Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
File:                     JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json)
Hash identifier:          NzRgklGWIY4s3xzJVr5PRq5HEmkVBZPidhhqg4/jC/k=
Subject key identifier:   23:39:BE:73:2E:EC:10:57:ED:23:8D:D6:99:D3:88:8D:53:D3:4B:A1
Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
Certificate issuer:       /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
Manifest number:          0196
Signing time:             Fri 25 Sep 2026 04:26:11 +0000
Manifest this update:     Fri 25 Sep 2026 04:26:10 +0000
Manifest next update:     Fri 02 Oct 2026 04:26:10 +0000
Files and hashes:         1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: i4A1hXk/T78gQfxJQw7htPDqFiXfHaIqQehT1GgJ7K0=)
                          2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: LnRu3y5FK0c9/6yRLfxxPZMmJU8jYnOQx/u6NtpxAew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl
                          rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
        Validity
            Not Before: Sep 25 04:26:10 2026 GMT
            Not After : Oct  2 04:26:10 2026 GMT
        Subject: CN=6ab5f7e2-706e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:5a:0f:14:1a:b7:9d:c4:b1:ea:ac:a3:ee:
                    5d:8a:72:b9:6b:a1:db:7b:28:8c:c9:9a:a7:42:dc:
                    ab:d0:13:83:2f:1c:23:fe:29:83:63:51:19:bb:f4:
                    fa:17:89:f4:19:16:75:84:a2:5f:1b:b0:8d:87:3b:
                    8f:be:2f:fe:09:48:64:9a:fd:53:07:e1:80:e8:4c:
                    30:67:39:b9:e7:3b:a2:ca:87:e6:33:e6:0a:3a:be:
                    df:47:0c:c5:a7:d5:a4:e6:a4:12:56:2d:93:a4:4e:
                    f7:20:03:44:b1:16:2b:0a:9d:67:51:d1:9e:20:b2:
                    f2:d9:63:84:05:13:75:84:36:f6:1b:a6:90:87:cd:
                    9a:a2:6e:a1:3d:ad:6c:f9:cc:9c:9c:53:94:fd:96:
                    8c:d1:ab:5d:17:08:c2:5f:b5:99:dd:b2:8a:27:71:
                    ab:7b:fe:d4:65:b5:f2:c9:65:a3:d7:5c:d8:01:9c:
                    8f:93:07:b8:54:3a:43:dc:05:f6:54:f5:ed:f5:f7:
                    5f:4a:57:59:61:9a:c6:4f:93:83:25:f3:a2:26:95:
                    d5:35:a2:f5:69:61:5d:0d:ce:db:1f:c4:03:d1:13:
                    a1:a7:5d:ed:e2:ac:76:cc:97:fc:74:5c:9a:2b:55:
                    12:f1:ac:ed:08:4b:5d:7c:80:78:60:81:16:11:94:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:39:BE:73:2E:EC:10:57:ED:23:8D:D6:99:D3:88:8D:53:D3:4B:A1
            X509v3 Authority Key Identifier:
                keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c6:71:33:12:ae:3a:30:c7:73:a7:4c:67:85:d6:d5:ee:b2:
         93:a9:6a:3f:a6:b0:ed:63:58:bd:d0:72:e8:93:4e:f4:f7:87:
         64:5b:00:11:c2:84:4b:56:b0:0a:b6:33:5b:21:e0:6f:94:9d:
         72:22:39:59:de:9b:39:16:6c:c4:b8:b5:8b:91:e7:cb:e2:6a:
         2b:21:2b:46:be:6b:f0:79:97:7f:75:9f:36:4a:66:cc:d3:cf:
         e6:d3:31:6b:57:2f:7c:19:62:2a:5e:83:2e:90:da:2c:b4:c8:
         6c:a9:43:87:d4:f7:1b:8a:26:b5:b0:b9:b6:13:7f:7b:cf:af:
         7c:4c:c3:a6:55:8c:fa:80:30:91:c0:b7:d1:60:94:29:6c:5f:
         8f:f6:c8:83:ca:2f:51:31:22:37:08:a8:fc:1e:1d:50:38:65:
         9e:34:ca:1d:cb:24:3e:0d:97:4c:a1:6b:3b:41:5d:b3:59:95:
         99:90:c8:46:23:fb:53:12:ec:41:33:57:32:2f:3f:08:1f:19:
         ea:ae:4c:c4:10:f8:2a:7f:98:5b:25:e5:1c:82:7c:ef:ae:a8:
         dc:cc:2b:99:88:84:61:36:25:b9:8e:74:9e:df:21:07:56:f0:
         d2:3c:67:bb:83:4d:03:a7:39:a1:33:aa:87:3f:a1:4d:47:42:
         b5:09:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:01:32 2026 by rpki-client