Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
File:                     jqW5VjInwuWNQ4vBe6giUHVCRDs.mft (raw, json)
Hash identifier:          k/aaq/tvMOrm3eMVQVSEsTERGLMvC4rz5lGcEnzhQvI=
Subject key identifier:   58:33:DF:32:A3:28:79:3A:AF:AA:57:9A:EA:EC:0F:18:22:0C:76:14
Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
Certificate issuer:       /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
Manifest number:          0183
Signing time:             Wed 23 Sep 2026 04:26:17 +0000
Manifest this update:     Wed 23 Sep 2026 04:26:17 +0000
Manifest next update:     Wed 30 Sep 2026 04:26:17 +0000
Files and hashes:         1: jqW5VjInwuWNQ4vBe6giUHVCRDs.crl (hash: mLT2ANI9Rupxfk98AmrN1LyUS3imXrnI58d6DRbw99g=)
                          2: E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (hash: NqE9i46L1vG7UOkedUiFkp1Yy9rxKpf9fmQ7FVuJqeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl
                          rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
        Validity
            Not Before: Sep 23 04:26:17 2026 GMT
            Not After : Sep 30 04:26:17 2026 GMT
        Subject: CN=6ab354e9-dd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:28:89:24:99:56:a6:a9:0a:db:01:ae:88:
                    16:25:ad:1c:7a:ca:1d:81:b0:d7:dc:3b:30:bb:b3:
                    31:6c:4f:22:d3:f4:d9:6c:ea:64:f1:bd:e6:c4:32:
                    fc:89:ea:b7:3d:1b:23:90:58:8a:38:b2:f6:a8:3f:
                    08:b1:e2:1c:11:6c:28:e3:96:33:81:01:9f:d5:04:
                    cb:eb:cc:9d:96:61:c9:87:ca:d7:75:7c:f2:a5:3d:
                    01:bd:7a:25:b3:71:b7:6c:31:0e:4f:63:6e:8d:9d:
                    2b:82:90:06:f4:a8:55:79:d5:8b:1c:2b:5b:bd:f2:
                    37:b2:14:74:e5:92:be:3c:1b:a2:6a:f3:0d:56:42:
                    6b:7b:c1:48:a3:72:c5:47:f9:30:ee:f7:3f:cf:c7:
                    5e:c2:09:00:34:f8:da:55:a3:f9:21:1c:8a:c6:a1:
                    a1:49:d9:f5:33:6d:7c:6a:71:4a:c3:d9:5c:96:01:
                    d4:aa:de:4e:a5:7c:dc:7f:13:0a:91:79:ec:e1:64:
                    12:dc:b4:92:72:6c:2d:f2:a8:2a:1f:75:69:89:f0:
                    77:35:a4:58:b5:e1:37:b6:f8:48:c1:cb:89:78:cc:
                    90:87:b8:ef:f3:93:78:8d:63:e5:54:2b:de:09:7b:
                    3a:0c:32:18:78:c3:52:bd:36:fc:29:44:8b:b1:a4:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:33:DF:32:A3:28:79:3A:AF:AA:57:9A:EA:EC:0F:18:22:0C:76:14
            X509v3 Authority Key Identifier:
                keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:c8:5f:e4:02:4f:7b:f2:cd:21:9b:10:dd:be:35:32:cd:
         9f:86:b9:bf:4b:4e:e5:4d:06:01:9e:a4:4a:b8:83:9d:bc:f7:
         9f:a3:a1:32:83:be:b0:9b:28:dc:84:f5:57:3c:de:3a:a7:c4:
         17:b9:a2:92:86:fe:1c:ae:d4:9b:8d:11:79:c0:04:46:69:5e:
         0e:c5:30:99:8a:2e:83:6e:fc:35:d4:83:e2:5b:3f:bb:dd:d0:
         3a:37:78:6d:b1:2e:ba:ed:38:42:2d:12:09:77:44:cc:9f:c9:
         1b:e9:bb:12:9f:92:06:1d:07:e5:bf:df:56:01:9b:2b:98:31:
         54:1c:14:51:56:66:2b:2d:4e:48:2c:74:91:34:1e:93:06:d2:
         b1:52:54:9d:91:96:b8:44:f3:cf:e0:a2:c3:40:fc:a0:aa:03:
         ad:ef:4e:4b:39:da:d5:68:97:6d:ce:61:3a:6b:b5:50:9b:e3:
         a8:9f:55:e1:ec:61:84:23:b2:5e:e7:6f:f4:47:6d:a0:51:70:
         a6:91:67:4d:46:f0:81:1c:6d:6f:33:85:91:2c:cb:9d:9c:91:
         93:52:e5:08:bc:d6:82:2c:44:cb:58:af:23:f5:e5:20:e2:99:
         b6:25:26:5f:eb:4a:93:d2:36:ec:83:6d:8d:a4:be:04:75:7b:
         a3:f9:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:18:38 2026 by rpki-client