Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
File:                     JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json)
Hash identifier:          YFDjfyms0RLUQ81iwmOZap1UMLbJPPuPQJXE/26Br5w=
Subject key identifier:   E2:A9:AA:9C:41:45:96:4A:36:28:BA:F3:16:20:12:DD:C3:AD:3F:98
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Certificate issuer:       /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial:       0D54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
Manifest number:          0D40
Signing time:             Fri 02 Oct 2026 18:28:33 +0000
Manifest this update:     Fri 02 Oct 2026 18:28:32 +0000
Manifest next update:     Fri 09 Oct 2026 18:28:32 +0000
Files and hashes:         1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: E9lSgEko/hw35+W5nG6+RtvZBJ6ZvMmdMWz2zycBhe4=)
                          2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: XdeY3ZDU1gYVo5EdHhvTECPUKXRrCiVs/YpC5WS4lcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3412 (0xd54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
        Validity
            Not Before: Oct  2 18:28:32 2026 GMT
            Not After : Oct  9 18:28:32 2026 GMT
        Subject: CN=6abff7d1-f538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:d3:84:e0:7c:4a:02:b4:9f:80:1b:d9:83:
                    a4:c1:b6:6c:7a:6a:5e:c1:a2:3c:18:3a:2b:99:d8:
                    0a:be:08:75:86:78:e8:31:6c:fe:bd:b4:10:8e:ea:
                    1c:42:2e:0a:fa:27:bc:34:f2:87:9a:db:30:f0:bc:
                    bd:a9:19:6d:d1:72:8a:c3:75:b2:29:45:9d:08:d8:
                    8e:10:d6:b9:a0:c9:fd:b0:d1:57:94:2f:5d:4b:d2:
                    63:47:f8:bb:57:a6:64:85:09:2b:c7:d9:cf:9a:51:
                    de:5d:36:e3:9a:ac:c8:50:9f:ff:b2:74:9f:2d:87:
                    da:78:8c:25:b5:be:33:3c:de:3c:7b:37:89:45:78:
                    61:8e:ea:47:57:b8:cf:8d:5e:f4:cf:47:e7:b8:53:
                    b0:6a:ab:64:d0:63:5b:09:d7:60:75:64:1f:32:4f:
                    05:9d:f5:f3:59:f8:f3:47:db:e1:d7:ca:c1:91:60:
                    63:08:3c:2c:c8:e2:18:05:1e:21:78:67:ab:d4:86:
                    e7:dd:e0:80:57:8e:66:92:cd:8b:64:5b:84:3d:af:
                    46:b1:37:21:f5:92:86:fb:00:67:3f:c4:67:b5:b5:
                    60:ef:ed:23:c4:5c:83:05:98:68:c8:61:b6:89:21:
                    0f:6e:c2:a7:b2:7f:23:73:b3:a6:e5:4a:07:8d:13:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A9:AA:9C:41:45:96:4A:36:28:BA:F3:16:20:12:DD:C3:AD:3F:98
            X509v3 Authority Key Identifier:
                keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:18:48:d4:da:2e:6d:44:18:fc:2b:61:89:50:e6:20:ce:20:
         b8:62:52:b7:d0:99:1e:76:3f:a1:97:bb:e9:7e:ec:7a:ac:c1:
         f9:96:45:2d:ac:f8:96:53:f0:60:b4:a9:cd:1c:79:4c:11:c3:
         b8:e9:bf:e8:b6:b7:6f:b2:9f:27:76:95:ad:eb:f2:1d:f8:df:
         2a:23:15:27:23:75:ca:e1:bf:96:ba:df:4d:9f:61:a8:bf:a3:
         a9:a6:6d:ce:d6:98:e1:38:ca:09:3b:81:be:f6:ae:7e:d1:c0:
         74:e7:8f:83:36:8d:3a:8f:30:3b:c9:66:43:1b:13:66:d2:19:
         e4:a4:b7:1c:3c:45:be:11:c2:c5:98:ed:4b:7c:1d:e3:c1:04:
         51:b2:92:fa:73:10:27:18:b7:23:dd:89:1e:8a:24:43:f0:98:
         10:69:37:fc:dd:af:6f:f1:43:a6:62:5f:f1:fa:7a:63:5e:26:
         5d:29:00:e4:50:25:e7:6b:a1:fd:cb:eb:50:ad:56:fe:42:c5:
         4b:bb:7b:5d:4b:8e:14:a1:a0:1d:ed:55:de:cb:a1:35:96:42:
         d4:40:75:e5:c6:c5:32:a7:3b:93:2e:bd:77:88:fb:13:73:63:
         7d:02:46:56:78:37:05:17:53:e0:92:a5:98:dd:52:5a:e9:71:
         c9:53:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:39:47 2026 by rpki-client