Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
File:                     J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json)
Hash identifier:          Q4hE9JQ6ErvHynyHPjd9SoWi6heQ3eiaVbXLsiFUYBY=
Subject key identifier:   72:42:95:31:37:F9:43:8F:92:81:10:07:CE:F6:72:B7:08:93:B6:23
Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
Certificate issuer:       /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Certificate serial:       1E8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
Manifest number:          1E7F
Signing time:             Mon 28 Sep 2026 16:05:46 +0000
Manifest this update:     Mon 28 Sep 2026 16:05:45 +0000
Manifest next update:     Mon 05 Oct 2026 16:05:45 +0000
Files and hashes:         1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: CVNNSC4RG58g+NyCVFK4hehR+/ASLk0/q0rtcXIa1uA=)
                          2: C78E4E640BC111F19AB158B3293D8C67.roa (hash: UHpdeBy1a2ejJJBR1Oum4bKcILEQ59Ie3ax0oFfhz0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
                          rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 16:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7821 (0x1e8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
        Validity
            Not Before: Sep 28 16:05:45 2026 GMT
            Not After : Oct  5 16:05:45 2026 GMT
        Subject: CN=6aba905a-5298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:4a:fc:af:20:ff:23:04:87:94:72:fc:27:
                    6c:7a:aa:cb:98:28:ed:60:62:13:2a:37:79:ca:94:
                    97:55:74:47:6b:25:8e:9c:aa:f3:9e:80:f3:1c:42:
                    d8:1b:39:fb:43:eb:b0:14:cb:17:1e:e7:54:ca:ab:
                    81:1f:89:31:a9:0c:80:16:4f:70:a4:de:a8:cd:2a:
                    ff:d0:f6:55:77:7b:c1:97:a7:7d:84:9e:b8:8e:f5:
                    5e:ca:67:97:2b:d4:40:88:b8:ee:1c:30:b9:61:f5:
                    6b:04:09:73:59:c6:e9:c5:95:dd:44:12:83:87:49:
                    f2:e2:fa:cb:e0:d4:f4:b8:ac:20:3c:c3:1a:b1:47:
                    78:fa:0a:3e:fd:9b:df:5c:7a:6a:93:3d:3a:59:b7:
                    54:bf:87:05:07:f9:81:88:0a:3a:09:2e:83:9e:f6:
                    f0:a5:7d:1c:9e:8a:81:3c:93:2e:bc:d7:5f:26:c3:
                    c8:2c:40:a3:31:29:cf:b9:f3:2f:9b:d4:5e:95:ad:
                    c7:e0:49:bb:1a:c2:1f:60:fe:ce:51:f9:67:32:64:
                    e7:3f:3e:98:3c:89:e5:45:ae:4a:1d:15:4e:11:7b:
                    27:f7:7f:cd:cd:d7:ae:48:65:91:d2:d5:af:f8:25:
                    a2:b2:7a:53:a2:d4:87:91:37:a9:87:25:b7:a6:82:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:42:95:31:37:F9:43:8F:92:81:10:07:CE:F6:72:B7:08:93:B6:23
            X509v3 Authority Key Identifier:
                keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4e:c6:b0:6f:b5:ab:3f:a4:c0:19:a8:74:07:72:5b:3a:e7:
         98:d6:66:c9:31:6c:2a:36:02:8f:e7:ec:2e:93:c1:50:12:ff:
         94:ad:5b:a0:d3:85:b9:c7:45:d9:a4:da:29:7e:43:5e:a0:56:
         c6:94:6f:97:00:be:55:be:58:9a:e0:5b:37:37:db:fd:50:ee:
         8c:d0:ba:d1:15:2f:71:7e:cf:2a:e9:40:b5:23:96:35:7a:a4:
         bd:a0:9b:e6:97:19:a0:2f:e4:97:9b:ba:8e:26:56:46:0c:c1:
         c5:31:35:d1:1b:50:8b:a4:2e:0b:5e:86:03:11:18:0e:23:8a:
         e9:37:7a:1a:63:29:44:ef:9e:69:a2:a9:f8:52:e2:72:be:de:
         2f:e5:b8:ea:d4:ab:87:b8:67:06:6c:a5:46:b6:35:b4:06:12:
         4c:4c:01:3e:cc:d1:e3:66:29:bc:c3:55:6e:c5:23:c4:fa:98:
         1e:2b:63:e5:01:29:ed:a3:72:1b:54:59:06:77:ff:2c:e6:44:
         c5:68:42:0f:b7:99:76:0a:db:52:45:19:b2:d2:83:7d:f4:44:
         ed:2d:da:75:03:f8:28:c2:be:24:a5:0a:09:3f:1b:cb:77:a4:
         be:95:16:a8:e5:bd:56:3f:92:3b:60:7e:81:a9:ba:40:ee:da:
         a8:47:b3:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw
N0ZBQTkwNzIwHhcNMjYwOTI4MTYwNTQ1WhcNMjYxMDA1MTYwNTQ1WjAYMRYwFAYD
VQQDEw02YWJhOTA1YS01Mjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKlK/K8g/yMEh5Ry/CdseqrLmCjtYGITKjd5ypSXVXRHayWOnKrznoDzHELY
Gzn7Q+uwFMsXHudUyquBH4kxqQyAFk9wpN6ozSr/0PZVd3vBl6d9hJ64jvVeymeX
K9RAiLjuHDC5YfVrBAlzWcbpxZXdRBKDh0ny4vrL4NT0uKwgPMMasUd4+go+/Zvf
XHpqkz06WbdUv4cFB/mBiAo6CS6DnvbwpX0cnoqBPJMuvNdfJsPILECjMSnPufMv
m9Rela3H4Em7GsIfYP7OUflnMmTnPz6YPInlRa5KHRVOEXsn93/NzdeuSGWR0tWv
+CWisnpTotSHkTephyW3poJtuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJClTE3
+UOPkoEQB872crcIk7YjMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy
NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV
OTZMNVVmc1NoSDRILXFrSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsk7GsG+1qz+kwBmodAdyWzrnmNZmyTFsKjYCj+fsLpPBUBL/lK1boNOFucdF
2aTaKX5DXqBWxpRvlwC+Vb5YmuBbNzfb/VDujNC60RUvcX7PKulAtSOWNXqkvaCb
5pcZoC/kl5u6jiZWRgzBxTE10RtQi6QuC16GAxEYDiOK6Td6GmMpRO+eaaKp+FLi
cr7eL+W46tSrh7hnBmylRrY1tAYSTEwBPszR42YpvMNVbsUjxPqYHitj5QEp7aNy
G1RZBnf/LOZExWhCD7eZdgrbUkUZstKDffRE7S3adQP4KMK+JKUKCT8by3ekvpUW
qOW9Vj+SO2B+gam6QO7aqEezxg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:23:08 2026 by rpki-client