Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
File:                     j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft (raw, json)
Hash identifier:          xxqnssV5pESnUojcv/wGmgJUAou2i4aYDnO8remLBuk=
Subject key identifier:   9B:7F:E2:75:5F:07:F6:8C:4E:F6:FC:5F:28:54:04:56:31:16:46:76
Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
Certificate issuer:       /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Certificate serial:       08B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
Manifest number:          08A2
Signing time:             Fri 02 Oct 2026 20:56:25 +0000
Manifest this update:     Fri 02 Oct 2026 20:56:25 +0000
Manifest next update:     Fri 09 Oct 2026 20:56:25 +0000
Files and hashes:         1: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl (hash: OspfiefF0XPJweXtaUPurswsrw4DeNTkJGcBSTLx0bA=)
                          2: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (hash: KzpDIugbV8vHQ/gYQ5pO+EKoT/0uahv1Vz2s5knDV8s=)
                          3: 706E023CD46911EE9E90881CC4F9AE02.roa (hash: Dj/qSt0IyssQ+QhMMN6zLmyTN4hQ3eLX7SkT6291BOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
                          rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227 (0x8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
        Validity
            Not Before: Oct  2 20:56:25 2026 GMT
            Not After : Oct  9 20:56:25 2026 GMT
        Subject: CN=6ac01a79-9a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b3:7a:3e:9d:79:9e:2f:fd:e3:53:34:0b:d9:
                    68:29:90:ec:b8:e0:b2:a6:24:b5:14:5f:3a:4a:b3:
                    b5:1e:1b:9a:03:96:fd:fa:49:02:7a:e8:45:f6:39:
                    f7:4a:1a:9f:9f:0c:02:55:7e:d2:2a:6b:fe:d1:a7:
                    27:2f:d6:47:c8:e5:bf:fe:f3:06:8f:41:6a:56:56:
                    79:04:09:e1:ee:b0:dc:fd:e2:ab:a0:f7:8c:e3:44:
                    9a:05:48:6c:83:5e:e1:7c:b3:05:03:2d:98:a8:c9:
                    74:18:f6:a4:8d:9d:0e:b8:ee:98:dc:fa:cd:db:81:
                    b9:03:26:7d:ee:6e:a5:b2:ac:5f:b6:91:24:17:66:
                    59:88:be:0b:55:55:b8:d1:d3:ef:bc:61:07:7d:01:
                    83:05:d2:9b:f3:73:a1:77:b0:45:47:c6:1f:5b:90:
                    a0:2e:c7:a3:67:77:bc:b8:bd:a8:43:75:0e:66:d5:
                    7e:14:4d:3c:b2:3a:9a:84:48:69:73:4f:37:a9:0e:
                    cb:40:e9:f3:4e:41:40:5c:85:25:14:08:bb:91:d9:
                    2f:89:d1:c0:6e:94:86:3f:c5:4d:e3:3f:5f:8d:4c:
                    1b:ff:1b:bb:39:20:a0:3c:b8:a8:30:b5:3a:0f:5b:
                    78:06:01:41:10:68:b2:d3:d6:ae:1a:56:d7:e8:84:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7F:E2:75:5F:07:F6:8C:4E:F6:FC:5F:28:54:04:56:31:16:46:76
            X509v3 Authority Key Identifier:
                keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:95:b7:ec:d2:d1:70:e5:dd:c0:b3:98:d3:e7:e3:16:57:6b:
         8d:88:d6:55:6f:ed:55:00:88:88:ef:17:01:1d:dd:f9:52:f1:
         86:e3:3a:5a:7b:b3:76:18:6d:29:f5:31:98:34:77:67:c5:b2:
         27:86:16:f2:88:13:a4:a0:b1:da:c1:7e:13:79:99:8e:9b:69:
         4b:84:b3:8c:65:09:cd:9d:5e:e5:04:b1:77:da:ae:35:06:c1:
         a7:b8:78:15:ee:44:a0:2f:85:17:c1:ab:1a:e1:bf:26:f0:8e:
         f7:49:8f:00:73:20:a3:d4:c9:66:de:82:91:69:4d:82:f0:af:
         01:6f:b1:0a:95:71:a4:7f:f0:cb:6e:f8:62:76:83:18:1e:0d:
         15:04:c3:8d:bd:1f:b0:da:6d:99:3c:e7:7b:76:e0:c0:58:39:
         da:cb:48:c9:50:3a:59:09:e5:d1:60:f2:76:29:fd:89:4f:4c:
         ef:97:25:3f:fd:cf:5d:db:bc:af:10:a8:cd:6e:05:6a:59:5e:
         e1:b6:be:08:10:29:32:73:e9:1c:e8:de:6e:a3:79:f4:7c:72:
         57:ec:7d:a6:7f:f8:c6:88:9e:96:26:92:58:ec:dc:cf:62:fc:
         d1:ed:ed:30:e6:2f:54:d7:0e:be:37:ac:11:f5:f1:aa:f6:d2:
         62:06:42:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:41:56 2026 by rpki-client