Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
File:                     J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json)
Hash identifier:          8Hm2jjfsGR1XuDF4WNKbqLQ7Pdzt8XQ0YnQsjvZC42s=
Subject key identifier:   91:84:4C:A1:FB:08:59:0F:BB:0D:88:EC:55:23:8F:32:31:D5:0A:16
Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
Certificate issuer:       /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Certificate serial:       10A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
Manifest number:          1099
Signing time:             Mon 28 Sep 2026 17:25:56 +0000
Manifest this update:     Mon 28 Sep 2026 17:25:56 +0000
Manifest next update:     Mon 05 Oct 2026 17:25:56 +0000
Files and hashes:         1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: nO7HCZWE1yVDWAFkvzHdRI73osi9IFOUfZm72hSZeTQ=)
                          2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 17:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4259 (0x10a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
        Validity
            Not Before: Sep 28 17:25:56 2026 GMT
            Not After : Oct  5 17:25:56 2026 GMT
        Subject: CN=6abaa324-c275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:21:1e:f7:05:61:44:d5:0d:80:22:b5:58:
                    a7:a9:da:21:3b:b6:b5:0c:41:f7:ce:72:45:3b:11:
                    cf:88:ee:45:5b:7d:e1:06:e1:f5:11:e5:74:6e:e8:
                    e7:d2:a9:17:b4:73:9b:c7:42:7e:46:64:3d:42:5e:
                    4e:1d:4a:47:0f:ee:b2:63:33:80:84:6e:b2:b8:86:
                    22:1a:43:d6:d2:01:34:9d:cc:f6:4c:f0:85:ea:fa:
                    1d:d5:ff:38:37:ed:7d:22:30:65:da:c9:7b:85:35:
                    8f:f2:ce:8e:27:5d:df:63:2b:63:8a:b4:cf:53:75:
                    3c:b2:53:96:76:e3:63:83:cd:47:02:ba:cc:b6:ac:
                    7d:96:54:55:09:4e:d4:b9:55:1b:ae:e7:24:39:7e:
                    90:4f:42:35:08:40:f2:43:62:1b:5e:b7:a3:09:1c:
                    9c:98:93:bb:1f:ac:c9:8e:dc:77:ad:c0:13:7a:0e:
                    7e:31:71:71:3e:61:64:df:08:fe:4a:4f:88:9d:50:
                    55:b8:68:e2:a6:96:6b:4b:f0:75:ac:d3:3c:e5:b8:
                    41:b4:e0:28:7a:5e:0a:ce:7b:38:6b:8d:fd:ef:19:
                    a9:c7:9e:82:8d:79:9d:ec:b5:64:d1:31:e0:35:bb:
                    7b:92:ee:de:81:30:45:65:96:f0:93:c1:a0:f2:2c:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:84:4C:A1:FB:08:59:0F:BB:0D:88:EC:55:23:8F:32:31:D5:0A:16
            X509v3 Authority Key Identifier:
                keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:20:fe:69:e3:7e:ed:0d:5d:e2:7b:8d:29:cc:22:6f:88:ac:
         7c:1a:e6:ec:76:81:99:42:d3:3e:f8:82:85:a1:f1:85:a5:d8:
         99:89:f6:bf:3d:16:80:36:48:64:ac:2d:0b:b6:66:61:1d:f8:
         c6:ce:94:87:20:05:41:a4:1d:4d:05:dc:e6:00:f0:9d:e4:14:
         78:c4:23:02:87:aa:35:52:bb:94:bd:86:ac:7d:8a:91:1b:49:
         80:0d:af:9e:5e:6e:7d:3b:eb:de:31:0e:73:87:e4:bf:ec:17:
         37:13:10:ce:e4:26:a0:56:09:b2:57:c5:0b:40:3d:93:c7:87:
         bc:82:26:67:7f:1b:01:41:2b:78:75:14:40:e4:2a:c9:a5:06:
         00:4b:97:d1:21:44:b0:45:fa:d8:4a:2c:94:47:a4:fb:4c:f0:
         b2:22:7f:30:7f:bc:43:60:d9:39:bf:92:bd:3a:47:74:2a:ef:
         94:5b:45:60:96:58:57:a1:05:22:2c:2b:c8:42:20:ed:14:d8:
         f8:eb:b9:bb:28:39:48:32:b2:17:1e:59:2e:3a:d1:cb:ea:1e:
         09:9a:b5:f6:87:f0:2c:e9:ad:b4:5b:54:46:b2:54:11:11:c6:
         36:68:57:56:d0:7b:63:73:cb:53:4f:a5:28:5d:96:f1:98:b1:
         70:2e:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:32:35 2026 by rpki-client