Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File:                     o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier:          ndbKEWnKvie+XOERzc1DCsF9OKd+fN1Rr7Qs8Xn1apw=
Subject key identifier:   BA:08:55:1C:55:02:C0:1F:F3:2E:FC:DD:71:26:5E:81:56:29:C9:C9
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       04D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number:          04BA
Signing time:             Sat 26 Sep 2026 23:58:53 +0000
Manifest this update:     Sat 26 Sep 2026 23:58:53 +0000
Manifest next update:     Sat 03 Oct 2026 23:58:53 +0000
Files and hashes:         1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: WaNGaFVj8q8YaqZFFvjkizQ6XEAuCdZuJV3FCbrpaRo=)
                          2: 0B5742C234AD11F1851A1E75B8833773.roa (hash: PgHm8kIkg0ILltI3AvO0evXqOsp4h8xbRfxnnSTT31c=)
                          3: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: kXLkRG4xYfLnM0J2YdWVuS+q04wt6hKsDNBBad1HXsc=)
                          4: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: vKCveSRO1lmMSMepRjwFMH5hVO6szfi6cYdihL340nY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: Sep 26 23:58:53 2026 GMT
            Not After : Oct  3 23:58:53 2026 GMT
        Subject: CN=6ab85c3d-23d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:72:92:d4:36:26:d4:fd:bf:1a:bd:ea:46:
                    14:87:33:75:ed:57:79:92:d3:41:0a:1f:28:17:1a:
                    bd:a2:b3:7f:d6:52:3e:31:56:79:8b:e8:06:54:fc:
                    5c:40:6f:e0:5a:c7:db:50:59:4b:c9:da:2a:52:4b:
                    89:ea:82:b9:d6:b9:f6:4f:f6:59:20:f0:7c:9a:a7:
                    ce:33:32:cf:af:f5:81:d3:07:ff:bb:d8:3e:20:26:
                    cf:73:fe:69:0f:c2:f0:57:21:88:7e:c3:4b:d8:1d:
                    01:30:a2:f9:2f:26:1d:c1:b6:ac:ad:ec:33:84:07:
                    f9:88:82:39:1a:5e:8a:78:c3:8d:54:b7:a4:d7:43:
                    db:a0:8f:75:8f:dc:db:2e:92:94:5d:be:3f:bc:73:
                    76:d5:d6:0c:86:58:21:97:d1:ea:a5:92:94:6a:d1:
                    32:23:bd:63:d5:37:d5:52:80:de:85:9e:1a:82:72:
                    52:19:d6:c8:03:cf:bf:26:6c:87:71:99:16:25:97:
                    aa:8b:b0:63:f8:81:59:34:95:13:6b:e4:26:64:82:
                    91:78:fc:b4:ec:85:a7:f3:89:8b:e7:ca:9b:10:21:
                    1a:76:e2:20:46:2b:58:69:e8:86:aa:42:f1:74:8f:
                    49:33:f2:70:3e:de:7a:0f:59:db:10:9b:98:d7:89:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:55:1C:55:02:C0:1F:F3:2E:FC:DD:71:26:5E:81:56:29:C9:C9
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:ea:0f:6a:67:b0:37:06:9c:8b:29:f4:a6:3b:8b:25:ee:
         72:14:90:7b:8e:b3:78:e6:18:35:c0:30:d3:9c:e7:8b:90:1c:
         3e:57:a7:25:b1:fd:22:35:7e:66:8b:eb:73:eb:6f:65:9b:99:
         46:08:cd:62:f3:e9:25:32:1e:90:ea:d9:3a:70:09:b3:25:72:
         a5:32:8d:c6:6c:f7:b0:60:cc:6e:3e:dd:55:85:52:e3:02:e8:
         87:7c:d0:91:cd:1c:38:ad:88:9d:24:36:50:ad:c4:4c:65:c5:
         c2:34:ee:b2:e3:65:cb:6c:0b:a3:82:a7:e8:db:68:9d:db:75:
         5d:65:18:83:0e:d7:3b:bd:37:4c:4f:dd:a0:61:4c:c5:c4:c6:
         60:05:54:6b:cc:ee:32:c5:b9:ee:b4:60:34:b3:80:20:25:b9:
         35:69:4d:34:1e:a3:de:db:7b:5a:2b:9a:26:12:43:72:0e:b9:
         62:19:69:e9:10:23:d6:b6:90:af:df:ea:28:65:dc:90:61:f5:
         13:29:ce:ae:ee:91:cd:5b:b4:30:01:fe:f0:2f:62:8a:0e:ea:
         44:55:9a:9c:4d:22:9d:3a:c3:be:a4:d2:42:a2:8d:62:67:2f:
         d8:e4:80:79:04:0b:68:59:35:1d:4e:b7:d9:6d:0a:f8:1f:72:
         e6:62:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:21:04 2026 by rpki-client