Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File:                     JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier:          3OgfseD0l5dU8pGev0tTF6Ri+XGK3cUqCyr1oQEIKnA=
Subject key identifier:   06:39:0B:29:88:84:75:0B:0C:29:CE:6D:F6:C6:08:18:20:73:B1:7D
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       301D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number:          3007
Signing time:             Thu 24 Sep 2026 15:26:02 +0000
Manifest this update:     Thu 24 Sep 2026 15:26:02 +0000
Manifest next update:     Thu 01 Oct 2026 15:26:02 +0000
Files and hashes:         1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: tZDj+qlhdYOJwM2AAfAj+bQSIwDBvdcJjd+dWBxmShc=)
                          2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: qMI0+qSJUDBOM2XBKVGT0iY5F9iduz0xMqXjCiho+4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12317 (0x301d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Sep 24 15:26:02 2026 GMT
            Not After : Oct  1 15:26:02 2026 GMT
        Subject: CN=6ab5410a-f91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:75:c2:61:b6:a2:5c:3e:0c:69:9d:8a:dd:
                    1a:8f:7a:50:ce:b4:9b:c6:12:3f:c3:10:4a:de:c1:
                    a3:04:87:ba:b1:9b:92:d2:65:b5:0a:d8:a5:5f:27:
                    d5:0a:40:a5:10:0f:70:ab:e5:d5:c3:ec:6e:a6:9c:
                    3f:44:fc:80:4a:1d:6e:02:61:46:c2:5d:5e:55:d7:
                    db:32:2a:64:e2:2a:5e:b9:ee:f4:d5:3d:00:55:53:
                    0b:36:a0:1a:0f:0e:a1:c6:e0:e0:e7:70:cb:94:84:
                    37:b3:cd:c9:d1:c6:68:62:db:23:a0:87:ba:7a:84:
                    9d:fe:0c:f4:ea:81:00:5c:bb:bd:3f:95:0e:05:19:
                    f8:7d:e4:7f:41:5b:4f:b2:e9:cb:34:58:ba:9f:8e:
                    12:c4:24:12:af:23:08:eb:4d:be:a7:a6:5b:c2:ca:
                    1a:04:15:fb:27:63:0e:c0:9d:a2:76:37:53:4b:bd:
                    ef:29:7d:c9:a6:79:60:af:fe:ab:9f:a5:98:4c:b0:
                    62:90:12:71:15:56:d7:00:10:d2:20:c1:fb:2f:b5:
                    88:b9:19:62:70:27:42:71:1a:44:65:f1:a0:a6:ef:
                    1b:d8:ac:bd:ee:ca:6e:65:3c:e6:1e:89:41:4b:c4:
                    c5:8e:4b:e3:95:c1:19:b8:90:0d:6a:ce:4b:4f:39:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:39:0B:29:88:84:75:0B:0C:29:CE:6D:F6:C6:08:18:20:73:B1:7D
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:95:c2:01:91:57:32:7c:af:5f:98:b0:b6:20:7d:20:db:1f:
         aa:ad:6f:f9:ea:93:d1:06:22:c8:27:9d:65:23:4a:f7:fe:56:
         96:5b:5e:11:87:73:fc:f6:7d:1a:c5:ed:fe:d1:bf:de:42:b1:
         f3:47:fb:65:16:d1:a3:bb:8e:89:64:4a:9e:99:c8:ae:31:4b:
         86:e6:e7:5b:ef:a8:84:b5:e9:d3:2f:d7:5f:87:40:a6:eb:a2:
         45:37:4a:47:99:0f:95:87:44:3e:5d:cf:3e:92:1f:93:c6:7f:
         bf:ad:34:35:88:af:3f:49:d8:fc:4d:20:47:ee:bb:23:c7:e8:
         23:c5:ec:d8:0d:29:3b:44:9a:53:f9:30:28:0b:83:45:86:b8:
         f2:03:97:93:66:7d:82:2e:26:fb:d5:d0:08:9b:e7:62:53:0b:
         7f:1f:2a:10:67:e2:ae:5d:6c:29:c9:d0:2d:0f:1b:3a:e4:16:
         9c:11:76:46:d7:26:49:2e:b0:74:33:c8:28:a5:c6:5a:9e:7f:
         c3:9b:db:6d:1b:97:b3:da:dc:d6:a6:e0:ee:6f:80:d5:cb:95:
         f4:8b:87:c1:55:26:d8:1d:c6:0a:94:30:7f:cc:fd:81:71:b9:
         3c:06:7e:1d:99:51:0b:e1:89:37:92:79:c5:6a:ca:d8:6d:9e:
         cc:b2:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:07:14 2026 by rpki-client