3:48:7e:c9:48:3b:aa:
                    8c:5e:66:ca:61:39:d0:41:9d:8f:f4:c0:aa:b1:a8:
                    0c:12:cd:e0:95:de:22:c8:ec:3d:2a:51:c3:3e:70:
                    66:eb:a3:e1:68:e3:9a:11:5f:95:c0:43:46:80:52:
                    3b:df:5e:d8:fa:02:ff:2d:aa:13:81:1b:19:4f:58:
                    f4:0e:56:eb:52:d0:26:68:77:87:d3:ba:96:6b:62:
                    df:80:a5:cc:26:23:2e:38:18:96:50:0a:b5:ab:58:
                    af:42:67:d2:a2:26:38:c5:2c:32:3e:d1:46:c7:b1:
                    d0:47:e0:e1:9b:db:1f:cc:fe:d5:c6:f7:3a:a8:fd:
                    f2:9e:5e:11:9c:08:88:d3:c7:99:85:dc:b4:d9:6b:
                    bd:72:26:1a:56:8a:ea:00:5d:e0:dc:f8:6d:fb:4d:
                    a6:e1:82:81:3d:bf:9e:60:f7:3d:b5:21:59:b8:22:
                    6c:1e:b6:9c:47:70:fc:af:aa:fc:31:c4:f9:65:7f:
                    e7:de:f7:13:3c:ec:13:a3:b3:69:b9:c7:3b:30:4f:
                    32:4a:27:f2:fc:79:36:94:8c:a2:9f:88:63:59:29:
                    ce:2d:cf:c6:49:80:74:60:bf:21:0f:8e:79:b8:8f:
                    3f:16:98:21:58:6e:cb:93:9a:79:b5:9e:45:a0:15:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:D9:51:09:72:0E:82:1F:C5:06:6A:AB:2F:34:41:41:8E:8A:51
            X509v3 Authority Key Identifier:
                keyid:9A:3C:77:17:B3:17:71:B8:FD:49:6E:F4:36:C4:5C:5C:05:F1:37:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:b7:12:ed:b7:c6:87:d0:c8:e6:ef:19:3d:33:8a:15:e9:
         8c:9b:d6:e2:7e:79:e2:ab:ea:cd:36:cd:e5:33:fe:72:15:cd:
         4a:fd:0b:11:ef:6b:78:64:c3:3c:d8:89:43:b0:65:bf:42:c1:
         1f:29:50:dc:94:4a:ba:03:2f:d9:45:1f:2d:66:9b:9c:25:84:
         a8:7f:df:4f:18:3f:36:6d:3f:00:d5:00:6b:12:3e:62:61:b2:
         b1:bb:81:20:ad:de:5e:ac:62:8f:9b:57:51:64:41:8e:52:09:
         81:b6:89:d4:c5:d7:02:6a:cc:2f:0e:63:66:50:ee:72:50:56:
         f7:ff:90:43:3d:fe:cb:6d:9f:c2:75:59:e4:31:36:24:8a:50:
         52:6d:68:c4:44:a0:47:43:71:46:b9:32:e3:7c:82:78:2a:68:
         af:75:c9:49:1a:d0:cc:ac:09:00:53:d8:70:8b:11:45:b3:0a:
         56:33:20:56:59:f6:f0:d7:d7:8a:b7:5f:55:8e:47:74:ab:0a:
         0b:52:da:77:39:a6:6e:62:18:6a:e5:d1:b2:ab:90:f7:5a:90:
         67:7a:59:85:39:f9:ae:e2:9d:fe:c0:b7:58:a6:98:9b:97:dd:
         42:13:17:16:84:5f:20:11:5c:55:bd:8e:f0:3e:1d:cd:67:11:
         37:2b:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:59 2026 by rpki-client