Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
File:                     jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json)
Hash identifier:          w4yFgeiRrKyjxd+cZZiMIGwR0yxPhBfwZkI7l0RaRDs=
Subject key identifier:   DA:D5:7F:7B:EB:23:A7:37:04:2A:C7:06:9A:C0:6D:68:55:AE:41:6D
Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64
Certificate issuer:       /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
Certificate serial:       0D65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
Manifest number:          0D5A
Signing time:             Thu 24 Sep 2026 18:00:27 +0000
Manifest this update:     Thu 24 Sep 2026 18:00:27 +0000
Manifest next update:     Thu 01 Oct 2026 18:00:27 +0000
Files and hashes:         1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: cpoaBp4F7KECrGxKl3h7JcUjp4TKguFk9J0KZKrXUNI=)
                          2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: LKT7IFaOCmRtYDfw8c46CXWIZdujEW6bP/9GOxBiApA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3429 (0xd65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
        Validity
            Not Before: Sep 24 18:00:27 2026 GMT
            Not After : Oct  1 18:00:27 2026 GMT
        Subject: CN=6ab5653b-93d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:c6:6d:49:3f:ac:c8:de:a1:36:0f:fb:c6:
                    3e:ff:5c:56:47:60:e4:fb:39:19:3a:be:bd:2b:50:
                    04:ef:6e:6a:d5:9b:3a:d3:be:2e:5d:27:08:fc:cc:
                    e7:9f:44:d0:6d:3b:25:2e:30:e4:1c:f8:ab:0d:a2:
                    4d:88:2a:4c:8a:58:5b:ed:ea:00:23:d1:6f:ca:1d:
                    99:30:ac:36:8d:bb:1f:5d:7f:6b:76:38:96:99:9e:
                    1b:d4:fc:a7:a2:4c:dd:89:2d:f3:cf:a8:e4:dd:46:
                    ba:a7:ff:47:e1:1e:f8:74:8a:40:12:2e:c6:f3:78:
                    3e:35:6f:e1:7b:55:87:00:74:e0:66:26:3b:3a:ad:
                    be:37:e2:60:ba:08:c0:46:9f:fe:a1:0f:bd:0e:6d:
                    df:72:2f:64:44:0d:4e:15:2f:5a:3a:0a:de:c4:37:
                    0a:d5:e8:49:32:3a:e7:b8:3f:3e:16:8b:13:68:bf:
                    7f:ac:04:fa:e0:72:2c:2c:01:a0:0a:e4:25:6c:01:
                    29:66:52:b0:3a:97:b7:58:e2:de:0c:51:d2:2c:38:
                    15:92:69:38:1e:32:cd:89:62:c6:b6:07:3e:f5:b9:
                    76:4c:08:f9:1d:51:5e:79:62:7f:d5:65:b8:1d:f8:
                    d1:21:d0:21:63:cc:73:bb:cf:e0:8c:6d:68:af:1e:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D5:7F:7B:EB:23:A7:37:04:2A:C7:06:9A:C0:6D:68:55:AE:41:6D
            X509v3 Authority Key Identifier:
                keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:92:df:7f:f4:2c:0e:05:04:e1:19:86:17:f7:14:b7:22:ad:
         07:f1:2a:7e:d4:88:fa:52:c3:90:0c:e7:c2:72:44:8f:81:56:
         28:fe:b3:91:26:a7:9a:3e:5a:0a:fb:3e:14:82:3c:1a:e5:cb:
         29:95:36:90:bc:56:ba:44:a0:7c:59:4f:01:d9:69:5a:32:2a:
         6c:eb:c6:96:5c:df:7c:db:9f:92:59:4a:69:21:f5:79:98:78:
         5f:a7:03:1f:91:eb:24:51:b7:f3:d2:43:47:64:0a:80:a6:c4:
         de:e3:d1:92:fd:a2:07:50:f3:8c:99:67:f4:3e:4e:1d:8c:71:
         45:ec:ea:32:0c:af:0c:f8:2a:67:03:ac:76:aa:1d:f9:d7:4e:
         35:88:b5:ca:e5:93:69:74:4b:16:0f:2a:94:c8:89:98:e0:5b:
         34:9b:84:15:78:a4:e3:16:da:e4:22:a6:58:20:45:c5:f6:0c:
         a9:8c:d8:e1:28:6f:ae:a3:77:9f:23:84:8d:39:c9:27:44:1e:
         77:50:42:56:69:23:0a:b8:0b:fb:1c:47:71:06:4c:11:f0:4f:
         ec:b1:68:e6:b0:03:f9:a6:99:57:cb:f1:eb:2d:bf:a8:99:46:
         e1:75:39:c9:62:71:98:b5:11:57:3d:62:88:ea:51:bd:0e:bf:
         1d:d9:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:04:38 2026 by rpki-client