Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
File:                     jedlypHSuTU2K6RMdbXBIrSmzvQ.mft (raw, json)
Hash identifier:          gNYwBFXrn+iaE9NVlEGrHdCRnMkrV0L/p0vDIwYfXVE=
Subject key identifier:   C6:61:63:16:BD:A1:40:07:94:08:83:3E:2F:10:8E:44:33:A1:5D:CD
Authority key identifier: 8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
Certificate issuer:       /CN=A913E5F9/serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
Manifest number:          A4
Signing time:             Sun 15 Nov 2026 07:35:05 +0000
Manifest this update:     Sun 15 Nov 2026 07:35:04 +0000
Manifest next update:     Sun 22 Nov 2026 07:35:04 +0000
Files and hashes:         1: jedlypHSuTU2K6RMdbXBIrSmzvQ.crl (hash: bniweS4ukAwR4H+pCHiucLaXxJWsERGdof5uRUznAmI=)
                          2: 297CBF60B1EA11F18F5B7C6E4811F970.roa (hash: psykWVtJiLn1Rn2o9xaTL8eXARdffRzlklonTvhkrRQ=)
                          3: 4170FDB4B0C511F198102D146A11F970.roa (hash: gUZRJMs2ANGvch/jNTjclJ1sCXt+s+x9xCc4UlLBlaI=)
                          4: 1242D086636211F19E6D087B9E47A888.roa (hash: 9XW3K0kTuz9FHZYytnOalJMkjq6elGdyVpDsqxCViSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 07:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E5F9, serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
        Validity
            Not Before: Nov 15 07:35:04 2026 GMT
            Not After : Nov 22 07:35:04 2026 GMT
        Subject: CN=6af960a9-54b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:3e:9b:a0:76:94:cf:7f:08:53:8c:49:7f:
                    86:a7:a9:42:d1:41:07:60:0a:f2:b4:03:4d:83:37:
                    7a:cf:47:05:4a:2b:71:4d:b7:4d:3b:ed:73:d5:76:
                    a1:1e:6b:c4:c2:a5:b1:3b:3d:fe:b9:cb:61:4c:ae:
                    2e:63:41:16:b9:d6:f2:e0:4c:9d:02:d6:fc:36:fc:
                    ab:77:73:88:93:1b:59:fd:11:20:ed:3c:22:39:d3:
                    36:75:84:2e:bb:5c:e1:36:66:73:45:3b:c4:ee:db:
                    00:0d:6b:b7:d4:f8:28:ed:c9:bf:e0:a3:cf:87:68:
                    10:46:fc:2f:17:e6:c2:3e:11:87:a7:25:ae:79:28:
                    2a:e9:fe:7b:19:95:dc:56:d8:02:5b:19:55:bb:db:
                    37:3b:e4:5e:31:6f:cc:93:2e:35:25:23:a6:8a:93:
                    09:f5:63:ac:28:b3:63:13:eb:db:ab:a6:d1:ca:7c:
                    25:3a:34:2f:86:22:f2:c9:87:6a:fd:90:c5:5a:90:
                    06:b5:b8:db:55:f5:fc:e6:17:3d:6b:e2:59:49:77:
                    46:a0:97:3f:f8:1a:ba:03:60:69:10:57:8a:78:35:
                    21:3a:f3:68:e8:75:8e:a2:38:f7:f8:7d:46:cc:b2:
                    aa:f8:2d:aa:91:00:6f:67:20:9d:ba:16:b6:39:c1:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:61:63:16:BD:A1:40:07:94:08:83:3E:2F:10:8E:44:33:A1:5D:CD
