Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
File:                     J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json)
Hash identifier:          beyiIGp1cWRz96DacENPw56sMySLMwfd+cMFb2vR6xw=
Subject key identifier:   C1:19:4D:27:DE:BC:78:46:5A:46:5B:17:B7:2C:E0:E9:07:79:F9:5A
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Certificate issuer:       /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial:       359A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
Manifest number:          358F
Signing time:             Sun 20 Sep 2026 14:22:12 +0000
Manifest this update:     Sun 20 Sep 2026 14:22:11 +0000
Manifest next update:     Sun 27 Sep 2026 14:22:11 +0000
Files and hashes:         1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 5qJ4GKrLCO76Mq6dEI/n7Qw/+jQQ2nRrimDTIaexA24=)
                          2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: GeaS1wm5HUzDhRPnFMwxNijLtG7Ej2e1/5+Wkd8XMhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13722 (0x359a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
        Validity
            Not Before: Sep 20 14:22:11 2026 GMT
            Not After : Sep 27 14:22:11 2026 GMT
        Subject: CN=6aafec14-25fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:a5:84:28:16:01:ff:c0:00:cb:99:b2:c5:
                    14:b9:9d:b7:92:97:88:1a:9e:b2:5a:40:da:b9:8c:
                    33:c3:05:3a:1a:12:b7:a3:35:47:9c:c4:86:c9:5b:
                    c9:b9:f3:c1:30:48:2c:9e:4d:a9:d6:8b:87:a7:92:
                    cf:77:68:cd:a3:07:dc:12:ca:ee:48:55:2f:39:11:
                    46:32:e1:7c:bd:ef:4b:e1:a0:ee:34:0d:eb:6a:c2:
                    14:46:3d:7d:f5:a1:e1:f9:9f:c3:3d:d4:7d:84:41:
                    90:75:37:71:42:8a:b8:23:63:1e:99:2c:08:e6:80:
                    44:97:78:17:b8:61:67:95:8d:ac:bc:3a:23:2c:44:
                    a1:26:28:0d:7b:f4:c8:c3:18:14:c4:db:aa:83:22:
                    18:b9:50:97:09:c9:0f:f2:56:6d:4f:9c:e9:c5:15:
                    2c:a6:e6:c2:18:63:1e:f9:1b:de:21:04:33:63:7a:
                    0f:84:21:42:2e:92:fe:8c:92:45:14:c8:8a:93:0d:
                    8d:c6:0b:26:8d:a0:7d:dc:47:be:09:97:e8:33:29:
                    be:1c:cd:02:cd:95:f2:fb:1d:1a:d4:0c:c1:3d:4b:
                    39:f0:d2:bf:f3:48:43:1e:96:0a:d0:b4:d4:6b:e1:
                    4e:25:f3:2c:d1:60:b5:01:49:b5:53:bc:bf:91:aa:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:19:4D:27:DE:BC:78:46:5A:46:5B:17:B7:2C:E0:E9:07:79:F9:5A
            X509v3 Authority Key Identifier:
                keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:3f:7c:0f:89:06:db:c1:91:8c:c0:7e:70:a9:25:80:08:
         54:b0:fa:f9:31:82:d7:f9:7f:3b:6c:3e:b5:50:54:b3:5d:f9:
         80:a4:c6:6c:22:48:d9:57:54:3f:38:df:48:b2:2b:3c:bf:26:
         7e:15:dc:34:52:ac:42:1c:e5:d4:48:7b:8f:13:ca:3f:96:30:
         4f:d7:c1:54:29:1e:6d:8a:cd:1d:bc:2b:b9:0a:fa:25:fd:8d:
         e9:ff:2b:55:4d:b2:e2:46:de:02:6d:81:af:48:1a:6a:15:ee:
         a6:bf:c2:a4:e7:19:9d:1a:17:6d:c8:47:1d:41:96:34:db:c8:
         3f:92:4f:97:d9:f2:de:66:b9:76:77:cf:c8:96:8c:4e:aa:82:
         90:43:98:6a:6c:8b:e9:db:f8:da:0e:c8:a9:c9:ca:ed:6f:cd:
         20:0f:93:ea:bd:20:d7:8a:eb:22:fd:0e:e5:9b:a2:99:bf:e0:
         3d:b9:06:56:11:9e:11:57:49:42:ba:33:15:3d:c6:02:52:df:
         06:a3:1a:3c:94:c8:20:76:55:67:d9:dd:f8:25:9f:2d:ba:fc:
         da:7c:7a:75:4a:08:4f:72:7d:36:37:56:fd:56:00:94:be:e1:
         3b:8b:48:49:36:48:9d:93:c6:10:a6:c1:ae:63:3b:5d:67:56:
         0a:7e:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:38:49 2026 by rpki-client