Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
File:                     jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json)
Hash identifier:          v1ztlZWC35C+9Ynq1YjAmMNu6yIrrhv4qx0MVfNvJec=
Subject key identifier:   AC:6C:76:FB:73:84:58:08:39:26:A1:29:75:69:D8:C0:1B:D5:B3:85
Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Certificate issuer:       /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Certificate serial:       21C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
Manifest number:          21BB
Signing time:             Fri 02 Oct 2026 16:00:37 +0000
Manifest this update:     Fri 02 Oct 2026 16:00:36 +0000
Manifest next update:     Fri 09 Oct 2026 16:00:36 +0000
Files and hashes:         1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: 89ClzJ47xqMD6XK8i2JCF2uwhhcRyZ33LzTbaye3mCc=)
                          2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: q6obv3XbPXxFh/9pkLqSgiabaqoDxZSpOGQbzF+b7F4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
                          rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8644 (0x21c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
        Validity
            Not Before: Oct  2 16:00:36 2026 GMT
            Not After : Oct  9 16:00:36 2026 GMT
        Subject: CN=6abfd525-b05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:b7:1e:23:93:df:c3:2f:75:7d:39:e6:40:
                    8c:ba:65:7c:4b:d2:7e:12:ad:e4:31:76:80:90:85:
                    de:02:63:75:dd:40:6b:98:ad:11:cf:4a:7c:17:d1:
                    88:45:19:56:89:df:00:1c:76:6b:a6:4a:f5:e1:6d:
                    a2:4b:80:c5:df:ab:1f:34:46:8f:f2:2d:6c:70:27:
                    dd:b8:b2:ff:e3:ef:fd:3b:a2:a5:95:ba:68:ea:92:
                    25:c7:e5:9b:ea:ee:2c:58:f7:a3:3d:dd:c3:6a:ce:
                    32:b3:30:eb:06:6f:c8:ac:d4:29:00:16:0d:6e:2c:
                    d9:3b:d9:95:17:3c:c6:c3:17:f4:64:23:ae:06:80:
                    39:22:ad:5b:0b:e6:d6:4a:67:08:d0:59:cd:1c:50:
                    15:b5:e2:e6:20:2f:3c:06:88:7f:07:af:af:e7:af:
                    ad:69:56:70:67:a2:5a:70:1a:6a:cf:a9:62:bb:e3:
                    0c:9a:a5:d7:28:ad:6e:41:d2:51:e9:85:a3:fa:af:
                    28:ed:d1:02:61:12:f0:2a:8e:bc:80:c2:0d:50:7b:
                    47:7e:51:ee:8f:d3:9a:c6:9d:96:1b:03:80:30:c1:
                    53:8a:f0:10:0e:d0:4b:ee:a3:7c:51:26:c8:76:17:
                    1e:e0:e5:1a:b3:8e:6b:88:02:b8:d4:05:86:6a:31:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6C:76:FB:73:84:58:08:39:26:A1:29:75:69:D8:C0:1B:D5:B3:85
            X509v3 Authority Key Identifier:
                keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:50:ac:e3:73:8f:5b:de:e7:a3:73:5b:ac:b4:c8:b2:92:5e:
         cc:20:1b:54:e1:83:59:3c:7c:9e:08:26:8c:66:a6:66:f1:b1:
         ba:1b:c6:66:65:ad:f2:8e:c0:67:81:5a:71:4d:2a:14:00:d3:
         8c:99:f5:16:0e:5a:56:1e:4c:07:a6:68:49:31:0a:d1:d6:c8:
         64:78:59:63:dd:ca:fd:c8:0a:d7:52:d4:6d:03:3e:3c:c0:4d:
         a1:c2:69:f7:20:19:be:63:8d:b4:fa:a7:05:75:8c:b0:ff:91:
         5a:40:c0:a9:23:d1:1d:a3:6a:23:f8:21:3b:4b:85:d6:a7:02:
         9c:05:ea:32:c5:86:e6:fb:0a:ff:28:fe:85:a7:e4:9e:74:98:
         2d:72:3a:f6:ad:aa:cb:3b:c5:47:59:43:0a:e6:06:1c:3c:93:
         31:d4:fe:43:18:d8:5b:e4:2a:ba:64:06:9b:50:aa:fa:ce:af:
         a7:a8:52:10:42:11:5b:76:7b:7e:06:94:c4:30:a0:fe:2d:b8:
         7e:8f:42:22:a1:99:30:27:3f:64:95:6f:d8:02:23:08:ee:3d:
         14:61:63:e6:0f:2f:44:03:b4:05:0a:3c:c2:42:d6:ba:73:c9:
         88:cf:4d:b6:c1:b1:a2:cb:1c:a7:66:9e:f1:df:30:88:d1:85:
         5f:a5:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:24:08 2026 by rpki-client