Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
File:                     rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json)
Hash identifier:          EqIySbYwI8pMGHaGtgY5gdHaMovM/tCP8mgfXF6S9dQ=
Subject key identifier:   2F:C2:EB:68:BB:11:08:4C:79:6D:12:CE:95:93:D4:31:51:85:5E:26
Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
Certificate issuer:       /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
Manifest number:          01A3
Signing time:             Wed 23 Sep 2026 04:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:39 +0000
Manifest next update:     Wed 30 Sep 2026 04:00:39 +0000
Files and hashes:         1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: i1/SOjPKn4paNxWIUjoQxp/71Nm6SqLK2P2Hargerg8=)
                          2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: MNX1ee3x9dbW8bZLPIUDq7Oc9qNdTCehADLERsWmUlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
        Validity
            Not Before: Sep 23 04:00:39 2026 GMT
            Not After : Sep 30 04:00:39 2026 GMT
        Subject: CN=6ab34ee7-e115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:59:4a:f4:18:bd:6a:69:7a:3d:bf:ec:24:
                    7e:b1:ca:e2:0b:46:be:b4:4c:c0:16:70:f5:71:b0:
                    b6:95:4e:37:ff:21:9e:8c:95:d4:c5:01:22:f0:8e:
                    c8:1b:33:79:96:ae:ab:cf:ac:22:d7:52:6f:99:95:
                    16:3b:fe:22:27:86:04:7e:eb:34:26:6a:9f:f6:45:
                    68:fb:ba:71:84:b4:b1:c9:16:88:0c:24:5a:7c:63:
                    63:98:20:84:ce:35:0c:b9:95:a2:86:01:2d:f5:ba:
                    95:d5:ec:8a:02:28:5f:bc:d2:ae:73:90:9c:86:be:
                    85:b5:8b:d0:2a:25:83:e2:a9:7a:26:80:12:af:90:
                    0c:35:52:43:83:aa:df:88:f3:38:97:4a:29:ec:b0:
                    0f:aa:d0:71:ad:6e:e5:c1:40:d9:de:ca:cb:58:5a:
                    21:16:8a:90:bb:71:27:ec:f7:63:42:8a:ce:75:22:
                    bd:41:bb:d1:28:f8:ec:d6:4f:60:83:84:ab:ea:a1:
                    b2:9f:0f:9d:1b:a2:8e:7e:4d:47:97:c0:9e:4f:e9:
                    4f:a1:dd:42:fd:83:50:a7:62:96:cf:fc:9f:0f:bf:
                    bb:05:9c:7c:82:4e:74:99:4e:06:46:36:3d:53:3e:
                    1e:14:8c:db:30:b8:11:1e:fa:5c:d9:bb:c8:fd:82:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C2:EB:68:BB:11:08:4C:79:6D:12:CE:95:93:D4:31:51:85:5E:26
            X509v3 Authority Key Identifier:
                keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:26:6d:46:97:10:bd:a9:ab:65:96:04:d9:f0:36:f6:c3:
         d4:dd:2d:fb:95:da:fd:2e:42:9a:59:0d:00:30:66:c3:da:3c:
         e6:1f:a4:37:b3:86:ce:04:76:6b:07:ff:30:6f:e6:a8:a9:4a:
         35:4b:4d:c2:a4:06:ae:bd:02:d3:81:13:0e:3b:3a:29:f0:a8:
         16:01:09:6c:0c:d4:60:69:85:42:a7:f5:31:f0:b0:51:e0:8b:
         b9:10:47:5c:7f:44:7c:c7:bb:3e:9d:c7:19:a6:15:e9:3c:3e:
         17:06:fc:da:4b:17:f8:48:1b:aa:6c:a6:4e:87:a4:dd:1f:6a:
         a3:44:14:fc:a1:bf:fa:da:79:c0:8f:12:06:3f:67:ef:91:24:
         18:59:d3:81:ae:f8:bf:50:42:b3:57:b5:a1:c1:ad:6d:92:a1:
         d8:0f:c8:be:f4:45:9d:47:15:b5:0b:ec:19:22:6e:a3:6c:65:
         55:01:e1:19:b6:de:7b:02:ce:a5:c4:40:b9:4f:98:e9:71:66:
         52:98:75:68:aa:ce:67:1f:49:c6:83:0d:59:66:bd:78:61:c0:
         30:8c:a2:6f:5b:5a:67:0a:ae:c5:c6:e0:c5:7f:63:04:5e:54:
         5c:56:c1:2e:bc:23:5c:c0:2b:43:d3:4a:fd:6c:b8:b2:24:a2:
         8e:f3:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:00:51 2026 by rpki-client