Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
File:                     jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json)
Hash identifier:          G2mHfOEhMlgsdwSVZPU0JjcZjtvx4QPrGD+RxKs3uyg=
Subject key identifier:   A6:98:76:AB:26:CC:69:08:57:98:AA:A8:7F:A7:84:8B:C9:27:20:54
Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2
Certificate issuer:       /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
Manifest number:          9C
Signing time:             Sun 11 Oct 2026 07:57:07 +0000
Manifest this update:     Sun 11 Oct 2026 07:57:07 +0000
Manifest next update:     Sun 18 Oct 2026 07:57:07 +0000
Files and hashes:         1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: 81A49ko5e34OrG17v5laIHjSQ/DNe/8Hhk63SFVlOjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl
                          rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2
        Validity
            Not Before: Oct 11 07:57:07 2026 GMT
            Not After : Oct 18 07:57:07 2026 GMT
        Subject: CN=6acb4153-2caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:c7:b2:8f:d7:72:e0:3f:0e:c7:3b:f6:f5:
                    40:02:db:f5:32:01:49:23:72:ee:74:01:6c:1d:c5:
                    7c:b4:1c:56:b1:be:49:40:8b:4e:08:62:ff:af:ac:
                    8b:99:69:f8:9c:6b:22:2c:b1:f6:fc:72:81:ca:0b:
                    ab:9e:15:d8:29:90:42:ed:5b:1b:82:ef:3e:d7:67:
                    5a:34:b7:81:1a:7d:22:a9:1e:75:4c:3a:db:6d:13:
                    53:e3:43:58:f9:7c:84:4f:16:2a:62:a4:81:a5:7b:
                    03:aa:84:e4:8b:65:09:aa:02:67:0d:6f:f2:91:ed:
                    b9:6d:50:76:fe:e6:37:8d:2e:6a:ff:e9:a5:89:e5:
                    5d:06:db:75:d7:eb:23:85:71:62:b6:6c:31:06:1d:
                    1f:7f:eb:79:21:ee:35:2d:9d:8a:d0:56:f0:88:f8:
                    ec:25:4c:fb:a4:9a:cc:53:a1:5c:9d:59:fc:94:3e:
                    34:7b:6c:ab:51:18:67:34:1f:21:33:71:a8:05:8f:
                    91:1d:3f:de:2c:0f:ea:1c:5d:0f:ce:74:9f:ca:57:
                    f6:2b:c6:1e:f8:89:df:97:c8:52:bf:bb:32:81:0b:
                    d5:1b:01:54:f3:0b:44:03:63:01:b0:d4:53:7d:e0:
                    b9:86:71:7e:51:9d:dd:5b:aa:35:9b:4d:cd:4c:97:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:98:76:AB:26:CC:69:08:57:98:AA:A8:7F:A7:84:8B:C9:27:20:54
            X509v3 Authority Key Identifier:
                keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:70:a1:9d:1b:59:af:32:e7:5b:bf:c7:4c:f9:93:36:3f:2c:
         6f:66:c0:a0:f8:40:56:0e:4f:42:f8:64:61:cf:0e:c9:e2:4f:
         e6:24:ce:bf:09:92:12:4f:32:85:38:d1:39:c4:bc:6d:01:76:
         8b:b6:64:94:f0:d6:de:bf:89:56:01:f4:7f:1d:94:ab:91:df:
         e7:06:9c:c7:b2:43:98:ba:00:cc:44:5e:8c:09:fc:a2:c0:bd:
         36:0b:ad:d0:fd:06:49:81:38:6b:97:70:12:95:7e:ff:47:26:
         4f:cb:76:1f:d5:8e:12:d5:90:d0:1c:ea:ff:53:57:9b:93:e0:
         5b:fa:1a:09:ab:34:d3:b9:22:dc:cc:8b:f1:9b:9d:1f:4f:d1:
         6e:fe:58:31:7c:76:13:9b:30:0a:9f:05:55:17:0f:d5:cc:db:
         d6:f6:21:8c:c4:09:2f:13:67:0a:8a:69:63:db:6a:b2:3e:7e:
         b3:31:b7:f6:db:6a:67:38:1c:0f:e8:0c:2b:0c:54:38:b1:ff:
         21:b8:90:7e:bd:ff:57:79:2e:fa:a9:cb:82:3a:70:0f:33:4a:
         95:f8:00:8e:cf:57:de:d8:41:2a:5d:d5:3b:b4:9d:63:1a:f9:
         6c:16:ed:a9:59:51:a0:db:d8:13:c9:60:65:a5:3d:6a:53:f0:
         29:00:4c:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAxRUUxMTAvBgNVBAUTKDhDRjVDMThGODMxQ0E5MTJDODkzRkUwRThFNzMyMzUz
QjYwQTZFRDIwHhcNMjYxMDExMDc1NzA3WhcNMjYxMDE4MDc1NzA3WjAYMRYwFAYD
VQQDEw02YWNiNDE1My0yY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAounHso/XcuA/Dsc79vVAAtv1MgFJI3LudAFsHcV8tBxWsb5JQItOCGL/r6yL
mWn4nGsiLLH2/HKBygurnhXYKZBC7Vsbgu8+12daNLeBGn0iqR51TDrbbRNT40NY
+XyETxYqYqSBpXsDqoTki2UJqgJnDW/yke25bVB2/uY3jS5q/+mlieVdBtt11+sj
hXFitmwxBh0ff+t5Ie41LZ2K0FbwiPjsJUz7pJrMU6FcnVn8lD40e2yrURhnNB8h
M3GoBY+RHT/eLA/qHF0PznSfylf2K8Ye+Infl8hSv7sygQvVGwFU8wtEA2MBsNRT
feC5hnF+UZ3dW6o1m03NTJfkvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaYdqsm
zGkIV5iqqH+nhIvJJyBUMB8GA1UdIwQYMBaAFIz1wY+DHKkSyJP+Do5zI1O2Cm7S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDFFRS9ENjBDNzAwMkQ3
NEYxMUYwQjU4NzE0QkM2REQzNjQxRC9qUFhCajRNY3FSTElrXzRPam5NalU3WUti
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pQWEJqNE1jcVJMSWtfNE9qbk1qVTdZS2J0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDFFRS9ENjBDNzAwMkQ3NEYxMUYwQjU4NzE0QkM2REQzNjQxRC9qUFhCajRNY3FS
TElrXzRPam5NalU3WUtidEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJHChnRtZrzLnW7/HTPmTNj8sb2bAoPhAVg5PQvhkYc8OyeJP5iTOvwmSEk8y
hTjROcS8bQF2i7ZklPDW3r+JVgH0fx2Uq5Hf5wacx7JDmLoAzERejAn8osC9Ngut
0P0GSYE4a5dwEpV+/0cmT8t2H9WOEtWQ0Bzq/1NXm5PgW/oaCas007ki3MyL8Zud
H0/Rbv5YMXx2E5swCp8FVRcP1czb1vYhjMQJLxNnCoppY9tqsj5+szG39ttqZzgc
D+gMKwxUOLH/IbiQfr3/V3ku+qnLgjpwDzNKlfgAjs9X3thBKl3VO7SdYxr5bBbt
qVlRoNvYE8lgZaU9alPwKQBMEg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:03:46 2026 by rpki-client