Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File:                     JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier:          VubK1Oi1YPoOIBAUWdyM5wGxHZra7C6iEVtyEJcnTAM=
Subject key identifier:   1A:61:DC:0E:FE:76:BD:04:8B:E8:B6:4E:8D:C5:89:1C:2B:6E:97:E0
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer:       /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number:          0167
Signing time:             Wed 23 Sep 2026 04:45:34 +0000
Manifest this update:     Wed 23 Sep 2026 04:45:33 +0000
Manifest next update:     Wed 30 Sep 2026 04:45:33 +0000
Files and hashes:         1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: OGeDN04W1GEJORy+tTwN+Ja8kTUO8E3gbxa3ek0xicg=)
                          2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
        Validity
            Not Before: Sep 23 04:45:33 2026 GMT
            Not After : Sep 30 04:45:33 2026 GMT
        Subject: CN=6ab3596d-065a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:73:c6:cd:3b:53:ad:71:d1:78:8e:ac:a3:
                    ae:8e:8b:94:79:e6:db:a3:2f:4e:75:98:dc:3a:78:
                    4c:e1:a9:f4:21:b0:46:7d:fa:ee:5d:29:5a:d5:b4:
                    88:1d:2e:d6:f1:43:34:d0:18:83:35:87:92:63:61:
                    65:b2:3a:e3:09:b1:8b:e3:3d:fc:26:21:19:f9:69:
                    0e:e4:79:9c:d6:42:c1:eb:d0:89:0c:8a:7a:9c:68:
                    80:f7:bb:e5:b7:d2:41:a7:d8:ab:05:a3:a9:b9:98:
                    28:3a:35:6a:3b:9f:7c:d5:a7:d1:1f:c8:3f:22:b8:
                    91:d6:be:c7:c7:c1:00:cf:1f:24:eb:07:41:c5:b4:
                    09:5b:69:3a:65:30:f3:6b:06:3b:32:72:17:77:4c:
                    c2:05:23:09:4d:26:90:ac:d7:eb:e0:ea:95:03:80:
                    ce:17:de:b2:0f:2f:7f:af:71:fb:33:6f:5e:c2:ac:
                    64:ea:bc:00:87:57:e0:2d:8a:72:a6:91:08:08:a6:
                    d0:82:94:ac:d5:6a:21:6b:7e:1f:7a:78:ef:14:dd:
                    82:25:13:06:24:4a:84:26:4d:e1:60:58:1e:91:d7:
                    71:dc:0b:24:66:cd:ce:62:a3:c3:fc:15:2f:94:1a:
                    f6:35:76:cc:32:4a:01:05:e9:bb:79:00:73:5b:20:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:61:DC:0E:FE:76:BD:04:8B:E8:B6:4E:8D:C5:89:1C:2B:6E:97:E0
            X509v3 Authority Key Identifier:
                keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:a2:b5:94:86:69:a8:a2:5c:81:27:fd:06:d9:88:2d:2d:
         f1:dc:31:3b:c0:8d:b6:5e:bd:e6:08:00:1c:44:f0:7a:3f:93:
         90:8f:61:8b:74:5d:97:d3:93:9f:fb:94:b3:2c:60:29:f4:c7:
         46:11:44:9f:0b:d4:8c:91:96:cd:80:20:54:57:b3:77:f0:5a:
         ce:0c:b7:15:54:00:dc:fa:5d:12:d6:ab:71:4b:f0:69:10:16:
         6b:0f:77:cc:0d:e4:24:3f:99:ea:0a:43:84:91:be:1a:6c:65:
         2f:e2:d2:6e:9f:a7:ab:91:f5:b2:cb:f6:34:99:ae:13:4a:73:
         94:c3:54:7b:12:8b:85:69:c1:ba:f6:6e:76:5c:4c:38:eb:78:
         47:9b:b7:7c:5e:14:8a:0b:28:78:33:f3:be:25:f2:50:41:46:
         58:27:af:b6:07:d1:da:9c:0b:3e:c1:f3:0d:97:09:7e:29:2e:
         f8:75:4f:a7:c3:78:ea:7a:e7:72:a1:3d:c0:c6:c0:68:e8:05:
         44:69:fe:99:8b:57:ea:59:18:01:fa:31:05:27:34:32:86:5c:
         9d:48:74:79:e9:c3:8b:09:e9:08:7a:d4:37:d4:04:48:3b:dc:
         8b:44:b8:8b:b7:38:06:f6:b5:cb:2c:b2:ec:0b:a7:11:6b:c9:
         ee:9b:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:46 2026 by rpki-client