Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
File:                     JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json)
Hash identifier:          +I2tENEM8/NPEchy1zydY1W62DX1t9JpWzA08f4vNLI=
Subject key identifier:   66:AC:2E:D5:48:DD:DF:CE:29:68:24:1E:91:8C:7B:42:8E:C7:0D:3E
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Certificate issuer:       /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
Manifest number:          0238
Signing time:             Sat 03 Oct 2026 03:12:13 +0000
Manifest this update:     Sat 03 Oct 2026 03:12:12 +0000
Manifest next update:     Sat 10 Oct 2026 03:12:12 +0000
Files and hashes:         1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: yAHMr+baQ6TB4+B1ZcyZmbpOR8A4lJSg9m2j5VU7GPM=)
                          2: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: qHv8Ru0jBRthxVf240z5P/DKqQtKKQRC7eInZ1grvl0=)
                          3: 06BD1FD4D76F11F0A9A4AAFE78D3641D.roa (hash: ty9kxm+UQwtgkGWflh7iO1wJ15otqsdqQHE+5RW40pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
                          rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
        Validity
            Not Before: Oct  3 03:12:12 2026 GMT
            Not After : Oct 10 03:12:12 2026 GMT
        Subject: CN=6ac0728d-25c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:6a:2b:dc:7c:d1:59:54:3e:28:74:43:c9:
                    f6:0c:54:47:44:0e:25:20:f1:05:1d:f7:1b:47:db:
                    66:04:fe:07:e3:1d:d0:f3:e4:a5:fe:b3:b7:a1:e2:
                    fa:50:c9:27:69:f6:fb:fc:67:80:13:bb:22:12:c9:
                    44:a6:91:70:b8:cf:78:05:fc:14:50:1f:e0:49:f1:
                    cd:d3:a6:a6:29:49:b2:1a:ae:56:a7:ac:33:c8:33:
                    22:50:40:c9:d7:af:48:97:0c:fc:4a:ce:52:9c:7b:
                    54:6d:da:98:a7:f9:f0:c9:35:52:fc:4d:21:98:da:
                    71:e6:b5:72:1f:1e:f4:df:14:4e:e8:6b:a8:ee:c6:
                    36:f3:2b:85:69:59:b9:6e:02:37:b0:ad:05:38:4c:
                    23:09:3a:75:2b:37:57:1b:09:2e:24:a0:46:ef:a5:
                    b7:7f:b5:94:a4:35:24:f1:1b:ec:c1:fe:11:44:ca:
                    2e:57:ad:e8:88:01:03:df:9c:08:5b:52:bb:1d:c7:
                    e1:cf:a0:df:28:93:e6:bc:dd:09:b7:88:a3:bd:ed:
                    8d:33:2c:4b:b0:2f:e0:ea:84:de:8f:e1:99:a4:31:
                    02:c3:cd:9d:12:fb:70:f8:58:30:a0:e8:7b:ea:b3:
                    b7:51:13:6b:8a:fb:95:5b:10:e8:0e:a9:ad:ca:87:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:2E:D5:48:DD:DF:CE:29:68:24:1E:91:8C:7B:42:8E:C7:0D:3E
            X509v3 Authority Key Identifier:
                keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:0c:f1:2d:da:b9:0a:08:63:70:45:e6:83:43:5d:c5:8b:
         7a:08:a5:09:9b:3b:ca:80:ad:04:16:13:a5:e7:22:08:83:40:
         80:2f:ab:3b:c1:11:f1:d5:ef:0e:23:fe:f0:df:0a:3e:17:da:
         14:48:9a:9d:e4:54:f6:9e:95:ab:ca:92:2c:0f:e4:6c:45:c3:
         6c:93:81:a2:fb:56:bb:6d:11:93:89:0b:4b:3b:e3:de:54:8b:
         ec:52:a3:64:2f:26:75:5d:9b:5b:8e:87:ca:df:c9:e7:48:a8:
         cf:e7:13:bc:c6:d7:cf:bf:9c:f0:73:70:a9:59:34:e8:0c:46:
         19:6e:cd:ef:b0:33:6f:ff:eb:6a:d0:95:ed:ec:c9:02:90:db:
         cf:30:62:d9:69:d1:2a:5c:a1:92:4f:56:99:aa:89:23:33:33:
         45:a5:42:17:cb:7b:5e:09:64:2c:80:bd:2e:10:49:bc:de:89:
         92:cf:ec:18:24:b6:65:8d:7b:0e:66:93:cf:ff:4f:75:b5:12:
         54:73:46:9e:ff:f9:8e:c6:d7:ef:ee:f5:19:7c:75:8b:77:f7:
         02:ed:e6:ec:7b:81:b7:43:56:b9:0e:91:bd:14:fa:32:8a:8c:
         c1:d3:38:e6:15:cb:87:68:ef:10:fe:ad:98:0e:85:2c:68:fb:
         f0:58:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:11:06 2026 by rpki-client