Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          GJe/m77mYymYQ25FwKs1FDLriTf0cFkgAsBffAA8GxA=
Subject key identifier:   91:2E:BC:6D:17:ED:5C:0C:4B:CC:DB:C6:40:E7:E8:53:47:47:4B:42
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          024C
Signing time:             Wed 23 Sep 2026 02:18:35 +0000
Manifest this update:     Wed 23 Sep 2026 02:18:34 +0000
Manifest next update:     Wed 30 Sep 2026 02:18:34 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: APB9bK4hYdDJgIVV+HZNK/AsqYLeh3ZN/FR8uRQrNDA=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: 2GxHjo4LAZa6xTK/E+JUdOOe1BBXua7ccz+Bu9RbDt0=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: HN5m9iiGmOPi7M0g3oqbmGw29tiEq8psLVzdLAeKejA=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: o9CJ5rmrT9hbqYWuYS8js+DGI0LN9I9OVqxViVX0Lyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Sep 23 02:18:34 2026 GMT
            Not After : Sep 30 02:18:34 2026 GMT
        Subject: CN=6ab336fa-3f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:ea:78:14:6f:b5:74:a8:63:7b:9a:a5:15:
                    95:ce:89:b5:6c:91:e5:5c:36:08:21:93:77:dd:9d:
                    2b:15:a3:2c:bb:83:ac:25:fb:c3:88:29:38:7a:14:
                    63:d3:ca:52:41:0b:42:b8:1e:cb:c8:db:c8:a5:c4:
                    18:75:e5:9a:08:ed:5e:54:2d:4d:20:8f:cf:f4:a4:
                    65:39:19:b6:ae:13:d1:6a:8d:27:61:6e:f4:df:75:
                    38:3a:a6:43:29:dd:4d:e7:d4:ee:c9:03:9c:ae:77:
                    78:a7:bb:29:bf:5c:8c:99:b8:cc:46:bc:b3:61:3a:
                    e4:b9:f1:d9:82:fd:48:ca:39:b6:2d:f1:43:8c:e0:
                    b5:ca:aa:f8:3a:e4:8f:d7:60:ac:fb:48:5f:74:7c:
                    54:a8:97:fb:6d:5d:9c:45:0c:37:1f:76:c7:2b:ca:
                    a7:04:21:a9:0c:2d:c5:18:46:ab:5f:bd:58:de:0f:
                    5e:11:25:1c:68:ed:27:2d:7c:fa:cc:a4:17:77:c4:
                    ba:72:d2:7f:4c:25:19:41:2c:48:b8:40:7a:6d:b9:
                    fd:2d:f1:d7:13:40:ed:e2:5b:b7:80:9a:0f:b3:79:
                    94:bd:82:26:f2:90:81:b8:89:1a:46:11:41:a9:d6:
                    d9:11:89:d6:37:c1:70:fd:80:1e:1b:6b:dc:b7:9d:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2E:BC:6D:17:ED:5C:0C:4B:CC:DB:C6:40:E7:E8:53:47:47:4B:42
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:02:cf:ae:bb:bd:e2:3c:ef:31:15:c5:9e:ae:32:f7:ad:
         5e:2b:5f:8e:15:bd:b6:ae:8f:30:73:c7:d1:d5:e8:af:94:43:
         06:ff:c4:f6:be:5e:24:36:62:a9:5c:be:35:5a:df:3d:bc:7c:
         8d:34:90:af:0d:98:02:d6:fb:32:0d:d4:4c:af:3d:f8:32:f9:
         93:58:34:63:ea:20:28:f2:36:3f:2a:2a:f5:8a:b2:79:66:b8:
         ca:4a:f4:bb:0f:3f:f8:63:a4:56:4c:fc:d1:14:2b:fb:04:71:
         b9:b2:df:9e:83:b7:f8:f8:ca:ed:4b:10:15:b2:71:77:68:6f:
         0f:39:3f:30:e9:af:dd:04:42:4a:f0:78:34:e8:9b:a9:34:49:
         fe:a7:c8:08:f8:12:00:1a:69:14:51:39:58:c6:44:9a:3d:38:
         3a:d6:8a:da:f3:d4:ee:33:98:85:60:33:03:df:d3:23:e6:68:
         d8:4b:16:71:3e:c8:89:e9:e7:71:b5:fb:cd:e4:60:ec:eb:bb:
         da:bb:53:a9:3c:72:59:f9:b6:51:b4:84:ea:4a:f7:42:b0:78:
         3b:30:ca:91:4a:01:fe:a2:74:e2:23:3b:57:8d:24:06:26:32:
         4b:30:6d:35:49:ee:de:de:63:f5:fb:1c:62:6e:97:b4:5b:3e:
         d0:5c:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:50:00 2026 by rpki-client