Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File:                     JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier:          L7+XIMrdShCPvm4SZ+hcbM2mevpGksUl+xF0ky/GP+4=
Subject key identifier:   9D:D8:F9:8E:92:60:03:E1:60:97:D2:72:D6:2E:A7:14:FD:55:6E:74
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer:       /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial:       1E34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number:          1E20
Signing time:             Tue 22 Sep 2026 16:01:40 +0000
Manifest this update:     Tue 22 Sep 2026 16:01:40 +0000
Manifest next update:     Tue 29 Sep 2026 16:01:40 +0000
Files and hashes:         1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: 2Y7A1ByO5w0BEwsT1yrJpsGsZGufLjbE37HfhN6pQQg=)
                          2: 6D87A54A953811F1A113FB975B11F970.roa (hash: 0X0U+ygGSlaqbcmBljiSjt+7cFs6K3/XgAF7+i3aPNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
                          rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7732 (0x1e34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
        Validity
            Not Before: Sep 22 16:01:40 2026 GMT
            Not After : Sep 29 16:01:40 2026 GMT
        Subject: CN=6ab2a664-6e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:ce:d5:e6:12:d1:12:3f:b0:26:ba:bf:fc:
                    96:fc:7e:39:29:82:d5:8d:5b:2f:48:af:97:a5:b9:
                    a0:e1:c5:5f:b2:93:8d:50:69:2c:d4:06:e0:35:a6:
                    30:0a:58:47:60:49:72:e3:17:57:ef:14:a7:94:5e:
                    e1:b1:82:62:b9:2f:c9:da:11:9d:29:99:a6:26:74:
                    2d:9b:04:2d:8c:47:a6:c4:01:50:e1:39:a1:57:12:
                    1a:2f:b9:89:ac:14:92:25:e5:e2:ad:14:36:a2:aa:
                    0b:19:bc:ef:1a:5d:e1:69:17:ef:1a:76:cf:c8:72:
                    06:f1:c2:92:6e:9b:97:e9:dd:0f:a9:e7:5f:46:85:
                    e4:28:8f:1f:23:74:29:3a:23:46:e0:1e:62:a0:ba:
                    ba:f8:f9:93:9f:dd:6c:3d:90:61:23:5a:88:90:28:
                    d6:a2:1f:cd:88:c8:66:0b:f6:76:fe:54:66:f3:d9:
                    0e:2f:9f:2c:31:d3:b0:01:1b:f2:14:b4:83:05:74:
                    5c:c1:0d:93:47:9f:ea:f6:13:e1:f4:6d:18:de:ea:
                    d5:6d:69:9e:3e:b5:0c:ae:34:9f:ba:db:4d:b5:17:
                    51:a2:4f:08:f2:48:0c:89:06:ad:08:04:c0:e4:d8:
                    5f:7d:7a:44:18:e9:d4:98:04:d6:98:1f:92:a6:54:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D8:F9:8E:92:60:03:E1:60:97:D2:72:D6:2E:A7:14:FD:55:6E:74
            X509v3 Authority Key Identifier:
                keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:80:e2:b9:33:8f:a0:bb:20:9e:eb:5e:c0:e7:55:57:d9:08:
         a9:c4:dd:85:ad:08:21:bb:22:14:9f:9a:d1:e1:7f:63:f3:9f:
         e3:c3:2b:df:5a:89:6b:8d:c2:5c:75:a3:41:75:18:12:22:34:
         2d:b6:4c:68:f1:4a:63:9b:9e:b7:9c:43:0a:c3:64:17:30:ee:
         65:34:52:7a:2a:e6:e8:76:cd:00:06:80:42:13:c5:f7:8c:e4:
         12:48:1b:5b:35:ee:2b:df:4f:55:31:08:48:6a:36:23:75:82:
         0e:73:73:8e:6f:72:9d:58:27:9d:de:eb:ca:32:e2:49:aa:6f:
         6c:db:34:e6:12:ba:dc:d5:06:a3:35:ce:af:dc:92:0d:0e:c1:
         ad:32:2f:4e:ce:69:58:26:73:6e:ff:c3:9d:e3:ec:c5:e6:f0:
         e5:69:17:ae:c2:89:ed:7e:20:ff:ea:43:6a:91:f2:e7:dc:ff:
         47:14:1d:21:05:c4:96:f2:58:7a:ee:77:25:99:fa:50:01:f2:
         fa:59:a4:09:76:ce:87:ab:0c:54:01:b3:0c:d7:d7:99:84:b2:
         10:2b:e9:83:2a:82:f0:ed:69:a6:29:5f:60:16:27:95:32:bb:
         f1:a7:64:80:c0:a5:83:56:4c:ce:d4:e2:3f:7c:fe:92:dc:46:
         18:c3:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:36 2026 by rpki-client