Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
File:                     JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft (raw, json)
Hash identifier:          H1dZd94ehUvwL77D7dNOj5v4yt8Lij/0/Xv+TloVRK0=
Subject key identifier:   8B:27:6B:65:53:99:C9:8D:D7:79:77:F8:F1:6B:91:8C:70:88:38:10
Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
Certificate issuer:       /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Certificate serial:       0DD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
Manifest number:          0DA8
Signing time:             Sun 20 Sep 2026 17:55:55 +0000
Manifest this update:     Sun 20 Sep 2026 17:55:55 +0000
Manifest next update:     Sun 27 Sep 2026 17:55:55 +0000
Files and hashes:         1: JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl (hash: qPpNTwz2IoqreUMZn4P+GSp8pUFYfdTPHZHgLXkQgyM=)
                          2: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (hash: 2j8ZEZZDC+v0AsplIrNRFX86JLUI1D1lZouNpF7eL1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3538 (0xdd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
        Validity
            Not Before: Sep 20 17:55:55 2026 GMT
            Not After : Sep 27 17:55:55 2026 GMT
        Subject: CN=6ab01e2b-92c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:30:c0:ee:c8:ad:bf:75:f9:8f:2a:06:c1:
                    1f:f7:e2:a1:44:f6:1c:0a:c1:d3:86:96:10:ea:30:
                    22:ab:b9:2a:87:9e:7c:f7:9f:7c:31:36:5c:43:86:
                    08:c6:24:d7:3e:fe:c4:e6:bd:a5:c1:07:bb:4a:79:
                    92:2a:e9:1d:71:e6:a6:49:e9:76:8a:8b:f4:cc:b3:
                    25:ca:08:16:95:b4:0d:bb:a0:cc:a4:9e:d5:2d:1b:
                    92:4b:ac:90:7f:5c:70:30:89:3f:fe:80:b6:40:a6:
                    0a:5f:f1:5e:6b:0f:d9:26:d9:da:45:7e:77:0e:5f:
                    2a:29:4e:91:86:6d:05:29:fc:a1:4b:61:fc:8c:00:
                    21:19:d1:04:66:18:ba:d4:81:63:85:fc:3d:37:12:
                    cd:ff:d7:e7:13:01:1d:ab:5c:b5:27:5a:8e:f9:c5:
                    fb:0c:f6:f2:64:e3:03:91:d2:eb:42:65:41:dd:cf:
                    02:3d:24:72:7f:aa:02:10:ca:96:9d:b0:ba:4e:cc:
                    b8:c9:58:d6:fc:18:b2:12:84:df:7b:bc:a5:fe:95:
                    55:1c:e2:34:bf:ea:a4:cc:24:fd:fd:ac:71:a6:43:
                    18:54:77:c0:61:b1:28:6d:da:86:1d:84:f3:fa:5a:
                    19:a4:94:8b:47:5e:1b:09:a6:b7:13:f3:ac:fa:57:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:27:6B:65:53:99:C9:8D:D7:79:77:F8:F1:6B:91:8C:70:88:38:10
            X509v3 Authority Key Identifier:
                keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:11:f7:c2:ff:18:04:2b:09:d3:b1:5e:4e:e0:53:1e:40:a5:
         d7:61:cf:f5:1c:63:0d:39:01:ff:c0:b3:4f:30:76:33:c2:45:
         f7:23:f9:ca:65:22:13:ed:f1:05:9a:86:bf:41:aa:4e:7a:03:
         10:96:5c:41:1d:b1:30:59:b2:63:53:55:d4:a3:79:74:b9:c6:
         4a:39:26:48:5d:f2:66:25:d5:ea:7a:44:c0:24:8b:50:8e:70:
         96:e4:7f:2a:64:f8:7c:23:34:ab:a7:d1:5a:f9:2a:30:f0:28:
         c2:e1:53:6d:ad:a5:da:2e:a2:1a:18:03:39:f8:9b:da:c9:2a:
         d5:1e:ef:f2:8c:45:46:80:3f:de:ca:92:2a:d2:9b:e0:13:5e:
         08:35:22:b9:87:69:7e:06:e7:1b:45:e0:34:5c:43:a0:30:cf:
         32:23:51:b3:f2:a1:dd:74:18:26:68:f6:f0:d6:99:8f:28:41:
         56:cc:3f:6d:cc:97:fe:7a:58:14:49:43:d3:31:f3:6a:fb:e5:
         c8:72:e5:3f:4d:cd:36:09:a0:56:b6:32:d4:1e:97:80:3a:00:
         26:53:01:3e:4d:c6:49:ea:55:f2:38:84:74:7b:17:23:49:f3:
         32:d8:d1:4d:15:64:b5:ab:c8:f2:75:a0:e5:0e:a6:2d:f4:86:
         72:2f:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:39:07 2026 by rpki-client