Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File:                     JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier:          StykJGjKr3Zx2MTLVthc6qaslDpIpMfjAwba1DpHgIQ=
Subject key identifier:   9F:A1:57:86:9F:28:22:B6:26:65:24:BE:1D:97:C5:3B:6D:E2:07:0A
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer:       /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number:          01A4
Signing time:             Wed 07 Oct 2026 04:40:52 +0000
Manifest this update:     Wed 07 Oct 2026 04:40:52 +0000
Manifest next update:     Wed 14 Oct 2026 04:40:52 +0000
Files and hashes:         1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: /zkbyJ4nHy4NHBK2Hmfujjx5CdVVgiFoHpNLmaQyQ/E=)
                          2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: qUAsmwJrGNnZ4LMlEZRu5pS5wvgSSSd1+jpCN0g9BCk=)
                          3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ol6GVz47sRCGDVdpSbtKqXjVimVSYgLAgjn3lhayf1k=)
                          4: CE2868C28F4C11F18259B4DA4511F970.roa (hash: cu7AnJ9TPxK2uGn4bkgIAX6kf4pKIeDeneOPNEPA89k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
        Validity
            Not Before: Oct  7 04:40:52 2026 GMT
            Not After : Oct 14 04:40:52 2026 GMT
        Subject: CN=6ac5cd54-95fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:65:2c:d5:2d:e7:2f:ab:cd:3e:24:68:35:
                    fc:b9:e8:13:29:bd:18:7a:a6:5d:f5:de:69:53:a0:
                    a1:b3:6d:bf:e1:e6:a7:9d:62:50:32:fd:13:32:99:
                    74:1b:58:9f:c4:0f:41:1c:51:b1:11:12:7a:7b:35:
                    e6:09:79:c4:d3:87:63:8f:db:dc:32:f6:af:0e:6d:
                    a2:e6:28:9c:c7:80:0d:9b:6b:78:f2:0f:bc:97:8f:
                    2a:9b:7b:18:f3:f2:00:68:a4:4b:42:88:a1:33:d7:
                    93:75:29:28:76:5b:c6:24:75:85:ef:72:44:3d:a0:
                    14:ad:90:4f:d3:ef:f1:24:12:c1:fd:e9:71:53:13:
                    9f:4f:25:14:fc:0b:8c:9d:3e:39:8f:75:bd:52:93:
                    41:ff:0c:15:d7:da:c0:03:5f:00:41:ac:e9:cb:99:
                    7e:f0:91:60:05:2b:c5:30:13:03:83:22:5f:42:99:
                    45:f4:5f:f7:c7:00:df:48:e6:e5:c7:31:19:21:ec:
                    84:99:ba:0d:e4:ba:62:b2:fc:49:83:c4:f3:d2:b0:
                    b5:ba:d4:ab:5e:65:2d:99:79:b8:6a:22:21:e6:f7:
                    f9:5c:b7:25:0b:25:d7:19:c6:e0:84:55:7f:8e:5b:
                    64:9c:aa:90:5d:0e:dc:78:41:ec:18:19:36:0e:01:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A1:57:86:9F:28:22:B6:26:65:24:BE:1D:97:C5:3B:6D:E2:07:0A
            X509v3 Authority Key Identifier:
                keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:84:2f:e8:cb:5b:e4:e4:bf:c3:67:5e:6d:a2:ea:25:da:b6:
         b6:07:f5:cb:bf:44:06:7b:88:73:b4:13:17:2a:7d:7e:61:ff:
         5f:0a:5c:71:a8:48:51:4e:7c:c6:99:83:d3:5d:21:dd:0c:10:
         d1:36:47:3e:2f:7b:4d:16:36:78:5d:98:bd:11:c2:c9:64:1c:
         d6:bd:fa:73:51:89:7c:c8:b6:ff:c5:97:e4:5f:b2:92:de:d5:
         c3:6e:e6:ea:df:db:18:34:30:85:4f:4d:9d:d2:de:14:78:cb:
         e3:c1:ae:aa:17:68:75:18:31:9c:2a:c8:f5:b0:8f:4d:ad:16:
         3a:b9:6f:e1:96:be:a4:3d:07:65:69:69:29:39:c0:57:5a:53:
         a9:e3:6a:52:99:5b:1e:70:e3:6c:4d:50:20:84:d5:59:42:46:
         3f:40:a8:e2:f6:7c:fa:e7:dc:88:01:33:32:2b:e6:36:6a:55:
         fc:9f:9e:64:89:8b:58:5f:18:cc:ca:f7:76:62:7d:fb:12:40:
         39:32:a4:4f:85:96:3b:c6:61:fe:1c:87:9e:7a:06:c8:03:3b:
         de:97:3e:88:56:1d:e1:7b:d4:39:cb:5f:87:fe:4a:4a:e5:32:
         47:82:3f:8b:c2:15:23:88:fb:d5:42:d3:77:d3:46:48:d9:4a:
         be:10:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:30:57 2026 by rpki-client