Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
File:                     J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json)
Hash identifier:          z8tvSV4S/gRh5X5GhUipx6FF/cjpO9Gc1ATsumybX6c=
Subject key identifier:   7D:D9:5F:5B:91:02:67:6B:5A:04:F4:81:6D:E0:3A:A6:70:FE:76:56
Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
Certificate issuer:       /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Certificate serial:       0381
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
Manifest number:          0379
Signing time:             Fri 25 Sep 2026 00:37:27 +0000
Manifest this update:     Fri 25 Sep 2026 00:37:27 +0000
Manifest next update:     Fri 02 Oct 2026 00:37:27 +0000
Files and hashes:         1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: bozalKHPeIlqJWTZqxBs6Zp3qd/Z9KDZT01XEBUcQPg=)
                          2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: ZS5cuNMtd6yQQN38E7lp5FQ2jmo2L2QBDwPjFbM0irs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
                          rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
        Validity
            Not Before: Sep 25 00:37:27 2026 GMT
            Not After : Oct  2 00:37:27 2026 GMT
        Subject: CN=6ab5c247-4203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:69:88:a5:0b:ea:ed:44:f9:0b:8c:ae:eb:
                    89:b9:cd:ab:9c:5c:5e:a1:8f:b0:83:7d:e1:4d:d1:
                    b0:89:82:64:f6:78:45:4d:d4:07:2e:0b:49:00:e7:
                    63:60:b7:80:00:a7:63:d9:fa:28:b8:c7:8f:63:e4:
                    39:4c:0a:4d:03:eb:08:e7:0e:42:a6:1a:6d:0b:b3:
                    af:2d:ad:5a:f6:f5:76:62:da:72:b2:6c:e0:7a:3c:
                    17:1f:d4:85:e2:dc:be:16:ab:b3:84:0d:ea:05:26:
                    ec:bc:f0:2b:50:20:14:90:a9:4f:c1:66:b8:89:ff:
                    b0:cc:a5:35:b6:85:99:f6:f2:ec:c4:19:fd:02:49:
                    60:df:8e:d9:01:18:43:d9:d2:bc:ad:66:82:0c:6d:
                    98:51:7e:c2:6d:84:a7:40:46:79:95:e0:5a:31:34:
                    59:41:33:7f:d2:46:2e:11:8e:5b:7e:55:56:e6:16:
                    a7:24:6b:a0:f2:7d:47:9a:6a:4d:35:8d:82:99:fb:
                    0c:9c:05:d5:11:b2:37:6e:9d:7c:64:0b:8a:a9:81:
                    d5:b4:0b:a1:8f:8c:f7:31:ee:b9:51:ac:98:78:87:
                    ff:f1:df:53:9b:07:01:0f:a4:a8:59:fd:0d:eb:60:
                    10:da:1b:2e:76:06:35:33:46:69:29:ad:cf:64:e5:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D9:5F:5B:91:02:67:6B:5A:04:F4:81:6D:E0:3A:A6:70:FE:76:56
            X509v3 Authority Key Identifier:
                keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f2:5e:fa:21:3f:90:c9:e0:1f:a3:7f:d4:74:65:0b:44:34:
         ed:b4:8c:47:73:2a:c6:93:3e:d9:67:45:b0:6c:ec:bb:c5:47:
         da:f5:ff:5e:ef:c8:43:fa:98:e0:ad:6c:7f:01:c2:df:44:71:
         42:20:fa:69:33:74:a4:24:92:9b:5f:5a:c3:76:40:7a:22:57:
         fd:47:85:65:c2:0d:9f:6c:cf:b0:d8:9f:56:72:a9:bc:b9:5a:
         a9:37:4b:36:d1:c3:b0:5c:37:e9:58:f3:ab:3c:6a:b4:c0:10:
         03:ae:d9:9c:6a:26:d2:49:2a:bd:f6:24:bb:22:26:26:eb:1b:
         77:ee:0f:f4:c3:41:7f:d7:e2:04:ba:f8:5a:a6:86:ac:bd:1a:
         71:3c:4d:b4:30:e2:b0:49:0a:80:90:7f:d6:cd:b9:0f:df:f4:
         52:94:fc:26:27:96:6b:34:73:aa:a3:03:9a:51:fe:d5:b4:87:
         dc:4a:8b:6c:94:72:21:a7:9d:7b:a0:b1:ca:46:d7:10:f7:f6:
         f3:05:7f:ac:80:67:35:c3:02:9e:e1:3f:10:e7:4b:3c:57:08:
         6f:7f:04:b7:c5:62:22:56:b9:22:3f:ce:79:38:e8:23:85:d9:
         67:bc:e4:44:e1:a9:cb:75:80:ab:43:62:37:dc:4d:dd:70:56:
         80:88:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:12:41 2026 by rpki-client