Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
File:                     J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json)
Hash identifier:          qQpsI6uIVItkYuATjscE675PfHVSen8REovFleIOFCg=
Subject key identifier:   77:B7:0D:2E:7A:D0:79:93:47:EE:56:ED:C9:A6:13:E7:74:92:87:86
Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB
Certificate issuer:       /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
Certificate serial:       0760
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
Manifest number:          0757
Signing time:             Tue 06 Oct 2026 21:55:51 +0000
Manifest this update:     Tue 06 Oct 2026 21:55:51 +0000
Manifest next update:     Tue 13 Oct 2026 21:55:51 +0000
Files and hashes:         1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: sdMh7OvbQ4dcZnRoi2JwjhvnoS7taCOZtRaAuDXGUSs=)
                          2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: smcKZZnkMoei6zhQPadbstenrV1to2stgzo+Uy+BIDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl
                          rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189261, serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
        Validity
            Not Before: Oct  6 21:55:51 2026 GMT
            Not After : Oct 13 21:55:51 2026 GMT
        Subject: CN=6ac56e67-1c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:6e:f1:e6:9e:d6:a9:fd:e9:5f:1a:78:54:
                    cc:ad:b7:d5:9c:ee:07:6a:39:4a:09:54:ee:d0:87:
                    76:b5:7b:4b:2e:8b:1e:8a:43:9f:79:9c:d3:e1:61:
                    be:2c:e8:74:82:bc:e2:9a:f8:11:25:85:cf:64:d3:
                    33:76:8b:93:76:7b:5e:af:fa:c4:95:d1:d6:1e:be:
                    68:ed:d6:6e:a4:c3:72:dc:26:f2:f1:5c:2e:e7:f4:
                    50:16:b1:bd:df:86:df:52:0c:65:96:01:3d:3c:1e:
                    68:d4:ee:ea:28:c3:ed:a4:99:05:d6:c4:df:4b:48:
                    4d:66:eb:4e:b6:15:8d:ba:e6:a6:7c:93:8f:f4:58:
                    73:14:ec:ef:51:f2:61:21:a4:40:9a:5b:0a:c7:dd:
                    ff:83:75:98:21:da:43:2e:97:df:c5:e6:60:a8:b4:
                    3e:75:1e:0c:a4:aa:44:94:80:a4:e0:ef:35:da:b3:
                    8a:2b:98:68:be:ea:99:e8:b1:8d:fc:78:68:9a:52:
                    c5:15:d0:96:35:c8:68:e8:17:09:bd:cc:e4:8c:93:
                    29:5d:0b:98:fe:72:9b:1e:1e:c3:92:16:2a:d5:d3:
                    30:d6:65:ec:ba:6a:92:56:54:41:a9:f7:66:c2:9c:
                    be:97:22:37:bb:7f:7e:b5:97:ea:f0:09:8e:7b:ca:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B7:0D:2E:7A:D0:79:93:47:EE:56:ED:C9:A6:13:E7:74:92:87:86
            X509v3 Authority Key Identifier:
                keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:17:31:c0:69:e4:67:50:e4:2d:a6:a2:25:37:22:4f:b2:25:
         0b:1e:cc:4e:f0:c4:b8:27:b4:c2:ff:30:6e:20:58:8d:49:ec:
         f1:6b:68:53:bf:bd:21:43:ea:ac:37:e3:92:03:43:49:e3:14:
         37:b5:fb:da:02:47:a8:6a:dd:7f:94:be:ff:88:a5:25:bf:40:
         b7:57:a5:15:b1:21:dd:47:d8:fe:ca:e4:b2:7f:0b:b0:88:a9:
         37:28:13:18:7d:09:d9:e4:18:84:56:19:8a:fc:7b:57:40:d3:
         16:57:a5:c7:c3:f5:19:47:31:db:39:77:19:c8:f9:e9:5e:19:
         15:5d:8a:19:d1:8f:46:2f:aa:c3:e1:9d:e8:97:6b:44:6e:7a:
         cc:eb:ad:e1:8b:b1:0e:b2:8d:68:74:0d:a8:90:7a:47:89:cc:
         97:20:a3:62:a5:70:3f:35:a0:0d:be:9b:0e:b3:ce:e3:3f:bd:
         93:b5:b7:dc:57:1c:d2:df:51:bb:fe:bb:6d:89:f2:0b:74:61:
         23:c1:5d:0e:86:96:fe:a0:9d:a5:76:d0:ea:3e:3e:69:fe:0b:
         e9:d9:b0:95:75:68:f7:db:9c:60:6c:a7:c1:f5:d0:1f:a9:eb:
         f7:a5:95:79:e1:76:1a:f1:8b:db:d9:4a:77:71:17:51:9a:91:
         50:26:19:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:27:10 2026 by rpki-client