Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
File:                     JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json)
Hash identifier:          l+CEDzd31dJ7sBW4sJDxve40xltIBuvwhuwfgbwSJaQ=
Subject key identifier:   03:1E:64:F4:6A:B8:13:9D:C4:73:A5:EB:68:95:01:9E:98:2C:B9:BF
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Certificate issuer:       /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial:       07A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
Manifest number:          0787
Signing time:             Tue 22 Sep 2026 21:22:49 +0000
Manifest this update:     Tue 22 Sep 2026 21:22:49 +0000
Manifest next update:     Tue 29 Sep 2026 21:22:49 +0000
Files and hashes:         1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: ZfbU57BsXYIIuIpX46SDdVHRUTqUlGtjJmYkWULaCiE=)
                          2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: q8cbKWLvvyLvTMbK4mDN66pYpaxsNmBZr6NUnR98D1c=)
                          3: wGMFEtWKv7IEdpH19gijgQ7SEc4.asa (hash: 39dk5DpscdUyb02jf4UqqfmERYFijRNZqe3pLYmqhT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
                          rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955 (0x7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197227, serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
        Validity
            Not Before: Sep 22 21:22:49 2026 GMT
            Not After : Sep 29 21:22:49 2026 GMT
        Subject: CN=6ab2f1a9-7149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:03:b4:34:fd:75:90:af:f4:6b:01:30:a2:
                    2b:ae:59:bb:db:16:94:d1:08:ac:8b:d2:5c:4c:0e:
                    ee:be:9b:6d:8a:39:f8:cc:3f:20:d6:38:42:49:7a:
                    55:6f:1f:3d:69:21:6a:9a:d4:96:fe:89:50:0a:31:
                    e6:c9:d1:c4:ac:60:63:7d:43:29:2b:03:25:34:7d:
                    80:ba:1b:03:bf:12:26:82:14:57:7f:df:14:e1:41:
                    81:ad:ef:14:d9:f5:7e:b4:28:7f:4d:6c:22:1a:4a:
                    48:4c:51:5b:d0:5d:b7:2d:ae:89:eb:bd:17:ea:ec:
                    93:bd:f1:c3:c3:6f:7f:16:15:20:2c:d3:d7:94:4b:
                    27:1e:3f:65:7a:d4:3d:81:72:a7:9e:14:0b:16:55:
                    b2:d5:42:48:18:79:e3:dd:06:46:05:49:99:60:ab:
                    aa:c1:60:82:26:be:5d:d7:0c:cf:eb:94:07:65:d3:
                    ba:c1:d1:33:7d:fb:bf:21:34:2b:b3:c3:7b:37:9d:
                    69:15:01:b5:4e:cd:8d:06:75:e5:46:9c:87:30:db:
                    31:d1:0e:d2:0b:62:64:b8:9d:97:99:44:67:4c:d6:
                    be:f6:da:41:0f:73:c5:24:bd:8c:a5:8b:9a:0c:d8:
                    c4:b1:db:60:81:d3:9e:c7:28:f8:a9:02:4e:3b:ec:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1E:64:F4:6A:B8:13:9D:C4:73:A5:EB:68:95:01:9E:98:2C:B9:BF
            X509v3 Authority Key Identifier:
                keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:4a:90:b9:5a:05:4a:06:61:7b:4c:35:d5:fb:f0:78:ee:
         07:2f:11:7f:8b:a7:4a:a2:83:b5:80:87:36:92:31:3e:f1:91:
         1d:41:be:dd:0d:60:0d:96:e9:b6:91:9a:cf:68:e2:2b:1a:92:
         32:ee:d6:31:c2:46:d1:7d:cb:ee:13:65:60:4a:c2:73:09:6c:
         cb:3d:67:5c:17:c1:5a:51:d7:e5:83:a6:7c:91:91:99:3a:0c:
         cb:77:22:0c:92:1c:2f:77:55:79:5b:7e:6f:48:ed:a5:e9:25:
         b8:ff:8a:4c:cb:d6:96:e8:56:f0:fb:72:64:37:5c:ee:71:04:
         7a:e4:5d:dd:6c:ea:15:59:e0:13:ca:eb:6a:d0:87:1b:05:a1:
         04:30:d1:de:50:e6:b2:ba:0f:ed:32:6e:a0:e9:5a:70:25:61:
         3d:05:4f:0f:b9:f0:c9:01:bb:78:3c:d3:0a:19:96:2b:a0:65:
         81:d6:bb:e2:d9:04:c5:30:e4:f3:d0:33:02:08:24:8d:36:ca:
         73:16:c5:3e:22:3f:a2:36:d2:6f:ba:89:11:2f:6d:74:e0:53:
         21:f7:f9:87:6e:98:b1:b2:7a:ba:62:c7:d8:e0:94:4b:41:64:
         2d:08:63:61:a9:f1:07:13:92:74:b0:a5:c3:8d:b8:f8:a1:2d:
         1f:59:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:37:48 2026 by rpki-client