Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File:                     rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier:          c2LR0g8mIBe1Ro/0fB+rghI6fqHQyB4Z410DQw9bW7s=
Subject key identifier:   9D:7D:F4:CA:6D:98:42:FA:7F:55:06:F1:9B:B9:D2:A3:9F:15:1E:DA
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number:          7F
Signing time:             Mon 21 Sep 2026 07:46:51 +0000
Manifest this update:     Mon 21 Sep 2026 07:46:50 +0000
Manifest next update:     Mon 28 Sep 2026 07:46:50 +0000
Files and hashes:         1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: y7B4WmxrhKHoy219GEgOP1idr46WFzaBPBvusFos7Dw=)
                          2: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
                          3: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
                          4: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Sep 21 07:46:50 2026 GMT
            Not After : Sep 28 07:46:50 2026 GMT
        Subject: CN=6ab0e0eb-3b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:a0:10:dd:76:6c:c3:ee:8f:a1:3d:b8:05:
                    7c:b1:f7:21:b5:34:95:cd:77:46:dd:b7:e6:41:87:
                    6d:9d:77:22:fd:b1:f6:48:6f:5c:23:9c:84:a8:c9:
                    34:8b:2b:85:b4:c9:1d:81:ad:6a:c1:fc:86:d9:33:
                    85:d4:e8:bf:1d:f1:c0:cb:bf:2a:18:b5:c0:b6:7f:
                    98:cc:e9:c5:34:14:8f:9a:02:a1:21:5c:8a:72:4e:
                    25:6a:75:86:ff:1e:1e:54:a7:79:8d:46:c6:d1:79:
                    da:17:df:fe:89:04:3f:c2:9a:44:56:22:c7:2c:93:
                    47:7a:46:0a:6f:37:e4:f7:5b:4e:f1:88:fe:55:15:
                    fb:a9:4a:52:d4:ae:d7:b4:01:c9:21:92:da:77:46:
                    bd:c3:5c:74:2c:aa:9f:e0:52:19:21:2e:a1:ab:9b:
                    82:6e:54:e6:48:02:40:b6:c1:58:79:f6:b7:19:af:
                    a8:fe:03:55:08:a2:7f:1f:84:8c:2f:99:11:36:32:
                    82:65:40:b8:4f:4a:19:99:b9:42:eb:73:3b:83:15:
                    c7:8c:68:3b:db:98:c7:b3:36:07:2a:53:1b:23:bf:
                    48:53:40:25:19:0b:39:d8:e7:07:22:ce:f7:fb:eb:
                    b8:9d:e6:9b:27:78:30:28:d7:7d:cc:6e:2e:92:0c:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7D:F4:CA:6D:98:42:FA:7F:55:06:F1:9B:B9:D2:A3:9F:15:1E:DA
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:74:ea:8e:c9:e3:de:d2:b7:b4:08:4e:02:a9:c1:c7:2b:d4:
         29:5c:cc:ac:2a:1d:ad:b7:a0:67:3c:c3:af:8c:aa:08:ad:0b:
         2a:e4:d9:79:85:02:09:73:54:7b:44:3c:a3:0f:f6:90:21:5b:
         b4:38:95:c9:53:7d:51:85:33:4b:97:98:2a:49:75:c7:4c:8e:
         02:47:12:09:e8:d2:cd:b1:03:bb:b5:fb:ab:6a:37:27:a7:56:
         27:ae:d3:c0:92:b9:6c:ae:8d:35:fd:98:f3:75:b6:c9:22:38:
         5c:ee:b9:a7:d6:38:a2:10:0c:be:9b:39:b1:49:95:93:67:fe:
         f2:8e:2c:07:98:38:38:9d:bf:f4:91:0f:ef:21:90:8a:71:27:
         50:0a:77:66:3c:b9:1f:c4:48:01:b2:c0:1a:44:56:57:74:dc:
         90:6c:9a:7a:29:dd:85:18:cc:c8:1b:b3:7d:ff:b0:a2:04:eb:
         30:98:47:e9:f4:33:82:9b:58:2e:9f:13:3d:9e:4d:de:8d:ac:
         d2:9c:77:0b:bc:71:3b:ec:1c:dc:7b:ec:19:bc:36:a9:c3:af:
         2d:a3:42:ac:35:91:73:c8:5d:c0:95:06:9c:21:cc:8a:c7:d5:
         a4:56:fa:9b:03:f7:27:af:46:da:1f:7c:0b:68:25:54:7a:a7:
         9e:29:85:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE4QzMxMTAvBgNVBAUTKEFFMzlDOUFDMjEyN0ZFQTcwRUEzMjYwRUMxNkQyMDg4
M0M1NTc1RjUwHhcNMjYwOTIxMDc0NjUwWhcNMjYwOTI4MDc0NjUwWjAYMRYwFAYD
VQQDEw02YWIwZTBlYi0zYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzG+gEN12bMPuj6E9uAV8sfchtTSVzXdG3bfmQYdtnXci/bH2SG9cI5yEqMk0
iyuFtMkdga1qwfyG2TOF1Oi/HfHAy78qGLXAtn+YzOnFNBSPmgKhIVyKck4lanWG
/x4eVKd5jUbG0XnaF9/+iQQ/wppEViLHLJNHekYKbzfk91tO8Yj+VRX7qUpS1K7X
tAHJIZLad0a9w1x0LKqf4FIZIS6hq5uCblTmSAJAtsFYefa3Ga+o/gNVCKJ/H4SM
L5kRNjKCZUC4T0oZmblC63M7gxXHjGg725jHszYHKlMbI79IU0AlGQs52OcHIs73
++u4neabJ3gwKNd9zG4ukgz80QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ199Mpt
mEL6f1UG8Zu50qOfFR7aMB8GA1UdIwQYMBaAFK45yawhJ/6nDqMmDsFtIIg8VXX1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QThDMy9GRjk0N0M4NEZE
Q0YxMUYwOEFGQzUwMDE2QzZGNTZCQy9yam5KckNFbl9xY09veVlPd1cwZ2lEeFZk
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3JqbkpyQ0VuX3FjT295WU93VzBnaUR4VmRmVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QThDMy9GRjk0N0M4NEZEQ0YxMUYwOEFGQzUwMDE2QzZGNTZCQy9yam5KckNFbl9x
Y09veVlPd1cwZ2lEeFZkZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq3Tqjsnj3tK3tAhOAqnBxyvUKVzMrCodrbegZzzDr4yqCK0LKuTZeYUCCXNU
e0Q8ow/2kCFbtDiVyVN9UYUzS5eYKkl1x0yOAkcSCejSzbEDu7X7q2o3J6dWJ67T
wJK5bK6NNf2Y83W2ySI4XO65p9Y4ohAMvps5sUmVk2f+8o4sB5g4OJ2/9JEP7yGQ
inEnUAp3Zjy5H8RIAbLAGkRWV3TckGyaeindhRjMyBuzff+wogTrMJhH6fQzgptY
Lp8TPZ5N3o2s0px3C7xxO+wc3HvsGbw2qcOvLaNCrDWRc8hdwJUGnCHMisfVpFb6
mwP3J69G2h98C2glVHqnnimFeQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:19:51 2026 by rpki-client