Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
File:                     ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft (raw, json)
Hash identifier:          W7U0i+GwqgF/+BHlQ5LJ7dZPqb/HnbnL6d5EGVPvQz4=
Subject key identifier:   F4:81:E6:63:5F:9D:6B:40:BE:96:CF:48:28:CD:2E:05:42:1E:CD:38
Authority key identifier: 8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
Certificate issuer:       /CN=A91A6D85/serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
Manifest number:          0D
Signing time:             Fri 25 Sep 2026 09:20:37 +0000
Manifest this update:     Fri 25 Sep 2026 09:20:37 +0000
Manifest next update:     Fri 02 Oct 2026 09:20:37 +0000
Files and hashes:         1: ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl (hash: ma5vSibYX+sa7dsHxWzYrTqiH7qLRnWiQA4W6+p1+Yk=)
                          2: BCB00D18AA3411F199884E135211F970.roa (hash: ioGTh9GFvQ4kQHCP2Gi/w+boq7++x3V3C4G94SC7Uro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D85, serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
        Validity
            Not Before: Sep 25 09:20:37 2026 GMT
            Not After : Oct  2 09:20:37 2026 GMT
        Subject: CN=6ab63ce5-1f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:03:d8:43:6f:bb:02:57:15:9b:f2:35:8d:
                    9a:c9:d9:52:2d:d8:03:15:af:8f:ad:10:b8:78:9a:
                    80:79:7a:4c:b9:4b:e2:1e:6e:d8:25:b2:f4:95:d6:
                    64:70:3a:63:10:54:2b:f3:e1:32:8f:41:6c:a4:6f:
                    7a:e8:d1:d8:d7:fd:53:ba:07:4b:8c:21:0b:45:6f:
                    e2:49:b7:8f:36:a7:27:a5:75:df:18:2b:08:c7:85:
                    24:d1:9f:1b:41:79:21:6b:be:99:f2:d9:11:39:92:
                    35:6c:5c:11:81:97:ae:c4:76:18:ec:da:e2:8a:d9:
                    5b:f6:e4:09:98:57:13:39:66:05:9a:30:50:8f:be:
                    9c:c9:87:95:3e:73:bb:0e:04:8f:c1:87:39:fa:b5:
                    8c:e4:f9:b5:bc:1a:b5:16:2d:b9:36:d2:89:81:68:
                    fb:23:92:8a:77:48:42:1e:25:bb:81:fb:1f:8f:c7:
                    ac:a7:57:e1:3a:0d:29:71:48:4b:59:fe:0c:b5:fb:
                    17:21:bd:fc:27:f9:78:98:34:1c:d5:05:eb:db:ba:
                    4a:80:3f:d0:61:6e:34:66:a1:6e:7c:b7:74:56:9d:
                    d2:e4:ae:42:c0:ef:63:74:99:26:3f:54:ce:eb:6b:
                    06:8f:33:c8:6c:71:16:3f:d9:71:f4:10:d9:61:cc:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:E6:63:5F:9D:6B:40:BE:96:CF:48:28:CD:2E:05:42:1E:CD:38
            X509v3 Authority Key Identifier:
                keyid:8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:0b:fe:cd:08:3d:e6:85:b0:f3:01:85:fe:ef:4d:f1:93:0b:
         4d:5f:fb:00:5f:19:f0:bb:97:5d:af:13:a8:2f:b4:84:1d:2f:
         65:62:3f:83:5a:9a:c5:a4:66:e1:41:48:35:6c:84:7e:8b:0f:
         30:c6:9a:eb:8f:e2:c2:2d:27:c7:08:57:6d:9d:a1:09:5a:b5:
         fb:47:68:e2:e3:62:de:16:0a:eb:8f:83:91:35:00:13:e3:76:
         06:03:3c:05:42:d6:90:70:90:29:a2:fb:8b:79:21:69:9b:51:
         d4:3a:0d:54:32:d7:9f:5a:97:9b:13:53:00:b9:42:8a:c6:0f:
         92:c2:7b:bf:15:7b:8c:a7:0c:f8:41:be:eb:47:c7:30:ff:15:
         eb:95:43:75:54:fe:2b:fe:76:f0:02:4b:4e:ff:f6:1e:a2:03:
         85:db:e5:dd:a2:10:71:ca:2e:aa:bb:66:0e:d4:d4:53:67:1a:
         93:22:cc:fa:12:63:55:6a:4d:b0:64:ee:43:4f:10:2c:83:fd:
         7f:fb:5a:ab:49:74:52:de:19:ae:47:ae:b8:6b:86:d8:a6:e9:
         c8:f5:3b:3b:81:83:0c:dc:f6:30:09:e3:6f:71:c8:6e:99:15:
         ba:bc:83:bf:f8:2b:cb:c3:51:29:1e:e1:a5:e0:ff:af:56:90:
         c6:e0:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:19 2026 by rpki-client