Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
File:                     JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json)
Hash identifier:          on5q5ilKhFLD1ySYbkk2iLNiBr+ev3LfKnybvHq5Mlc=
Subject key identifier:   61:85:35:23:58:C6:35:FE:0A:CC:6A:41:9B:A4:5B:F1:AC:48:ED:C5
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       0470
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
Manifest number:          0422
Signing time:             Wed 23 Sep 2026 00:04:17 +0000
Manifest this update:     Wed 23 Sep 2026 00:04:16 +0000
Manifest next update:     Wed 30 Sep 2026 00:04:16 +0000
Files and hashes:         1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: Zho0NyX8u79m/5a2Oywp6WfncAXQSHA9Hgc9R29ySdc=)
                          2: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: sH0rebKAz1i2uxLJ3lNxQCxI30HtfefcB9hmlWfdhcI=)
                          3: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: JLuibLFe2igwYYBnUOCMg1rvtCWv2EtsXGaKbROLXRs=)
                          4: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=)
                          5: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: jPjdXIBf3NMgMD5UHQPW9KHHUUZ/8nHgwptXvEXQtlc=)
                          6: 095A440652B311F0B25AA911C4F9AE02.roa (hash: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=)
                          7: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: bjuPOTMp4pbN0z4iigT4wT7hoa5AOWvrE2nP3yVsJ7g=)
                          8: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: RaegGb5YOyVPDChDVKTuKEGfZR2i3keFj8m+p9xUFVo=)
                          9: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: j28A6ymDSsnqrRaPG7HiIgQzlW1p/QQe0p1Ap5wA4ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Sep 23 00:04:16 2026 GMT
            Not After : Sep 30 00:04:16 2026 GMT
        Subject: CN=6ab31781-6395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:28:7c:8f:08:10:d9:8d:d6:70:5b:d3:45:
                    68:b3:3e:56:9f:73:6a:23:c1:d3:53:2a:34:24:3c:
                    da:8d:c1:60:50:c3:5a:5b:6b:ed:6f:02:e1:56:0b:
                    c9:16:78:8e:99:c4:fc:6b:22:77:6a:04:20:c8:ca:
                    cb:55:60:14:54:6d:70:be:a7:9a:46:86:a8:a7:ee:
                    5c:75:8d:49:32:d9:e8:b8:e9:12:cf:3f:91:38:68:
                    69:82:06:1a:ec:71:42:99:d9:5a:ff:be:2c:62:dd:
                    f6:f4:21:3a:10:f2:86:55:e5:98:87:f1:ac:c7:94:
                    1b:ce:30:2b:7c:d9:17:11:c0:c4:72:5d:45:b3:d7:
                    f3:f3:07:8e:82:91:fc:4b:4f:95:ee:3e:6a:82:df:
                    7b:c6:74:d5:9d:b5:e6:71:53:6b:cd:46:e0:49:86:
                    2d:8d:fe:b1:d4:95:8c:8d:af:67:b6:c7:0f:c4:27:
                    06:f6:e4:e2:7a:70:91:55:ae:4f:a2:4d:14:e2:66:
                    0e:f4:fe:2b:0f:0e:c6:14:e5:c3:68:bc:a7:c4:5f:
                    9c:6b:2c:2d:f5:c1:b7:2e:c4:b3:5c:54:5b:32:23:
                    3e:fc:17:d9:2f:a8:8b:76:6e:6c:ad:8a:51:e5:e0:
                    8f:85:ca:21:13:e3:70:be:21:74:cb:c5:8b:a1:48:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:85:35:23:58:C6:35:FE:0A:CC:6A:41:9B:A4:5B:F1:AC:48:ED:C5
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:36:89:02:ec:87:67:01:f9:f5:51:41:91:86:0a:21:dc:5f:
         b6:e2:c5:4e:47:9a:15:67:93:7f:17:c2:74:54:40:ed:87:82:
         02:3b:59:6d:af:df:62:95:f8:17:bc:29:c5:90:aa:a5:f3:9f:
         75:43:64:30:57:ec:83:c0:92:a1:13:ec:12:30:e0:69:8e:56:
         b2:f6:13:76:65:bf:c4:48:87:8d:80:19:09:7b:d6:33:00:e7:
         61:4a:15:b4:16:9b:25:4d:e8:d7:45:26:4e:0e:2d:8a:f3:14:
         a1:45:4c:9c:a9:73:ca:d0:2c:14:20:4d:b7:36:37:fa:fa:f9:
         d5:e5:d0:b0:3d:6d:28:23:83:a4:5c:b7:10:0d:62:1a:51:72:
         b1:8e:2d:a7:a4:fb:6d:ab:09:ee:4f:9e:67:4a:ef:90:36:59:
         dd:44:cf:a3:d0:22:ba:6c:8a:50:8e:05:d4:be:8c:31:5c:0d:
         40:69:9f:32:9e:22:de:f7:ea:35:85:d8:97:6f:3a:49:f6:34:
         a8:be:82:a0:06:14:b0:75:18:d3:54:78:8a:f4:1c:f7:93:2e:
         0c:2a:9d:5f:bb:c7:4e:38:eb:b2:28:25:d1:10:08:a6:62:f3:
         4a:b7:54:da:7f:b6:b6:bb:47:3a:61:76:f3:60:a6:16:3e:2e:
         75:ab:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:37 2026 by rpki-client