            X509v3 Authority Key Identifier:
                keyid:8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:23:6c:34:05:ba:69:3b:73:97:55:82:50:c9:a1:88:23:c2:
         13:da:29:8f:c6:47:09:ca:b5:00:d8:ab:ff:77:07:ad:62:47:
         66:14:51:f1:04:3a:bd:53:74:58:11:cc:28:ed:a8:aa:de:bd:
         c4:92:a4:6f:39:f2:53:7c:cf:6d:35:de:bc:9f:09:e2:07:e9:
         cb:da:db:e0:d1:ad:fd:34:c0:cb:32:f4:3b:1a:d5:00:43:5f:
         35:50:8c:6f:9b:7a:96:f1:7c:06:49:73:c9:ea:9c:39:1d:b8:
         19:a6:23:c7:ab:c2:ea:9d:94:8e:b2:a3:47:08:21:10:57:fe:
         e4:06:78:67:7e:45:bc:00:06:cb:a0:47:13:16:c9:ee:6c:b8:
         6f:b6:e5:5d:55:4e:53:64:36:5d:c6:ea:2a:c8:c7:9c:e2:02:
         2f:8d:91:98:2e:cf:87:e8:8f:65:95:b3:c5:3b:4d:9d:52:d7:
         7a:4a:39:3e:c8:9a:62:fd:da:cd:57:ad:10:53:fd:28:b6:d6:
         02:5f:a8:0e:16:e6:0d:c8:1b:43:ac:0f:3d:bb:12:08:eb:56:
         14:47:b3:c9:a4:a7:32:69:e4:c0:7d:8f:a0:76:7c:18:02:ba:
         81:0e:a3:d4:83:86:fb:96:fe:ac:4d:22:29:35:92:e9:bb:8a:
         c8:39:87:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U1RjkxMTAvBgNVBAUTKDhERTc2NUNBOTFEMkI5MzUzNjJCQTQ0Qzc1QjVDMTIy
QjRBNkNFRjQwHhcNMjYxMTE1MDczNTA0WhcNMjYxMTIyMDczNTA0WjAYMRYwFAYD
VQQDEw02YWY5NjBhOS01NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwU+m6B2lM9/CFOMSX+Gp6lC0UEHYArytANNgzd6z0cFSitxTbdNO+1z1Xah
HmvEwqWxOz3+ucthTK4uY0EWudby4EydAtb8Nvyrd3OIkxtZ/REg7TwiOdM2dYQu
u1zhNmZzRTvE7tsADWu31Pgo7cm/4KPPh2gQRvwvF+bCPhGHpyWueSgq6f57GZXc
VtgCWxlVu9s3O+ReMW/Mky41JSOmipMJ9WOsKLNjE+vbq6bRynwlOjQvhiLyyYdq
/ZDFWpAGtbjbVfX85hc9a+JZSXdGoJc/+Bq6A2BpEFeKeDUhOvNo6HWOojj3+H1G
zLKq+C2qkQBvZyCduha2OcEBDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZhYxa9
oUAHlAiDPi8QjkQzoV3NMB8GA1UdIwQYMBaAFI3nZcqR0rk1NiukTHW1wSK0ps70
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTVGOS8xQUYyMzA0OEY2
OTExMUYwQTBGNDg4NTIzQTZGNTZCQy9qZWRseXBIU3VUVTJLNlJNZGJYQklyU216
dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2plZGx5cEhTdVRVMks2Uk1kYlhCSXJTbXp2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTVGOS8xQUYyMzA0OEY2OTExMUYwQTBGNDg4NTIzQTZGNTZCQy9qZWRseXBIU3VU
VTJLNlJNZGJYQklyU216dlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANCNsNAW6aTtzl1WCUMmhiCPCE9opj8ZHCcq1ANir/3cHrWJHZhRR8QQ6vVN0
WBHMKO2oqt69xJKkbznyU3zPbTXevJ8J4gfpy9rb4NGt/TTAyzL0OxrVAENfNVCM
b5t6lvF8BklzyeqcOR24GaYjx6vC6p2UjrKjRwghEFf+5AZ4Z35FvAAGy6BHExbJ
7my4b7blXVVOU2Q2XcbqKsjHnOICL42RmC7Ph+iPZZWzxTtNnVLXeko5PsiaYv3a
zVetEFP9KLbWAl+oDhbmDcgbQ6wPPbsSCOtWFEezyaSnMmnkwH2PoHZ8GAK6gQ6j
1IOG+5b+rE0iKTWS6buKyDmHpA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:06:04 2026 by rpki-client