Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
File:                     jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json)
Hash identifier:          gRiKOJh20pD1dXvrj9z+3zgO6xARt8N/UDZxvsrw2CE=
Subject key identifier:   F9:6A:07:F3:77:5B:46:55:D1:C6:ED:1E:2C:35:D0:9F:93:DF:2A:30
Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A
Certificate issuer:       /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
Manifest number:          FA
Signing time:             Wed 23 Sep 2026 06:04:33 +0000
Manifest this update:     Wed 23 Sep 2026 06:04:32 +0000
Manifest next update:     Wed 30 Sep 2026 06:04:32 +0000
Files and hashes:         1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: eTOLh2oQM/rgozpxWvh2XwK4k6hglGCNoe9Rzi54Emc=)
                          2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: 4rlw+B6G1cCdCG/Q6R9Iq4QTKeLc3gBCoCRSzbg/NAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A
        Validity
            Not Before: Sep 23 06:04:32 2026 GMT
            Not After : Sep 30 06:04:32 2026 GMT
        Subject: CN=6ab36bf0-f052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:70:8e:ad:64:19:8f:fd:2e:c4:8d:ef:9d:16:
                    1c:5b:9f:af:a0:0b:a5:bc:12:f9:7c:d0:4a:2f:25:
                    db:1f:ee:92:cb:bb:c2:38:3b:35:3c:c8:da:0b:a1:
                    f6:0e:86:d6:c3:0b:8c:17:2f:bb:04:ed:da:1e:3a:
                    d6:00:f9:cf:78:71:a3:c9:b0:20:28:b7:2e:c0:bd:
                    0d:5b:8f:5f:a8:87:35:be:a4:af:42:14:f5:59:48:
                    29:c8:9d:63:ca:c0:51:41:74:33:62:99:74:23:ba:
                    aa:52:d3:cc:c0:8b:52:df:61:06:24:49:90:fb:5c:
                    8d:b9:5a:0d:5d:b5:fb:e9:bb:51:1b:cc:9e:58:a3:
                    5e:50:1a:25:13:ef:1c:ab:95:0b:bb:3f:7a:1f:fd:
                    3c:ad:f1:87:55:bc:05:c0:50:5e:db:2f:35:46:c1:
                    b2:d5:d2:58:15:45:4d:31:72:de:dd:80:3c:64:41:
                    5d:27:93:f2:d6:34:78:84:b1:91:e4:34:82:80:34:
                    f4:8e:b3:27:98:43:14:a0:64:b2:8f:ec:fc:6e:2a:
                    b6:ef:78:58:68:75:77:32:fc:78:0f:21:dd:7f:e6:
                    a1:fd:8b:7d:bc:8a:e7:87:28:d3:99:eb:8b:5a:36:
                    65:a8:53:0e:58:39:37:b4:c6:72:8c:db:ee:76:a7:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6A:07:F3:77:5B:46:55:D1:C6:ED:1E:2C:35:D0:9F:93:DF:2A:30
            X509v3 Authority Key Identifier:
                keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:b9:5e:f4:61:e0:f9:fa:da:a7:a3:e7:c3:93:75:8e:99:
         c0:4e:f5:7d:34:d0:1b:3d:27:76:3c:34:8e:8c:7b:12:82:1f:
         3b:a9:3e:92:97:49:01:a4:76:ae:17:fe:64:de:41:26:23:3e:
         31:b3:0e:6d:57:66:50:5a:53:e9:22:5b:86:97:7a:72:39:e8:
         ee:f7:92:db:4f:d7:f2:b3:62:e6:eb:74:18:a8:fe:0f:ce:b3:
         c2:bf:65:69:e7:f7:af:7e:89:c5:67:22:5c:78:38:b4:61:8b:
         16:97:59:7b:43:70:2a:27:78:ac:54:42:43:33:6a:35:4d:eb:
         cf:c2:29:47:3a:24:1a:84:f2:87:c1:4a:d5:eb:b0:3b:cc:36:
         4a:34:db:77:89:67:64:10:6c:1a:d2:69:28:5f:d0:48:a9:1c:
         30:f5:9e:2b:a6:1d:66:c6:ed:63:04:23:f2:23:91:36:35:c1:
         bd:18:58:c2:34:41:dd:6f:8c:86:49:d4:d5:e3:77:30:54:9c:
         d1:05:40:7d:45:35:e3:a9:a8:85:3f:c6:15:d2:a9:bb:00:c9:
         30:f6:0f:25:01:f6:f1:d5:b7:d3:86:34:4e:64:2a:6b:4b:78:
         26:57:75:88:1c:ff:b6:be:35:10:f2:e1:00:62:00:c2:0c:f4:
         d4:47:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:50 2026 by rpki-client