Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File:                     jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier:          rFfvz/Cmr9egpwHXh6bCBbkwoHb++hMfeg+QIxIR748=
Subject key identifier:   21:E8:2E:23:98:BB:3A:4D:50:F4:C5:95:E1:72:74:F9:26:A4:6F:0A
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer:       /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number:          B3
Signing time:             Wed 23 Sep 2026 07:00:32 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:31 +0000
Manifest next update:     Wed 30 Sep 2026 07:00:31 +0000
Files and hashes:         1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: 3xpFa+80AuxrB67gd2CQ3j0UGOlHyNrFIt575t8/k9E=)
                          2: 2A400140AB4711F18E8A34C87111F970.roa (hash: CUggDrBAvzXvaQYrMSRg9yvdzFs6xCvDyXhOQ31B8a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
                          rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
        Validity
            Not Before: Sep 23 07:00:31 2026 GMT
            Not After : Sep 30 07:00:31 2026 GMT
        Subject: CN=6ab37910-c3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:38:7b:15:2f:a7:3b:80:70:81:3c:3a:fa:3b:
                    51:b0:75:57:7b:07:92:94:89:8f:c8:7f:9a:67:73:
                    c0:5f:e5:2f:f5:8c:e9:b4:3a:44:4f:59:e8:18:d7:
                    a1:fa:1c:37:40:9c:de:55:ad:60:38:06:01:89:37:
                    0c:eb:c7:b3:0c:5e:98:b1:86:8e:0a:d5:25:2c:41:
                    43:81:5b:7e:1d:c1:a5:38:aa:17:aa:e8:ba:20:2c:
                    fd:8b:e0:e0:93:82:f7:71:b4:21:05:ed:fc:e7:eb:
                    fb:00:f8:e1:93:66:eb:36:37:07:c5:5f:97:e9:46:
                    36:eb:ed:b0:bb:83:47:67:44:65:c7:6f:dc:11:2b:
                    6a:79:dd:a6:3c:a7:5e:89:b0:c6:55:1f:bf:a5:b0:
                    87:b0:d5:d0:8a:49:80:db:52:3e:18:7e:e3:e4:25:
                    2b:d5:4b:7c:2a:97:87:61:2c:f1:7e:50:a3:5b:b7:
                    1f:b3:44:04:d5:83:a8:ce:d7:98:9b:0d:81:ab:71:
                    4b:7f:3e:8f:01:9c:94:54:e2:f5:6b:42:6d:d5:17:
                    6a:59:51:5a:88:2f:4d:26:be:76:41:8e:55:8d:29:
                    26:5f:36:27:af:ce:4e:0a:e3:14:75:f8:b6:39:d8:
                    53:f4:e9:fc:5b:a0:f9:cf:bf:95:07:1c:bb:05:33:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E8:2E:23:98:BB:3A:4D:50:F4:C5:95:E1:72:74:F9:26:A4:6F:0A
            X509v3 Authority Key Identifier:
                keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:eb:86:f9:c4:53:f4:f2:96:3f:ed:20:c5:5d:03:4a:ea:03:
         ed:59:32:55:0c:4f:1d:28:b9:e2:4d:2e:c0:49:52:21:b5:ab:
         2b:f6:ca:ec:cb:00:2f:ac:09:ff:88:fc:7b:0b:35:5f:af:b7:
         d9:5e:c9:24:8b:87:69:72:6c:40:97:7a:ad:cb:4e:16:a1:42:
         48:23:48:fc:eb:d4:0d:f0:90:af:4b:58:d0:75:4e:dc:d6:fe:
         44:ba:e5:94:81:f4:42:ce:5a:58:0c:a9:c0:8d:79:4f:15:75:
         89:08:a1:60:0e:6b:9f:a6:77:ac:c4:c9:e2:bd:82:d6:aa:b2:
         eb:b0:c2:9c:b2:5c:72:2e:51:08:8f:96:b1:28:b0:d5:1a:3b:
         0f:f8:c3:6f:44:e0:21:2e:48:1b:cb:2a:5e:24:4b:b1:98:72:
         69:51:99:9f:07:ad:34:b3:a1:a5:52:69:3a:a4:19:9e:ae:ff:
         ff:d3:b1:6c:92:48:27:ad:b7:ba:42:4e:8f:38:e5:93:aa:08:
         0f:9e:0d:57:44:bd:88:18:d8:b9:fd:69:a4:ed:94:0b:6a:c3:
         74:e1:9e:25:4f:fa:7e:27:49:f5:c4:de:7a:6a:aa:d9:3d:42:
         13:63:c0:34:bd:3d:3d:bb:f0:06:13:fc:9a:11:02:73:19:4e:
         d0:1c:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:30:45 2026 by rpki-client