Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File:                     JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier:          W1YJpmMupyloe8FfFBE1dgN4fasJ6OGgQnrAnSm6Ons=
Subject key identifier:   E3:FC:37:88:B6:DF:96:DA:51:55:AF:6A:F4:2A:0A:9F:F1:92:4B:4B
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer:       /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number:          01DA
Signing time:             Wed 23 Sep 2026 03:30:44 +0000
Manifest this update:     Wed 23 Sep 2026 03:30:44 +0000
Manifest next update:     Wed 30 Sep 2026 03:30:44 +0000
Files and hashes:         1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: xKRVnx4VR1WpwSilvB2EpJPFTRQ2n11YhQR75WDh7rA=)
                          2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
                          3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
                          rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
        Validity
            Not Before: Sep 23 03:30:44 2026 GMT
            Not After : Sep 30 03:30:44 2026 GMT
        Subject: CN=6ab347e4-ab8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:92:98:03:00:65:72:25:45:64:b8:f6:75:
                    df:ae:34:65:d1:3f:d5:2a:37:3c:73:66:2c:12:60:
                    73:f3:41:d4:f2:48:07:6d:95:4c:b3:97:68:2e:ec:
                    b2:5c:63:13:b8:84:a3:d7:6b:18:2e:d5:94:22:75:
                    44:d2:22:58:aa:94:12:ef:9f:df:d8:6e:31:ed:8c:
                    44:2a:7e:98:b1:86:51:6a:f4:26:ad:82:e7:d3:85:
                    e4:29:68:7f:12:d6:39:06:14:5f:47:8e:a7:c2:79:
                    e4:22:0a:12:9e:7e:01:48:cc:fe:b8:fe:73:fa:3b:
                    86:b1:de:41:ad:b7:35:ee:96:5f:8c:cd:50:3d:e6:
                    10:28:5f:cf:1a:a4:8b:97:f2:a4:e5:90:ae:fb:45:
                    79:00:cc:db:8b:1f:8a:65:ca:65:95:5a:56:ec:96:
                    b8:0c:33:32:a0:59:5b:97:86:f1:9f:4a:5d:dd:ef:
                    23:94:9e:fd:b3:1a:a5:fa:82:dd:57:7c:e5:6d:c9:
                    21:de:01:9d:c5:76:df:fe:3e:f8:3c:1e:e4:ea:0f:
                    30:88:b6:cb:42:c0:e9:9c:75:60:42:05:07:36:54:
                    e1:c8:21:45:d8:c4:a3:be:11:1c:f8:9e:92:b7:f3:
                    cb:b4:c3:76:25:9f:3e:74:24:7e:31:15:61:72:77:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FC:37:88:B6:DF:96:DA:51:55:AF:6A:F4:2A:0A:9F:F1:92:4B:4B
            X509v3 Authority Key Identifier:
                keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ad:69:80:a8:78:b3:0c:5e:c7:bf:e7:fe:7c:5e:70:4b:b0:
         88:9f:c1:09:85:bb:0a:e5:15:e9:30:12:33:4c:1c:b0:ea:70:
         20:d7:be:57:14:42:84:52:41:5e:1d:b1:1f:fc:99:2c:39:71:
         ab:35:27:59:1e:d8:d6:60:35:7f:47:e6:92:fd:94:fa:cc:53:
         f9:72:2a:b8:b0:14:39:4f:80:51:db:43:39:fc:78:be:87:00:
         f5:0a:68:ee:6b:75:6e:16:5d:ef:15:b6:2c:ae:91:86:23:ac:
         52:d6:54:b8:a1:ce:30:74:9a:6f:fd:a2:64:5a:5f:f6:fc:d2:
         e5:f8:15:b9:cc:77:d7:b7:cb:b8:1f:c2:74:42:b7:d9:8c:6e:
         07:67:1d:7b:d3:a1:e2:1d:53:68:09:19:96:5e:6a:ed:14:e8:
         a4:0d:ab:92:f6:f7:63:ee:80:f1:e3:71:44:0e:f9:61:fc:3e:
         b6:66:5c:78:73:68:7d:f2:d7:62:e0:38:f0:53:1e:e7:8c:00:
         50:51:47:32:ad:be:28:29:bf:0b:2e:1f:41:9e:4c:bf:c2:c0:
         af:07:b4:ee:12:21:e1:21:a1:5a:13:e0:14:ad:ce:98:ee:b3:
         b2:e3:d0:d3:63:7c:c0:c1:8e:df:6d:dc:0c:64:d4:11:a0:69:
         be:aa:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:26:18 2026 by rpki-client