Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File:                     J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier:          vZXzzF+/sS2TwoMKs/DHfM+0HjrFgSlkp6zq493+X3E=
Subject key identifier:   38:0F:51:64:B8:B4:4A:06:01:40:D8:D5:CE:0D:33:5E:CB:6B:9C:8B
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer:       /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number:          0639
Signing time:             Sun 20 Sep 2026 22:34:24 +0000
Manifest this update:     Sun 20 Sep 2026 22:34:23 +0000
Manifest next update:     Sun 27 Sep 2026 22:34:23 +0000
Files and hashes:         1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: Jd2bAMz9a7hgdYvj3V9DNQ+EOg3r6/PpPavOXY0EQZQ=)
                          2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: V+XheScePk1AavDQ0HXjp7Jys0+s+yjGu/TYBAzZvTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
                          rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
        Validity
            Not Before: Sep 20 22:34:23 2026 GMT
            Not After : Sep 27 22:34:23 2026 GMT
        Subject: CN=6ab05f70-4f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:0b:b1:f2:11:29:b6:5d:dc:a9:aa:bf:8f:
                    87:7a:45:be:7c:df:e3:d9:25:25:bd:75:08:a0:ed:
                    46:9c:d9:67:c9:a2:38:56:a3:8c:f6:be:98:1e:37:
                    a6:3a:c0:18:2e:5d:f3:9d:3f:de:f7:95:b8:4a:39:
                    2a:9b:d2:98:d0:d5:87:01:d4:5c:af:03:ab:11:64:
                    41:8f:cd:01:66:49:98:1a:fc:a7:38:a0:e3:c3:d0:
                    31:51:dd:00:2e:77:17:fb:00:e2:21:1a:30:7e:75:
                    bc:c6:95:8c:01:ad:58:66:5a:7a:63:dd:cf:49:ca:
                    bb:4c:7e:40:98:34:07:85:f3:8d:d7:6d:2d:1b:18:
                    f5:4f:01:3e:30:2b:5f:2b:5a:87:68:7a:70:0d:f1:
                    e8:60:51:68:e7:cf:ce:d8:ce:96:1d:68:b6:12:09:
                    4b:96:8c:16:2a:9c:b7:e1:9e:5d:b4:6a:91:bc:85:
                    27:95:6c:d8:89:af:71:34:83:25:1e:cf:86:3a:7d:
                    cf:df:b5:7b:da:f4:a4:df:f3:29:b5:cb:99:42:17:
                    d1:ec:ad:a3:3c:52:c5:10:ab:5c:94:95:5a:6e:b2:
                    ea:38:82:4c:51:0d:5a:66:4a:9f:e8:08:50:e3:be:
                    ec:f1:17:6f:b4:18:db:81:af:0b:7f:05:ad:07:e4:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0F:51:64:B8:B4:4A:06:01:40:D8:D5:CE:0D:33:5E:CB:6B:9C:8B
            X509v3 Authority Key Identifier:
                keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:d9:41:4c:4a:2c:cd:06:5f:60:db:09:3b:17:d4:12:4e:
         d9:67:aa:a0:36:da:3c:50:40:ca:b1:bc:82:6f:49:80:7b:ac:
         85:cb:ce:a6:ea:f3:44:b5:09:49:31:80:79:80:b3:ee:a0:5b:
         86:35:60:1c:e0:75:35:e9:ba:40:6b:9e:6d:55:da:21:20:09:
         11:ab:80:79:bf:d4:52:a3:52:2a:36:89:68:d1:c0:f2:93:0c:
         5a:89:ad:ef:c3:8b:6a:65:c1:a3:fd:ec:0e:14:35:bd:bf:69:
         f9:9c:9a:7e:b6:24:ee:e9:41:67:fb:d3:96:03:5b:21:cb:6b:
         d7:f8:c5:13:66:b8:c8:43:c5:96:24:fd:5d:9f:99:15:20:5b:
         99:8c:66:9b:7b:48:11:1a:c4:05:4d:d3:33:28:0c:64:7b:5f:
         e7:84:01:8d:92:59:c0:ec:e9:59:75:42:91:65:80:34:96:c2:
         f1:14:78:01:c5:4a:b6:c0:80:b9:25:6b:75:6d:62:52:28:b9:
         96:5d:1e:51:86:18:56:62:17:08:69:bb:2a:cf:86:3e:ba:05:
         53:02:d5:cb:90:c8:aa:1b:1c:1b:04:2f:83:fe:a9:95:29:75:
         ae:53:c2:84:ca:e6:3e:30:58:7c:d6:f7:32:34:b0:72:73:10:
         a5:52:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:31:10 2026 by rpki-client