Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft
File:                     J-T9QcOzZMXkROYutxgZklg5M2k.mft (raw, json)
Hash identifier:          FfhDmW0h+LanHyKgsHDAXSKCPBq1NO2rSS8nX/dkmDI=
Subject key identifier:   C3:F4:71:F2:05:B3:31:32:D1:F4:4A:F0:AC:91:3B:D2:ED:E2:E4:EE
Authority key identifier: 27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69
Certificate issuer:       /CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369
Certificate serial:       086F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft
Manifest number:          0862
Signing time:             Sat 24 Oct 2026 20:56:56 +0000
Manifest this update:     Sat 24 Oct 2026 20:56:55 +0000
Manifest next update:     Sat 31 Oct 2026 20:56:55 +0000
Files and hashes:         1: J-T9QcOzZMXkROYutxgZklg5M2k.crl (hash: +uuSZMnPhmX7BNbmHG9X7/vjMmpTuiaY5LRy8/BxeWg=)
                          2: 92B90AE2A1C711ED8701EE35C4F9AE02.roa (hash: AbiEFWDmyWXRLlKJFgCMae7B/6XGcm0crIONj1lzEc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl
                          rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111274, serialNumber=27E4FD41C3B364C5E444E62EB718199258393369
        Validity
            Not Before: Oct 24 20:56:55 2026 GMT
            Not After : Oct 31 20:56:55 2026 GMT
        Subject: CN=6add1b98-85c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:33:ab:03:b2:ca:ab:6f:40:4b:f7:db:42:
                    d8:30:26:0b:13:af:0f:9b:b5:44:73:16:7a:63:26:
                    b5:7a:32:f4:1a:d2:b5:b4:dc:0f:a3:c7:e2:3c:dd:
                    1d:b1:e6:c3:24:d7:b5:96:82:4b:92:62:5c:23:5d:
                    b2:e8:b7:fc:f1:10:31:a1:42:8c:f8:24:ef:7e:31:
                    52:08:2b:14:23:0e:45:31:66:98:87:02:bd:fe:6e:
                    af:5b:a2:5b:f6:d0:9b:91:a4:3a:9c:8a:7f:55:0c:
                    0e:42:5d:5e:df:62:26:ad:2a:3f:cf:c9:e0:f2:8d:
                    a6:62:25:46:72:0a:f4:05:bb:e4:65:cc:51:66:c7:
                    35:19:94:27:7d:2b:6c:73:7c:84:33:12:d0:50:eb:
                    b7:d4:8a:39:e2:9f:f5:32:a6:07:8b:da:ba:b5:90:
                    23:1f:66:2f:dc:f8:42:b3:b8:4f:1b:1c:1c:ed:d0:
                    67:be:87:72:31:c2:af:ea:70:96:7c:7e:27:25:fb:
                    58:f4:66:83:d4:31:f7:81:8b:5f:83:71:a7:0e:b2:
                    23:ce:a0:d5:e0:8c:21:1a:be:90:8f:e2:a3:1c:2e:
                    db:a8:1e:d4:a6:6a:57:a3:ae:1e:38:97:a2:eb:59:
                    f3:39:6f:9d:14:3a:d5:42:51:08:e2:85:6c:39:e3:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F4:71:F2:05:B3:31:32:D1:F4:4A:F0:AC:91:3B:D2:ED:E2:E4:EE
            X509v3 Authority Key Identifier:
                keyid:27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:4a:f4:1b:00:19:86:59:87:e4:47:bb:68:c4:f2:36:54:1c:
         d6:88:fe:a5:dd:7e:cb:1d:68:57:03:80:42:d8:a0:ab:ca:fd:
         4d:4b:17:8d:ca:b6:c7:d0:3d:c4:70:e9:f1:90:7b:b1:20:be:
         1d:69:ba:b0:14:c9:30:53:c0:c1:19:e3:ae:5d:66:83:21:1a:
         40:21:ef:ad:dc:b6:cc:21:33:4a:92:f4:ae:c2:9d:3f:82:bd:
         b2:62:f0:ab:e3:d2:fc:fb:73:89:7e:96:b2:1a:1d:3b:f9:2e:
         df:cc:ea:6d:37:e9:e0:f2:80:9a:e2:15:f7:41:76:00:23:3f:
         60:c0:d1:6d:7d:19:be:70:be:c3:73:65:7f:d5:93:61:27:de:
         6d:8d:16:22:8f:62:b0:04:df:25:6a:f8:c6:72:91:2a:1f:a3:
         9b:d3:a2:34:45:a9:d3:ce:0e:c7:cb:42:0d:3a:c2:65:c0:6b:
         a9:96:8a:11:6f:ec:88:60:bf:52:ed:d3:bd:b2:c8:1f:77:32:
         56:6c:30:91:1c:97:a1:80:fb:9c:a1:84:92:0e:ef:c5:ee:7c:
         5e:db:7d:b7:a7:cf:dd:36:f3:58:92:91:4e:84:e0:fa:13:24:
         78:3f:f1:a8:8e:90:10:4f:7a:5e:f7:51:0a:81:ab:8d:cb:6d:
         57:5b:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:29:57 2026 by rpki-client