Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
File:                     J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json)
Hash identifier:          0RmL7ERoJkA0SYvHIf8shkHZ2mQ08U86PdtVBbfG3cI=
Subject key identifier:   9B:47:6D:3C:0D:AF:9B:48:94:98:CB:54:04:3F:80:9E:B0:D4:34:B4
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Certificate issuer:       /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial:       1711
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
Manifest number:          16FF
Signing time:             Mon 28 Sep 2026 16:43:29 +0000
Manifest this update:     Mon 28 Sep 2026 16:43:29 +0000
Manifest next update:     Mon 05 Oct 2026 16:43:29 +0000
Files and hashes:         1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: 6I/PQofzbiRh0q2QoPvy4gzdCquE6oFwF+oIQ9Vn4zA=)
                          2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: v/SZ7H/SLnlGFkwwxhkg6bW6tjnET9pIm6y1CUX4oos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 16:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5905 (0x1711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
        Validity
            Not Before: Sep 28 16:43:29 2026 GMT
            Not After : Oct  5 16:43:29 2026 GMT
        Subject: CN=6aba9931-22fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:25:51:96:74:43:99:14:5d:ae:58:f0:90:
                    02:47:bd:d7:29:5c:1e:dc:32:ea:43:4b:60:de:72:
                    e8:6e:5f:ec:95:0b:9c:09:6e:c6:b4:5d:a3:1c:69:
                    ec:58:79:52:7b:8c:88:73:5e:a2:36:f9:0c:f3:c3:
                    45:4c:da:ee:83:ae:77:28:f0:b7:a0:fb:f6:18:11:
                    45:11:60:ff:8f:e1:97:07:d7:2a:fa:f1:42:37:ae:
                    c9:b0:13:6e:24:c8:84:77:89:2a:d1:d5:32:d4:0a:
                    80:8c:d5:92:3c:16:5c:57:ba:19:ce:94:36:16:58:
                    54:04:5f:63:b0:a7:d8:65:1a:f1:ed:a6:87:1a:6f:
                    23:c8:76:94:93:48:c7:0c:d6:56:fd:db:c9:b6:4d:
                    02:ae:92:bc:9f:8a:f8:04:19:72:bf:0f:62:4e:75:
                    fa:c3:fc:6d:d7:72:b3:90:e4:ed:34:43:70:0c:50:
                    c5:0a:22:9c:b2:dd:90:24:83:cf:de:6d:73:20:5a:
                    5c:5a:49:f6:cc:6c:05:2c:f7:e8:f8:ed:59:59:2c:
                    5f:3e:ef:68:8e:d0:23:6e:d8:06:68:07:e4:c1:95:
                    ac:23:85:36:2a:e5:66:50:57:33:fc:17:a0:0a:32:
                    29:b7:43:ac:08:60:0c:19:68:32:70:0e:3e:79:7b:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:47:6D:3C:0D:AF:9B:48:94:98:CB:54:04:3F:80:9E:B0:D4:34:B4
            X509v3 Authority Key Identifier:
                keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9d:7a:1c:98:00:68:d8:3c:ec:96:36:3c:3a:a2:2d:43:07:
         08:02:31:ed:b0:78:e9:b5:7f:f3:94:00:a7:c1:6b:e0:f1:f3:
         cb:35:a1:0d:6e:0b:b2:ac:02:2a:18:54:0f:8a:0c:70:88:7c:
         40:bf:a1:c0:f4:10:b7:95:37:80:6b:07:9d:2b:f3:67:47:c0:
         bf:b5:20:96:82:9e:30:3f:73:12:6c:7e:c8:62:d3:77:d7:ed:
         a1:ef:34:4c:d2:07:8e:46:7b:ba:a3:8c:9e:44:b5:61:50:96:
         c8:54:61:eb:de:e9:82:54:c5:76:cb:c3:e0:6b:70:a9:e4:11:
         1e:7b:f5:a3:42:a8:f3:40:03:08:a1:5a:13:11:94:cf:87:99:
         2e:b7:f9:7f:b8:bc:5e:41:24:ed:41:30:a0:e3:13:0b:b3:ae:
         5d:06:58:80:d6:38:97:2c:7e:d7:7d:76:7f:67:4c:78:93:d9:
         ee:b1:1e:a0:69:3c:23:5d:70:79:f4:1c:8a:f1:bd:46:bb:14:
         91:b5:0d:70:a7:5a:53:78:4d:41:c8:f0:d3:21:b4:93:a8:f9:
         21:fe:87:7e:f9:11:93:6b:8c:ef:04:16:26:35:3f:4d:9c:00:
         e9:50:a4:7d:ff:80:e0:9f:62:4a:a0:73:5f:d8:c3:5f:bd:58:
         a2:c8:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:08:43 2026 by rpki-client