Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
File:                     jM-30IneJP53MO8rXFeIrgdEhCk.mft (raw, json)
Hash identifier:          bx0cB41H07w3j+deeFpCfTycq0lC9Q626/PH3oYsAKk=
Subject key identifier:   36:62:0A:1C:F8:92:2F:D9:2C:72:57:4C:7A:00:B1:D9:EC:4C:49:ED
Authority key identifier: 8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
Certificate issuer:       /CN=A91EEBD4/serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
Manifest number:          89
Signing time:             Wed 23 Sep 2026 07:20:50 +0000
Manifest this update:     Wed 23 Sep 2026 07:20:50 +0000
Manifest next update:     Wed 30 Sep 2026 07:20:50 +0000
Files and hashes:         1: jM-30IneJP53MO8rXFeIrgdEhCk.crl (hash: TZHczhv3bUSrXyRVyWGTh2W7/o+FUSRz+7C8ktUYLmY=)
                          2: AEB081C8EB7D11F08F2DA3C6506F56BC.roa (hash: NWqah6PyjAdnZMaoeCvdMpPbeLtH3kC77nXq33pSiIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
                          rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEBD4, serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
        Validity
            Not Before: Sep 23 07:20:50 2026 GMT
            Not After : Sep 30 07:20:50 2026 GMT
        Subject: CN=6ab37dd2-fbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:49:82:67:0e:fd:59:a9:5e:cd:2a:a9:03:
                    76:16:8a:fb:e3:a4:a4:be:c0:31:47:96:b4:23:f7:
                    8f:97:51:f1:ce:5d:df:b2:bc:4c:9d:e1:24:dd:81:
                    ee:9c:8e:a7:eb:97:a8:0e:8c:b8:00:7b:dc:6f:63:
                    65:f4:a5:a7:e7:22:06:bf:a5:8e:a3:f7:49:c8:91:
                    c2:80:3e:72:7f:4a:93:17:da:c6:64:09:d8:7e:d0:
                    3e:35:1a:15:d1:40:45:f1:2e:1e:72:4b:0a:b5:50:
                    af:b7:6d:01:8c:49:7c:33:61:8d:59:12:d3:c5:d8:
                    b2:d7:f2:f7:83:1a:e1:ae:76:51:98:6f:93:28:98:
                    2e:bf:36:2d:5a:9e:3b:06:65:e2:56:33:1d:84:ed:
                    1a:c1:78:e9:43:65:8a:a1:e6:36:64:0c:45:77:9c:
                    75:6e:46:81:05:eb:8e:98:2b:8b:56:67:fb:42:12:
                    de:2b:3b:a5:2f:b8:43:a6:4a:ff:00:40:39:50:03:
                    8f:8e:0e:7f:a9:a4:03:7e:0f:60:db:20:fc:c8:c2:
                    27:6e:18:c6:a1:87:15:1c:60:f3:b0:67:53:4b:6c:
                    80:ad:17:1f:cf:7f:b4:d3:54:05:5b:cc:6f:32:68:
                    f4:07:36:e8:6e:ac:e4:bc:77:82:ba:74:70:17:2a:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:62:0A:1C:F8:92:2F:D9:2C:72:57:4C:7A:00:B1:D9:EC:4C:49:ED
            X509v3 Authority Key Identifier:
                keyid:8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ca:e1:0e:e3:07:93:94:e5:e4:bc:cf:cd:d0:b1:3a:b6:16:
         e7:e5:b0:60:88:b2:33:1c:c7:09:95:44:6a:7e:9a:72:66:30:
         88:e9:08:0a:49:ec:49:f5:6d:9b:53:89:80:bb:4d:68:2b:75:
         6e:7b:5f:62:bb:9a:c8:b3:35:26:a9:ae:ad:79:b3:af:8f:14:
         29:cf:2e:84:8a:ac:20:3b:f7:15:ce:0c:53:d4:d4:ce:4f:6e:
         5e:36:b3:53:aa:21:c1:05:7e:a1:69:11:ba:24:e6:e5:f0:1a:
         7f:58:59:17:16:e1:dc:0e:19:38:bb:bd:0f:53:4b:e4:e2:47:
         14:38:cf:e9:ff:2d:bc:f1:00:93:d7:23:d1:b9:52:03:0c:9b:
         d5:b8:1c:45:44:4c:4a:d2:ea:30:0e:19:e0:78:8e:f4:5a:23:
         2e:a8:23:28:5c:9c:08:26:9f:c7:f0:e4:da:0e:90:20:b7:ba:
         17:af:2e:12:3d:6d:f4:ae:1f:9b:59:e0:17:f5:83:fa:0c:ac:
         78:1c:b3:3c:dc:50:45:85:74:a5:5a:a6:a6:22:60:36:f4:ba:
         47:bf:a6:3b:29:2f:56:4c:cd:69:8e:4e:8f:a9:9c:56:8b:c7:
         ef:a3:63:df:a6:ca:d8:8d:17:f0:ed:95:12:fc:2f:f8:cc:fb:
         fb:0c:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:00:06 2026 by rpki-client