Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
File:                     jMU6mSl_HMCgv73r8k4TKw2EHHY.mft (raw, json)
Hash identifier:          TXhsiKMSxik32owtCXNIGS1FHhQj6XeMu/jx2zQqehw=
Subject key identifier:   C9:9F:B2:0D:01:3A:DF:70:12:7C:E3:BE:21:A0:7F:45:DA:C8:19:47
Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
Certificate issuer:       /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
Manifest number:          01E3
Signing time:             Fri 25 Sep 2026 03:34:18 +0000
Manifest this update:     Fri 25 Sep 2026 03:34:18 +0000
Manifest next update:     Fri 02 Oct 2026 03:34:18 +0000
Files and hashes:         1: jMU6mSl_HMCgv73r8k4TKw2EHHY.crl (hash: 28PFyO2TpslTmaJa9khyL7btIkYIK+CStl3kw7jryxQ=)
                          2: E614FEEED6AF11EEAB03B528C4F9AE02.roa (hash: RDlVLDLOhqOnI9I6d3Hl9srXxZWtSoRzaaXEKYVLEDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
                          rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D93, serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
        Validity
            Not Before: Sep 25 03:34:18 2026 GMT
            Not After : Oct  2 03:34:18 2026 GMT
        Subject: CN=6ab5ebba-b8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:03:48:3f:a1:c4:2d:34:aa:49:bb:3f:5b:
                    47:fd:5c:7b:c3:14:e0:66:69:f1:a1:e8:32:83:2f:
                    86:b6:00:de:33:62:e8:9a:e9:06:5c:20:1e:f4:48:
                    a0:e8:05:32:03:32:d0:f2:b9:df:fe:31:5b:bb:46:
                    e0:50:27:98:93:be:9a:6e:51:e9:df:d0:f6:f2:17:
                    f4:e6:4a:95:e8:32:d4:b7:b7:c4:43:39:f5:79:be:
                    18:0c:e1:60:f5:22:70:8e:84:9e:73:8a:09:3a:d6:
                    98:4d:63:67:6c:1e:d0:87:cd:3d:f7:95:40:b5:c5:
                    c3:6d:f2:12:eb:2b:b7:42:25:4a:bf:8f:17:8f:a5:
                    f1:1e:ef:8b:bf:61:97:74:3c:e3:a2:4c:0b:84:c1:
                    af:b1:6a:18:40:29:18:74:3a:86:86:61:a1:d4:be:
                    e0:71:df:23:ef:a1:a7:94:50:5f:18:3c:ad:25:64:
                    ed:7d:1e:33:39:e5:4b:90:2c:1d:a8:3f:ed:e2:b2:
                    da:53:9f:46:23:7f:9d:b5:a7:77:71:0a:dd:29:b0:
                    7b:8c:85:65:80:3d:7a:f1:f7:af:09:b1:e9:64:f3:
                    61:1b:2a:9b:3a:7d:ae:0a:ee:dd:be:f8:c5:86:ac:
                    b7:44:b3:47:f0:08:94:bc:bb:6b:c7:20:30:e3:25:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9F:B2:0D:01:3A:DF:70:12:7C:E3:BE:21:A0:7F:45:DA:C8:19:47
            X509v3 Authority Key Identifier:
                keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c0:82:7d:cf:05:b8:27:ac:d3:27:c8:43:39:31:55:ed:3d:
         be:c5:1f:0e:28:4b:31:57:7e:7d:ef:05:b5:9d:59:d6:30:76:
         a2:cf:13:a1:9d:5e:51:d2:8a:7f:a1:95:6a:01:de:fc:84:a7:
         c7:07:9d:59:3d:4a:bf:ad:97:ff:ac:fe:bf:d6:8d:ac:9c:83:
         d4:07:ce:04:66:47:32:f1:91:55:b5:62:f1:05:55:ae:72:50:
         8a:8f:cb:84:00:5b:45:0b:d2:99:66:e8:97:c7:2e:41:31:03:
         1a:9a:d2:a3:71:f6:71:c9:06:aa:ef:5b:fd:26:39:71:4c:0d:
         0a:1d:5f:73:2a:e3:b7:e1:eb:30:95:c2:43:fc:f3:40:9d:db:
         29:03:7c:e2:ce:66:e9:e0:c0:3d:1f:76:72:c0:69:97:d5:63:
         c2:94:c3:26:f5:5b:5d:32:da:6c:9b:45:fe:21:2f:75:e8:66:
         4d:66:f3:03:e6:db:3b:b8:89:31:f8:a6:e6:29:6e:ea:b0:37:
         69:f1:99:c9:83:93:dd:d3:dc:b8:d4:8e:c3:8b:fe:62:a7:e9:
         0b:34:ca:b2:b5:c4:db:6b:3c:4e:e0:0f:60:d2:39:f5:b3:b9:
         37:79:d2:c3:15:99:ec:31:1c:78:d3:93:1d:98:3d:f6:0a:f6:
         fd:08:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:14:55 2026 by rpki-client