Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
File:                     Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json)
Hash identifier:          JZxwwc1T5w9LeEMqYvPUVM1E/GoITfxyS5Ldk6nGzWQ=
Subject key identifier:   40:5F:5C:E9:D3:40:8D:47:79:B9:4A:11:79:48:D9:A6:CF:46:90:51
Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
Certificate issuer:       /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
Certificate serial:       069B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
Manifest number:          0693
Signing time:             Sun 20 Sep 2026 22:21:44 +0000
Manifest this update:     Sun 20 Sep 2026 22:21:44 +0000
Manifest next update:     Sun 27 Sep 2026 22:21:44 +0000
Files and hashes:         1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: 3hT6NBy95yh3jAnPBpVS4i0Djid97Tb3gtMZDtMhdAc=)
                          2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: nyEjACdQQ3gUtN5WbVUDNxe876NOG369TAi+iHxyhOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl
                          rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
        Validity
            Not Before: Sep 20 22:21:44 2026 GMT
            Not After : Sep 27 22:21:44 2026 GMT
        Subject: CN=6ab05c78-26e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:18:94:bb:51:f1:4f:89:00:3a:70:2e:8a:
                    4d:64:f0:dc:d6:29:8f:6f:c2:55:9d:16:8e:83:63:
                    7f:75:5a:c7:88:48:87:e9:00:11:57:7d:1f:33:20:
                    8e:63:49:64:32:43:c6:65:34:b1:52:40:0a:dd:74:
                    0b:98:47:88:43:33:cf:1c:31:8f:d4:84:b8:07:99:
                    2b:bd:c0:83:c9:bb:ed:58:34:e7:5e:79:7d:00:51:
                    63:a9:31:16:fd:52:ec:49:e0:29:15:62:db:ba:a2:
                    04:f9:f4:c5:1a:e7:15:e5:48:c9:25:e8:8e:de:1d:
                    be:33:03:0f:3b:b0:a4:1b:62:7b:5d:58:3c:39:ba:
                    df:c1:18:61:ba:31:c4:51:09:f2:39:93:19:74:66:
                    4b:83:cf:65:3f:8f:82:c6:4b:71:41:58:c0:d4:e4:
                    94:0e:cb:8a:70:20:0d:b2:95:e2:38:8e:22:a6:c2:
                    21:d4:33:da:44:25:5b:85:f9:77:06:d6:b8:34:8e:
                    65:ae:50:a3:f8:39:bc:cc:0a:4d:cb:2f:7f:77:da:
                    a0:27:fa:4c:77:03:ae:4a:a1:cc:58:77:a5:79:6d:
                    01:b1:0f:d9:c9:a5:ec:ce:e3:61:51:52:41:6e:bf:
                    1a:9e:24:24:77:97:f7:e4:5c:57:07:a6:56:d2:4f:
                    38:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5F:5C:E9:D3:40:8D:47:79:B9:4A:11:79:48:D9:A6:CF:46:90:51
            X509v3 Authority Key Identifier:
                keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:e7:a2:d1:5c:27:f5:3a:80:f0:66:2a:a3:75:ae:ef:58:
         7f:70:f4:ef:94:eb:d4:d5:e9:2a:a6:7c:e2:26:ec:61:48:b8:
         72:c6:1b:ff:64:66:22:9e:27:33:ab:08:60:d6:42:68:13:8c:
         14:70:97:42:0e:94:f3:a1:4d:6a:de:ce:83:30:2d:37:57:22:
         cc:7a:bb:e0:0f:4c:ed:61:4b:8b:54:df:0f:d5:6b:b8:2a:9d:
         4f:8f:b7:62:f2:5e:b9:b9:63:30:71:a2:99:74:e9:00:08:f8:
         bb:a8:26:66:2a:ee:7d:41:f9:61:44:49:f1:48:1c:aa:9d:52:
         ae:96:67:bb:af:12:76:64:e0:91:09:6e:c3:23:a9:4f:04:29:
         e4:90:41:6d:ec:ac:21:63:bc:7b:82:f5:50:00:40:30:68:63:
         be:fd:34:00:cb:00:8f:1e:da:14:c9:d8:4b:19:2a:96:c9:d3:
         08:05:07:99:b8:7e:0e:16:93:1f:b3:f1:b8:28:09:cb:81:ce:
         56:0d:96:f7:eb:17:3f:4a:bb:68:be:bc:b7:99:90:cb:45:28:
         12:99:8d:bc:a2:7f:59:9e:1a:50:5e:b4:db:16:72:b7:43:e2:
         44:81:9d:a5:03:10:d7:6a:5e:e4:6c:64:b5:46:6f:b9:89:88:
         fa:dc:0f:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD
Rjk2NDRGRjUwHhcNMjYwOTIwMjIyMTQ0WhcNMjYwOTI3MjIyMTQ0WjAYMRYwFAYD
VQQDEw02YWIwNWM3OC0yNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQEYlLtR8U+JADpwLopNZPDc1imPb8JVnRaOg2N/dVrHiEiH6QARV30fMyCO
Y0lkMkPGZTSxUkAK3XQLmEeIQzPPHDGP1IS4B5krvcCDybvtWDTnXnl9AFFjqTEW
/VLsSeApFWLbuqIE+fTFGucV5UjJJeiO3h2+MwMPO7CkG2J7XVg8ObrfwRhhujHE
UQnyOZMZdGZLg89lP4+CxktxQVjA1OSUDsuKcCANspXiOI4ipsIh1DPaRCVbhfl3
Bta4NI5lrlCj+Dm8zApNyy9/d9qgJ/pMdwOuSqHMWHeleW0BsQ/ZyaXszuNhUVJB
br8aniQkd5f35FxXB6ZW0k842QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBfXOnT
QI1HeblKEXlI2abPRpBRMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw
RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL
a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYTrnotFcJ/U6gPBmKqN1ru9Yf3D075Tr1NXpKqZ84ibsYUi4csYb/2RmIp4n
M6sIYNZCaBOMFHCXQg6U86FNat7OgzAtN1cizHq74A9M7WFLi1TfD9VruCqdT4+3
YvJeubljMHGimXTpAAj4u6gmZirufUH5YURJ8Ugcqp1SrpZnu68SdmTgkQluwyOp
TwQp5JBBbeysIWO8e4L1UABAMGhjvv00AMsAjx7aFMnYSxkqlsnTCAUHmbh+DhaT
H7PxuCgJy4HOVg2W9+sXP0q7aL68t5mQy0UoEpmNvKJ/WZ4aUF602xZyt0PiRIGd
pQMQ12pe5GxktUZvuYmI+twPSg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:39 2026 by rpki-client