Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
File:                     Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json)
Hash identifier:          QzOmLnSJYcy9ueZusTNHb1GWiYwF6CcfOxsqaqb2M3Y=
Subject key identifier:   A3:C7:30:38:75:0A:E6:25:2C:AF:17:DF:0E:A8:41:3A:05:93:96:A4
Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13
Certificate issuer:       /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
Manifest number:          0149
Signing time:             Mon 05 Oct 2026 05:52:17 +0000
Manifest this update:     Mon 05 Oct 2026 05:52:17 +0000
Manifest next update:     Mon 12 Oct 2026 05:52:17 +0000
Files and hashes:         1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: 4rjd1JPDVWZs2g04GTN8EsmGGEURy0778dzNmdpE/Xo=)
                          2: CACE510EA7A811F180A31FD84C11F970.roa (hash: wglg41cZyZ6SHDJ4L1WMDunGSNeOm/hZ1r6SiEx69y0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl
                          rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413
        Validity
            Not Before: Oct  5 05:52:17 2026 GMT
            Not After : Oct 12 05:52:17 2026 GMT
        Subject: CN=6ac33b11-4f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:8d:92:82:83:74:3a:ac:d5:a5:bc:79:2d:
                    ca:d7:93:3f:a5:ea:9b:58:7d:6a:bb:9e:27:6b:37:
                    dc:31:03:75:de:4c:d6:55:42:d1:9a:58:69:12:47:
                    f4:bd:27:e5:06:9a:b3:07:49:3e:dd:92:67:a4:7c:
                    c4:26:fd:e0:97:ba:f3:75:ed:b9:da:2d:ba:bb:ed:
                    d3:d4:0c:5c:a0:8e:bb:80:fc:c7:31:60:23:3c:06:
                    60:77:51:b3:61:c3:77:f0:32:f0:f0:87:80:de:a5:
                    25:08:c9:bf:30:20:9c:95:02:54:9a:f7:4f:f1:59:
                    6d:76:19:dd:c5:08:35:02:89:73:a0:fb:e2:49:ae:
                    ce:63:f7:7e:5c:85:43:aa:6f:03:dd:f0:94:8c:92:
                    ec:bd:74:28:64:e3:39:40:ec:15:15:7a:90:b8:9c:
                    fe:08:d4:cb:bb:c8:c3:1b:2b:e1:d3:21:16:ea:ee:
                    fb:db:11:87:9d:7e:8f:91:90:a8:a4:58:5c:cf:ed:
                    13:4d:f5:a8:77:06:8b:a1:06:4f:77:0f:38:4f:15:
                    c2:ac:09:ad:ad:9f:2e:8d:d7:1f:96:23:12:60:3b:
                    79:96:7e:b7:ca:8d:f5:76:aa:d7:a3:63:1e:cd:8a:
                    43:64:e0:20:1e:2c:ef:ed:5c:5a:bd:b2:93:18:45:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C7:30:38:75:0A:E6:25:2C:AF:17:DF:0E:A8:41:3A:05:93:96:A4
            X509v3 Authority Key Identifier:
                keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:97:a7:2a:98:42:70:24:16:5a:b5:45:cb:81:0c:8b:7a:af:
         37:75:f6:82:22:61:99:eb:ea:7d:e9:18:96:be:a6:45:9f:c3:
         da:08:de:54:36:bc:dc:88:9f:0d:6d:65:b5:08:a2:ab:a3:5f:
         ac:81:82:94:ac:1f:c9:84:fd:eb:56:d8:85:0a:39:cf:c3:4f:
         d2:ba:e5:26:17:96:5a:98:9e:e8:91:7b:be:36:24:a8:47:62:
         f6:4b:10:20:6e:04:9c:db:e1:82:e5:cb:33:28:4c:2e:d6:cb:
         ba:cc:76:aa:3d:13:8b:22:80:10:1d:61:cd:f7:aa:09:4b:72:
         5e:72:c5:a5:06:66:9b:f9:ac:3e:44:cf:a0:d8:f3:d0:9d:70:
         89:70:82:75:15:dc:b9:5e:44:ea:77:71:aa:df:7e:09:3a:55:
         f3:a1:e9:b2:5b:54:11:c5:76:f2:a5:22:2f:06:94:8a:95:0e:
         70:ea:0e:41:74:bc:90:81:4a:cc:7b:34:24:78:ab:41:47:99:
         45:b4:2f:1c:d3:44:41:20:60:59:28:fe:80:9e:3c:15:50:42:
         5c:69:ee:5d:53:05:a7:4d:3c:f1:5c:36:1b:67:e3:3c:69:d7:
         54:60:e4:f0:fd:42:db:6a:87:cf:ac:44:6f:3a:68:ac:3b:d3:
         6d:9f:a2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:32:47 2026 by rpki-client