Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
File:                     J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json)
Hash identifier:          tZ+P8yIaQ01rvL2TM2nIOP/9fQzdqdix5udRByiBAiY=
Subject key identifier:   F4:F8:E4:9C:4B:C5:C7:AD:5A:A0:FA:28:79:D1:40:91:DB:6A:5B:1E
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       0434
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
Manifest number:          0427
Signing time:             Fri 25 Sep 2026 00:06:55 +0000
Manifest this update:     Fri 25 Sep 2026 00:06:55 +0000
Manifest next update:     Fri 02 Oct 2026 00:06:55 +0000
Files and hashes:         1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: vyR9+e8GEcIaiiE+2d8zRtGmZ0w56Jr1oGlmg0DZZDE=)
                          2: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: 8sYcPsbiw5zP7b8gIQawA14VC0P46MJxFwXY502uCtY=)
                          3: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: eJU27ZylxWRdH4yTS7w9NECP9sf6xkVZe7M8HJ4Q68w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Sep 25 00:06:55 2026 GMT
            Not After : Oct  2 00:06:55 2026 GMT
        Subject: CN=6ab5bb1f-97f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:20:fc:45:85:3a:85:1c:c0:41:31:15:18:
                    08:67:55:e4:e2:5b:31:2b:60:83:ae:67:77:a1:94:
                    95:e3:2e:20:b0:9a:44:c9:7e:87:42:1b:37:2b:fb:
                    ec:8c:0d:30:c9:3b:e6:64:25:26:89:86:f6:0a:a2:
                    b7:7f:ad:8e:89:72:4a:61:f3:73:8e:76:f7:9f:be:
                    91:00:53:f0:a6:9b:cb:84:b7:ad:db:fd:a7:64:51:
                    7d:1a:90:ef:0b:01:e1:b2:cc:6b:c9:22:e6:67:1c:
                    4e:33:c4:ec:be:3b:a0:8c:5b:1b:02:d6:96:60:6e:
                    a6:2a:f3:fe:af:36:09:ca:29:20:5d:ea:1d:c9:df:
                    ff:20:a7:e0:6b:40:32:f2:eb:b0:da:5a:e1:03:5e:
                    91:46:9d:d8:ce:17:4d:7f:e9:7c:e8:cf:ab:51:8a:
                    75:c7:1e:59:73:12:39:bf:d3:d4:00:95:e1:13:d7:
                    b4:78:e4:0a:f7:8d:24:6b:0b:42:18:f6:23:49:23:
                    6f:3d:77:00:04:d5:db:54:fa:0e:b9:a5:c3:e2:b1:
                    71:f1:e8:1d:f8:67:95:03:e5:2b:1f:a9:d9:46:47:
                    a2:99:ae:2f:ad:90:e3:54:c2:56:27:ae:f1:4f:88:
                    f5:52:53:97:17:b4:75:9b:dc:aa:ca:97:aa:d0:e1:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:E4:9C:4B:C5:C7:AD:5A:A0:FA:28:79:D1:40:91:DB:6A:5B:1E
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:1a:b7:cc:eb:74:44:09:55:8e:39:ee:42:84:cc:60:71:
         a4:c8:75:a7:72:7c:e3:a7:83:1b:e7:09:b2:60:7f:0e:37:c1:
         c4:08:e5:6d:9a:30:a8:35:c4:cb:fb:b4:c9:e6:f1:cb:7c:de:
         89:e8:d3:78:b7:0e:38:dc:a5:90:4b:c2:4f:5b:69:54:38:65:
         9c:08:e8:30:a2:38:f5:30:a3:ac:c8:e2:9c:4a:f2:01:65:60:
         45:12:09:8d:37:3f:89:9a:ea:f1:aa:70:27:59:a7:db:00:91:
         1d:3d:7d:3e:77:99:53:f0:77:25:39:22:3e:f0:a6:5c:b3:7c:
         f3:ec:42:94:f3:69:8a:6d:08:2a:1a:d7:1d:31:8d:63:e9:a9:
         3c:da:4c:74:21:2d:95:1e:f9:8b:dc:16:e8:b9:48:1c:81:55:
         06:fb:94:eb:f4:60:5f:ff:0a:00:04:c8:44:9c:0a:24:5c:5f:
         59:ff:dc:72:fa:f8:56:46:30:61:9a:d3:27:22:46:d3:dd:ac:
         6a:a9:af:b5:c8:f1:8f:79:61:5e:b1:45:c7:c9:47:f4:17:cc:
         26:2c:8e:49:a4:9a:81:be:4e:b3:0c:2c:21:55:40:47:13:28:
         47:a1:6b:02:6b:bd:3b:cb:e0:c0:1a:a7:25:29:d1:33:e5:5d:
         1e:c2:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:40:15 2026 by rpki-client