Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
File:                     JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json)
Hash identifier:          dKwJ35Bt42XStZSFvli1fv8I1LnjYF6TpavwoZXdrGM=
Subject key identifier:   77:64:FE:E8:43:81:CB:45:46:57:41:BF:F8:29:F3:0B:06:C9:0B:A4
Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Certificate issuer:       /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
Manifest number:          D3
Signing time:             Mon 21 Sep 2026 06:40:51 +0000
Manifest this update:     Mon 21 Sep 2026 06:40:51 +0000
Manifest next update:     Mon 28 Sep 2026 06:40:51 +0000
Files and hashes:         1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: ICJ78oAYlNtPC+3JHbB6aHgh+ZbVfUJhpQF4pS0cnkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
        Validity
            Not Before: Sep 21 06:40:51 2026 GMT
            Not After : Sep 28 06:40:51 2026 GMT
        Subject: CN=6ab0d173-d6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:ab:67:28:71:ea:44:ea:d0:ee:cc:b3:46:
                    cc:76:30:80:75:bc:6f:85:eb:c3:07:e7:9c:c4:bd:
                    8c:7d:34:2e:40:68:f7:2d:52:c2:0d:81:97:56:94:
                    31:51:a5:fb:3e:6f:97:02:08:ea:b8:31:d1:b1:64:
                    fc:c3:6d:73:35:a1:68:2b:52:c5:9d:e9:ab:f2:27:
                    55:c2:90:41:e0:35:ba:be:38:6e:19:2e:8e:40:67:
                    fb:7e:f4:ca:50:4f:a7:01:fb:8e:9a:7a:86:e5:b7:
                    54:ce:ac:46:0d:1f:65:ed:e5:56:de:6f:4f:71:26:
                    07:9e:4c:77:bf:30:20:d7:db:1d:63:21:33:2e:d5:
                    4d:02:98:6f:49:3e:ef:79:c6:3c:84:4a:d7:28:98:
                    29:40:a2:ac:c5:45:8b:b0:c0:2c:6e:8f:d2:8d:92:
                    9d:48:6b:44:55:13:8d:66:bc:06:7b:0b:fe:58:c9:
                    6e:69:88:e7:e5:98:53:ce:35:12:dc:d5:7d:fd:65:
                    0c:c6:8d:37:4f:50:27:24:7d:3e:c3:35:b7:9d:57:
                    de:12:f1:9f:35:a5:94:b7:1b:38:10:fc:f5:7e:da:
                    a3:e1:ac:92:e1:c3:2b:ff:77:72:38:7e:87:bc:7a:
                    6e:05:88:39:0d:e2:f5:5a:49:04:8f:2e:e5:09:5d:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:64:FE:E8:43:81:CB:45:46:57:41:BF:F8:29:F3:0B:06:C9:0B:A4
            X509v3 Authority Key Identifier:
                keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0a:92:75:b8:d5:65:f0:ae:a7:2e:a6:f9:72:8f:ed:00:78:
         7c:a0:40:c5:ec:bf:a6:9c:4f:79:2d:98:95:20:3c:89:28:5a:
         11:a7:22:ec:e7:75:a1:40:cf:45:51:9b:cd:97:82:51:2c:ab:
         88:44:f3:37:0b:0c:c2:87:f5:fc:dd:e0:df:8c:4c:c1:50:32:
         b6:39:dc:0c:ab:04:25:f1:4d:e3:3a:ba:8f:0f:db:f6:c4:40:
         fb:d5:14:ba:eb:cb:20:2e:ca:d1:1e:50:1c:23:d1:56:d1:90:
         68:6c:eb:3c:df:80:96:be:78:6f:7d:3c:79:24:c0:c7:ab:a5:
         58:97:17:d2:c9:18:4d:dc:ea:5f:2b:2a:15:44:15:f1:c0:be:
         0a:30:85:3f:85:d9:cc:79:27:23:79:38:b2:80:c4:1a:34:96:
         b9:91:55:ca:4c:0b:6c:0a:cf:3d:a3:20:e2:b2:73:13:c3:10:
         05:e2:b3:f4:db:08:68:95:35:49:86:cf:98:e8:c7:7f:28:48:
         c4:d4:bb:15:97:f2:dd:99:01:59:49:26:7e:27:04:fe:2b:db:
         73:58:f0:17:69:c8:3f:77:47:d8:ab:92:de:7a:6e:a6:23:d0:
         c3:4d:8d:a0:8b:c1:d6:8f:33:f3:fa:7f:1c:0b:9f:0e:e1:66:
         37:41:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:29:05 2026 by rpki-client