Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
File:                     JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft (raw, json)
Hash identifier:          4bjV2K8B3kBFOCBd9N7muCXCSCNMOjp9UQsBy4/ZFRI=
Subject key identifier:   CB:AD:1F:73:3F:B9:89:74:00:07:A6:F9:79:BC:C5:5C:80:E3:51:FA
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Certificate issuer:       /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
Manifest number:          01AD
Signing time:             Sun 15 Nov 2026 04:22:38 +0000
Manifest this update:     Sun 15 Nov 2026 04:22:38 +0000
Manifest next update:     Sun 22 Nov 2026 04:22:38 +0000
Files and hashes:         1: JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl (hash: LNkUZ0OQwCevBj/B4oE+1HwaDy8sev6JczcFqleYSmQ=)
                          2: DBAEB8B0ABF011F08F2FF00BC4F9AE02.roa (hash: u23FB+guonR/g8Bs9AVntNN8XZjIlu0ZJiya6lu6OcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1FF1, serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
        Validity
            Not Before: Nov 15 04:22:38 2026 GMT
            Not After : Nov 22 04:22:38 2026 GMT
        Subject: CN=6af9338e-392a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:40:b0:f2:0c:ab:42:c6:24:e5:97:d6:5f:
                    44:8d:b2:32:82:c6:86:a4:4d:bf:df:d8:f8:a2:fd:
                    de:1f:fc:91:f2:98:bf:fa:3e:fd:27:45:cf:84:27:
                    00:0f:28:bf:dc:e5:88:16:13:34:d8:50:55:c7:67:
                    0b:ff:bb:e9:dc:d3:4f:54:33:4a:57:6c:93:aa:bc:
                    48:be:87:ab:21:99:27:12:84:09:16:af:63:99:50:
                    a6:89:f0:6d:e1:7f:f5:45:eb:19:98:17:2b:a0:a9:
                    b0:1a:03:33:de:e1:23:62:3a:be:e2:9e:d6:dc:eb:
                    92:35:18:f3:07:62:13:6c:57:41:89:0b:a5:f1:e1:
                    c2:b6:46:b6:51:d3:3f:e9:f1:11:bd:6c:ea:44:6b:
                    ef:bd:e0:39:7b:e5:64:9f:48:ed:43:c1:db:aa:af:
                    db:99:d7:0c:37:da:40:01:ef:a7:47:be:23:97:f1:
                    67:14:bd:25:41:71:95:38:41:c7:46:5d:a4:27:f1:
                    b0:31:6b:99:0a:47:61:a3:ca:d3:a0:65:f9:a3:08:
                    8c:94:df:b8:63:a2:90:e5:a4:f2:e0:ac:d7:77:cd:
                    f5:ac:e7:b7:25:2b:1a:f0:b0:87:48:b3:06:82:a6:
                    a6:28:7b:0e:88:be:3f:c7:63:07:21:ee:4a:a0:38:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:1F:73:3F:B9:89:74:00:07:A6:F9:79:BC:C5:5C:80:E3:51:FA
            X509v3 Authority Key Identifier:
                keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:7e:50:d4:09:80:5a:dd:d3:8a:44:d8:c8:39:5e:b7:1b:
         0e:fd:99:4f:29:aa:32:d2:1b:02:ca:5a:9d:46:9f:39:31:e5:
         37:a2:5a:5e:b1:35:d0:50:a0:a0:3e:ef:11:99:97:b4:8b:96:
         ec:65:ac:c7:fe:be:11:61:90:d8:d2:5a:f6:51:2e:d4:01:48:
         4d:c7:d5:4d:fe:30:14:37:16:28:8c:5e:26:b0:7d:cc:2e:8a:
         14:03:2d:d1:63:70:15:c8:53:7f:a4:dd:d1:f0:79:11:a5:dc:
         ca:91:b0:62:18:2a:a7:f6:62:8d:1c:31:37:bb:ad:31:9c:d4:
         e4:a9:ac:52:e1:f7:c6:22:a1:1e:41:15:00:07:24:f9:b6:25:
         81:e6:2e:20:22:4f:a4:04:b6:d9:46:12:03:06:be:b8:f5:3b:
         01:a4:79:3b:9e:77:9b:34:26:e3:77:88:d4:61:ee:50:d5:91:
         fa:d1:00:e5:5c:bc:37:c2:69:f7:27:3f:05:3a:7e:9f:b3:a7:
         23:7b:2e:fb:ba:bf:57:0d:1a:82:f6:0b:92:9e:5a:72:93:32:
         4c:51:27:18:35:c7:76:8e:0f:37:ab:80:13:99:bf:52:31:40:
         67:b4:41:b0:4c:5d:ff:47:5c:75:9b:25:63:d5:a5:eb:67:ef:
         b2:78:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:52:32 2026 by rpki-client