Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
File:                     JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json)
Hash identifier:          hVee1Fs4ll8Qr6W2aquxgpp5xnQQ9fLO9DTTIpJIJUw=
Subject key identifier:   89:DE:FF:39:8D:3D:34:F9:BC:03:FA:99:23:51:67:56:7B:1F:3F:42
Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28
Certificate issuer:       /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28
Certificate serial:       2AD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
Manifest number:          2ACD
Signing time:             Thu 08 Oct 2026 15:36:02 +0000
Manifest this update:     Thu 08 Oct 2026 15:36:01 +0000
Manifest next update:     Thu 15 Oct 2026 15:36:01 +0000
Files and hashes:         1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: ULGW60n+nPU0VRaf6gjjmmoQWQ7jpG6QfQVzNgIpRuU=)
                          2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: hriHnwahZFQ690sRLwz6iRs8F4NGV9dzWdCEbvzLxNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl
                          rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10969 (0x2ad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28
        Validity
            Not Before: Oct  8 15:36:01 2026 GMT
            Not After : Oct 15 15:36:01 2026 GMT
        Subject: CN=6ac7b862-ff1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:26:d0:48:dc:68:4f:f4:1a:09:72:9c:ad:
                    91:46:21:f2:23:1d:2d:63:f5:b3:3f:7f:30:d5:4c:
                    20:93:c6:1e:a2:59:0c:71:74:33:2c:0c:33:4b:75:
                    f0:53:6b:f7:2a:d7:55:99:82:2d:cb:a6:b5:11:26:
                    1e:9d:ec:51:38:b0:7d:30:e4:f2:d7:72:32:d6:58:
                    e3:d0:4f:a3:c0:c7:f5:ff:15:b1:c2:59:63:62:18:
                    0c:84:6d:2b:82:65:aa:18:b0:12:71:46:c2:9b:e3:
                    7c:53:72:77:4d:80:c7:b8:1e:e1:fe:ad:a1:40:53:
                    36:64:bf:5c:f1:3f:8d:ec:ad:23:d0:e1:8c:ce:a2:
                    e7:cd:8e:ee:8c:ec:46:cf:0a:f0:a7:41:b3:bd:2b:
                    20:4b:ee:18:0f:47:fe:9e:da:7b:60:e1:61:20:e2:
                    5c:a2:71:7c:43:32:75:7a:f3:3c:74:c0:dc:80:25:
                    e7:d1:54:2b:ee:40:11:46:a6:25:bf:78:b9:71:13:
                    4a:e9:97:72:03:6f:fe:2d:ad:28:4c:a0:08:2b:ef:
                    f0:0f:2a:ed:c3:72:6e:9a:be:85:60:47:cd:e5:04:
                    ac:42:64:95:66:8d:a2:4e:90:13:b0:f5:19:9a:10:
                    e6:fd:13:c4:d1:92:1c:68:9f:19:aa:09:4a:3f:e6:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DE:FF:39:8D:3D:34:F9:BC:03:FA:99:23:51:67:56:7B:1F:3F:42
            X509v3 Authority Key Identifier:
                keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:da:13:fb:b8:36:7b:7b:d1:aa:ab:3c:e6:58:78:a0:7c:18:
         78:49:09:d1:e4:7a:e1:b2:6e:3e:68:f5:61:f5:94:3b:8e:59:
         d5:62:99:f6:96:d8:a7:6a:8a:54:52:88:9a:12:50:43:01:83:
         94:7e:eb:c5:c6:0c:a1:ba:3c:ab:d9:f9:f9:f4:8b:fe:ec:30:
         b8:52:cc:2b:14:c8:8f:95:41:5f:e5:a6:d9:c9:35:ae:b9:94:
         d1:0f:d3:06:a1:b6:73:e2:d6:aa:3e:c4:15:f8:90:4b:14:2f:
         16:01:58:ec:76:76:fe:80:ae:32:9d:e3:70:0b:9c:83:e5:65:
         af:14:ee:cf:88:81:0f:4d:64:4e:9f:6a:5e:54:27:6b:e2:61:
         c8:5e:8d:2b:ce:28:58:6d:67:3d:22:bc:a3:33:b1:47:b9:a0:
         78:36:01:bc:a8:2e:d9:27:20:55:f7:9a:0c:98:32:6d:d8:49:
         3b:b6:f2:6d:a9:e3:93:e1:a5:93:ea:e2:a9:57:e8:47:bf:80:
         97:f6:0f:0f:e4:d4:81:ff:cc:59:fd:b6:c6:1c:b0:39:b3:54:
         32:45:ab:48:f4:23:c3:ad:5f:56:87:08:9a:ac:5c:62:2d:87:
         6f:dd:a0:7f:f1:ba:e9:98:ad:40:60:26:fe:00:73:c2:20:ca:
         50:9a:b9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:44:12 2026 by rpki-client