Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File:                     jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier:          4VGOsgmx/lVTeAmXkp9QVZ1bGd3hjwL6MO8z1xY5Vss=
Subject key identifier:   EB:79:94:90:CF:65:96:D8:F4:18:77:8F:14:F0:9B:45:26:B4:AC:89
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer:       /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial:       05BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number:          05A9
Signing time:             Sun 20 Sep 2026 23:01:20 +0000
Manifest this update:     Sun 20 Sep 2026 23:01:19 +0000
Manifest next update:     Sun 27 Sep 2026 23:01:19 +0000
Files and hashes:         1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: ni7nvMjTalyjWz6lo0uJccN9glLG74cpIvUXMj9qpS8=)
                          2: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: uWKrlH46xOMUPQf0I41m9PfK6LPIgrPit2IHhoLq4XQ=)
                          3: 19270196406311ECB405CB27C4F9AE02.roa (hash: HVYsfOxlb2WAh2eGE9kwR0kPlhU1KxlVthyk27GCA3w=)
                          4: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (hash: GGQqfvLx7zM2VjLtrQhpcfOMC/ugg1QcYqduayPT2Bc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
                          rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
        Validity
            Not Before: Sep 20 23:01:19 2026 GMT
            Not After : Sep 27 23:01:19 2026 GMT
        Subject: CN=6ab065bf-2edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:7e:0b:a2:84:5a:b9:bb:87:2d:83:1c:e5:
                    26:e5:37:47:f5:79:cd:24:4f:74:7b:4d:81:62:ca:
                    a4:32:ac:ce:8a:7b:6e:fe:8a:f7:a3:4b:f3:23:2b:
                    fc:20:e5:e2:38:48:2d:f7:0f:ec:d5:f6:7c:6b:e7:
                    08:65:7e:a5:05:21:95:03:7c:77:d9:e2:ed:10:86:
                    70:f5:14:1b:a3:71:19:ec:5c:43:dd:5a:d1:2f:c4:
                    86:70:c6:3d:aa:3c:97:a8:a9:9f:d2:ac:81:b1:3a:
                    a0:b5:a6:c3:6e:2e:e1:01:2e:93:22:b0:89:86:b7:
                    eb:74:b8:ba:79:65:b7:b6:22:e5:b0:32:b7:24:49:
                    bc:8f:e9:93:be:71:10:83:22:e5:df:3e:de:32:ba:
                    8b:a2:d0:8c:0f:7f:51:e0:b5:16:ce:37:0b:c3:43:
                    fe:39:6d:b7:4a:7d:c8:d2:6a:ae:56:ff:ed:74:16:
                    8c:2f:29:30:8e:2f:30:0a:73:54:ff:d9:0a:19:0e:
                    79:13:37:9b:d7:31:ed:23:93:8f:e4:2e:c1:b8:19:
                    69:20:6d:c0:71:4a:3e:0f:f8:8d:0d:36:86:bb:a1:
                    2d:46:4c:70:16:24:bb:02:76:74:d3:65:ae:7b:39:
                    59:2a:e1:ad:f4:27:25:13:56:7d:28:d8:ef:cc:fd:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:79:94:90:CF:65:96:D8:F4:18:77:8F:14:F0:9B:45:26:B4:AC:89
            X509v3 Authority Key Identifier:
                keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:de:64:e8:1a:86:40:f9:0f:17:59:9b:ba:2e:c3:f2:ec:
         3b:a2:e5:6b:a5:1e:62:74:1c:9d:01:ec:c9:e3:70:a3:33:d4:
         72:7d:b5:8d:bf:f2:74:9b:e3:96:89:fe:fd:d9:bd:5b:81:f0:
         7b:1d:9c:19:d5:ac:18:94:ba:57:22:cb:c3:93:a1:55:94:7f:
         57:a6:e7:4a:5a:7b:e9:8d:eb:10:67:3c:bb:be:6d:e2:1f:82:
         71:80:c6:6e:7f:a1:31:7b:f9:a9:e6:b9:c0:90:8b:f4:e6:fe:
         0a:bd:07:01:ce:5c:0c:ec:15:01:6e:89:26:25:9a:8d:cb:df:
         18:f6:f9:03:9c:3f:0d:fc:93:df:c4:5b:11:ad:ae:a6:fd:0f:
         2a:c9:f5:24:f7:2d:45:38:5a:8b:e5:ff:60:82:ae:32:45:26:
         5e:63:e1:53:d5:7e:33:3e:54:51:7a:ee:41:4e:b7:54:05:42:
         8c:8c:b4:d9:57:70:5d:a3:a5:12:40:ed:19:7d:a4:8f:40:93:
         88:52:1a:2f:c2:62:e1:a4:a5:29:8b:f0:9f:2c:7a:6c:c4:82:
         96:79:bf:14:d6:7c:5b:82:f2:cb:54:76:8a:40:84:81:3f:ac:
         74:5e:10:11:63:26:39:31:ad:76:4a:25:91:7a:8e:1d:4f:8f:
         68:bc:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:09:18 2026 by rpki-client