Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
File:                     J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json)
Hash identifier:          NEZFLXXuWaM6PzoCeVtDZMGPWKR1LqKs4HsCQj+vHHY=
Subject key identifier:   F5:60:8C:06:1B:82:7D:CA:07:96:09:1B:4F:63:48:53:CD:41:79:66
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Certificate issuer:       /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial:       170D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
Manifest number:          16FB
Signing time:             Sun 20 Sep 2026 16:37:58 +0000
Manifest this update:     Sun 20 Sep 2026 16:37:58 +0000
Manifest next update:     Sun 27 Sep 2026 16:37:58 +0000
Files and hashes:         1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: ZAXIAjJ0NuRx/jwhDDDDEBGtqy9NUk8k1+yXKsmJUlE=)
                          2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: v/SZ7H/SLnlGFkwwxhkg6bW6tjnET9pIm6y1CUX4oos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5901 (0x170d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
        Validity
            Not Before: Sep 20 16:37:58 2026 GMT
            Not After : Sep 27 16:37:58 2026 GMT
        Subject: CN=6ab00be6-be82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:65:f8:80:4b:c2:55:30:ab:eb:ca:78:b2:
                    d3:2a:7e:6f:88:53:e3:a1:53:f3:e5:32:a0:e4:aa:
                    0f:b4:8f:00:08:e2:5a:44:d4:52:86:98:ec:ec:4e:
                    4b:48:42:73:79:c0:9b:e4:1f:8f:4b:ca:e1:42:1d:
                    d4:0d:6f:e2:0e:87:9f:3c:4a:6c:ab:93:33:f9:67:
                    da:39:51:2a:97:af:25:33:f7:d1:63:8b:da:2e:52:
                    f7:b5:67:c5:19:db:60:21:89:6a:41:e4:0f:01:c3:
                    f9:de:d6:1f:3f:17:14:b8:55:19:de:fe:c0:3d:eb:
                    d0:87:5a:2e:45:cc:94:75:96:cd:b7:25:39:22:63:
                    82:b9:40:b4:a8:48:43:bf:19:dc:5d:c6:90:38:a0:
                    36:6d:c4:d5:b7:67:df:a6:6a:a7:7a:05:89:70:37:
                    e6:f1:99:55:e7:c1:e8:37:d2:b7:40:c5:27:23:72:
                    12:3b:c9:aa:27:76:e0:9a:19:30:f1:9e:0d:90:f3:
                    51:9c:a1:a5:72:9f:1e:87:b4:04:0d:d5:13:f2:6d:
                    ce:82:c3:c1:5f:dc:92:66:4b:7e:4a:42:64:53:25:
                    4d:ce:cc:27:55:86:75:58:33:6b:82:5e:43:98:ff:
                    70:aa:de:4b:92:e0:e7:cd:0c:6f:74:70:26:6f:e5:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:60:8C:06:1B:82:7D:CA:07:96:09:1B:4F:63:48:53:CD:41:79:66
            X509v3 Authority Key Identifier:
                keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:28:66:28:f4:6e:63:bb:b6:3d:a2:6d:59:7f:48:79:23:
         7c:91:02:b7:9b:0e:c4:b5:cd:6a:bd:78:2c:0e:66:dc:29:41:
         c1:80:28:ae:a7:32:e3:82:7f:f8:e4:b2:f5:51:8c:c7:11:04:
         b6:4c:9a:c4:1b:c0:d5:f5:a7:45:d9:42:b8:b9:94:bb:fc:f1:
         5a:b6:84:45:e4:78:29:70:73:c7:01:71:8c:b5:27:33:53:76:
         47:b1:27:36:d2:31:c2:25:1f:5d:0c:58:00:fb:c3:14:ea:94:
         c8:93:cd:af:8b:65:6a:aa:7f:4b:2d:b4:63:8b:9b:ba:c6:b3:
         31:59:67:84:9e:12:4d:7f:d7:65:ca:be:4a:e6:39:0d:7a:f1:
         dd:93:00:33:7d:dd:66:0c:b6:ee:2d:7c:94:4a:32:d3:eb:a9:
         c5:30:8e:65:91:b6:3f:3b:4d:1c:73:c1:9c:38:00:2d:7e:37:
         35:9d:b4:a4:b7:81:54:77:7b:32:fa:37:c1:04:df:fe:67:b0:
         b2:3c:ac:1f:8f:4a:86:fd:4b:87:76:a1:51:10:ea:07:a2:6f:
         ca:2d:67:9a:e4:71:9a:79:fb:29:34:87:05:fe:44:13:d1:85:
         11:ec:4f:b1:30:7b:f5:d5:99:fb:56:31:9e:72:47:a6:36:0b:
         67:31:a5:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB
MjY3OTdDOTQwHhcNMjYwOTIwMTYzNzU4WhcNMjYwOTI3MTYzNzU4WjAYMRYwFAYD
VQQDEw02YWIwMGJlNi1iZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJtl+IBLwlUwq+vKeLLTKn5viFPjoVPz5TKg5KoPtI8ACOJaRNRShpjs7E5L
SEJzecCb5B+PS8rhQh3UDW/iDoefPEpsq5Mz+WfaOVEql68lM/fRY4vaLlL3tWfF
GdtgIYlqQeQPAcP53tYfPxcUuFUZ3v7APevQh1ouRcyUdZbNtyU5ImOCuUC0qEhD
vxncXcaQOKA2bcTVt2ffpmqnegWJcDfm8ZlV58HoN9K3QMUnI3ISO8mqJ3bgmhkw
8Z4NkPNRnKGlcp8eh7QEDdUT8m3OgsPBX9ySZkt+SkJkUyVNzswnVYZ1WDNrgl5D
mP9wqt5LkuDnzQxvdHAmb+VpbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVgjAYb
gn3KB5YJG09jSFPNQXlmMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE
MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f
TnZrZldPQlp1SW1pWjVmSlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgn0oZij0bmO7tj2ibVl/SHkjfJECt5sOxLXNar14LA5m3ClBwYAorqcy44J/
+OSy9VGMxxEEtkyaxBvA1fWnRdlCuLmUu/zxWraEReR4KXBzxwFxjLUnM1N2R7En
NtIxwiUfXQxYAPvDFOqUyJPNr4tlaqp/Sy20Y4ubusazMVlnhJ4STX/XZcq+SuY5
DXrx3ZMAM33dZgy27i18lEoy0+upxTCOZZG2PztNHHPBnDgALX43NZ20pLeBVHd7
Mvo3wQTf/mewsjysH49Khv1Lh3ahURDqB6Jvyi1nmuRxmnn7KTSHBf5EE9GFEexP
sTB79dWZ+1YxnnJHpjYLZzGlqw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:27:25 2026 by rpki-client