Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File:                     JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier:          76PbjSgrXVMAV/AyaM2M7U+Hgn2VUrcHXYAPxjWb+8U=
Subject key identifier:   DF:03:B3:3E:BB:C3:75:67:91:21:DA:B7:6C:67:92:28:37:94:90:DA
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer:       /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number:          01AB
Signing time:             Fri 25 Sep 2026 04:12:47 +0000
Manifest this update:     Fri 25 Sep 2026 04:12:46 +0000
Manifest next update:     Fri 02 Oct 2026 04:12:46 +0000
Files and hashes:         1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: GDxHh6jBoCfUpG+NKfyTGUlpQrJmEc/4BS84r3Gandk=)
                          2: 79A1CFF0F2F311F08CC9D9AA476F56BC.roa (hash: RG0OKbgyfMnZsT4Mffpyz2So5ShlFuRTqS038sdC92A=)
                          3: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: wTJyMr91GllJkZWLd+qrpsF1jIX1E/NLLlPclqDy6ZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
        Validity
            Not Before: Sep 25 04:12:46 2026 GMT
            Not After : Oct  2 04:12:46 2026 GMT
        Subject: CN=6ab5f4bf-a5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:26:d0:04:e0:b3:dc:1a:8f:19:5f:e5:d4:
                    f0:da:8a:44:c4:88:2f:a7:59:ea:6a:81:37:53:e5:
                    7e:5e:ec:31:97:e3:7b:e1:25:88:ec:2c:4d:2f:e2:
                    52:b2:8b:17:04:7c:f5:18:86:51:7e:ed:43:d7:d3:
                    84:09:a4:e8:2b:1b:3b:88:7b:af:ae:2d:72:52:7a:
                    2a:3e:b2:3c:7b:28:f1:a0:b3:df:25:d9:a7:06:f3:
                    f6:b8:65:5a:95:0d:c8:87:ac:53:96:82:ce:27:8d:
                    99:c3:64:5b:47:0f:ca:39:e2:3c:49:7b:64:5a:90:
                    a1:b6:68:04:b5:37:53:ba:1e:98:5e:65:f2:bf:4b:
                    e0:87:21:e9:7f:40:d4:57:3c:f8:a4:20:60:8e:92:
                    f7:e8:d1:37:76:d9:2e:3f:df:b3:1b:12:41:a3:ce:
                    10:35:b2:a6:d6:28:99:58:81:c9:67:da:32:b0:ef:
                    b0:1d:b8:fe:73:6b:f8:e1:f4:d0:09:cf:2d:af:41:
                    89:41:63:8e:97:02:62:f7:b4:c2:8e:cf:4f:0e:df:
                    69:47:3e:bd:41:91:be:7d:a5:77:70:da:f9:56:06:
                    ea:16:d2:33:eb:9f:ca:38:d5:f8:ed:11:cf:f5:d2:
                    aa:26:24:72:3a:70:63:07:35:39:e9:56:15:49:4f:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:03:B3:3E:BB:C3:75:67:91:21:DA:B7:6C:67:92:28:37:94:90:DA
            X509v3 Authority Key Identifier:
                keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:98:7b:2c:45:9d:e5:b9:bc:50:95:0e:38:29:6e:b4:c9:da:
         d1:88:c2:eb:3a:ef:1c:f0:91:4a:61:3b:5e:39:0b:84:b6:61:
         8a:14:45:38:ab:02:67:39:ad:56:66:81:f9:6c:02:98:25:f8:
         ef:61:63:bb:1e:52:64:98:57:51:96:68:be:75:2c:bb:2c:87:
         a9:91:4a:1a:0b:21:44:f6:bb:4f:b2:95:be:10:99:6f:15:80:
         58:fc:d6:30:05:f3:0f:e7:31:97:45:0b:f6:82:ef:22:31:6d:
         27:73:06:00:b0:86:70:42:b4:47:99:b7:19:c2:fa:c9:2b:d8:
         13:47:a5:8b:b8:76:61:f7:69:13:6b:60:ce:2b:8c:f2:1a:80:
         cc:ab:b1:41:74:fc:c9:7c:88:99:7a:4e:5b:01:68:a4:5e:23:
         e4:1d:61:31:6c:bd:66:5d:9c:e2:ae:3f:bb:a8:57:d2:40:77:
         78:3a:d5:4e:4e:03:22:87:67:bf:b6:07:14:2c:2c:39:62:74:
         de:f4:6d:89:bf:01:c4:24:81:8e:7b:d4:8b:ad:bf:05:75:67:
         92:fd:18:94:f9:dd:88:95:2b:56:68:1f:4e:41:74:5b:df:f1:
         28:57:0c:ce:9e:ef:b3:1e:42:52:9c:66:1f:f6:da:58:8d:04:
         13:c2:a1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:17:35 2026 by rpki-client