Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File:                     JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier:          3HxFk0fglSsHmf3+vSU3dFRJuSZXU0AUgokObG5rlcs=
Subject key identifier:   4C:65:3E:1A:F5:F1:38:C7:81:AE:4F:11:4C:62:C8:3B:B6:D6:C7:CE
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer:       /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial:       25FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number:          25E1
Signing time:             Thu 08 Oct 2026 15:45:37 +0000
Manifest this update:     Thu 08 Oct 2026 15:45:36 +0000
Manifest next update:     Thu 15 Oct 2026 15:45:36 +0000
Files and hashes:         1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: L3/m7V/RQNdYHIfsAWSS7AfWRfaQMRxxxiXdVe+b5I4=)
                          2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: 0hrvh4D9EDd6MqNbEXtgkqXuTp28uKtsLouLemWrWd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9722 (0x25fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
        Validity
            Not Before: Oct  8 15:45:36 2026 GMT
            Not After : Oct 15 15:45:36 2026 GMT
        Subject: CN=6ac7baa0-daa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:66:69:46:e1:1e:09:9f:8b:2d:45:06:74:
                    97:73:37:6d:7f:87:40:74:17:98:2f:1f:dc:1d:65:
                    e3:b4:63:e2:3c:be:7c:f3:ba:6a:7d:2e:91:10:3d:
                    6f:6b:9d:68:a0:e9:32:25:c3:0b:ac:99:0a:05:87:
                    b5:6a:15:2f:5c:48:4b:7b:d5:c2:4e:62:31:84:e1:
                    67:b0:23:90:b0:07:1d:61:a6:8f:74:b0:e2:17:0f:
                    0c:32:21:fb:6e:43:7e:f1:72:0b:73:33:0b:e3:bd:
                    71:84:0e:ca:08:5b:5c:5b:68:b6:a3:1b:48:94:84:
                    63:07:2c:58:ee:ee:71:97:a0:d2:e9:fb:e9:49:7e:
                    a1:3f:e7:ac:88:26:62:18:a3:97:68:93:56:d8:0b:
                    40:65:2f:27:a9:76:19:f6:b5:cb:17:5f:78:a1:4d:
                    6a:e4:cc:81:1c:84:57:20:7e:5b:82:6b:c7:9b:69:
                    50:c1:d7:b1:d8:6d:37:8a:50:4b:49:b1:0f:64:72:
                    a1:78:ff:6b:90:de:5e:d2:04:31:b2:fd:c5:e4:d2:
                    54:4f:b3:da:5d:33:5e:7d:d0:ff:c3:cf:57:39:9a:
                    6e:08:64:61:84:4d:8e:ac:7b:41:5e:04:76:c9:62:
                    78:d3:33:39:fa:94:13:3d:63:cf:90:6e:c4:d3:23:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:65:3E:1A:F5:F1:38:C7:81:AE:4F:11:4C:62:C8:3B:B6:D6:C7:CE
            X509v3 Authority Key Identifier:
                keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5b:a8:5a:25:08:9e:29:e1:44:d3:b5:3c:25:ac:97:69:6d:
         69:16:14:33:bc:05:ea:9f:d8:d4:15:ff:69:85:8c:a5:e6:fa:
         14:cb:78:d3:1e:a3:93:0c:d7:32:d5:07:af:64:b8:73:2d:e0:
         e0:cb:4f:59:6b:25:7b:33:11:cd:92:db:53:a3:d7:b4:97:66:
         d8:cc:01:75:a9:b4:f4:b5:b7:53:1a:a4:ff:d5:ee:8f:0d:8b:
         43:67:28:07:3c:df:05:ba:e1:d3:4c:cc:db:5d:85:b3:c9:a9:
         a7:06:59:d0:e6:2c:de:7a:d5:f4:18:f7:af:83:bf:73:88:32:
         8a:37:35:eb:a7:35:4e:84:bd:5b:10:69:5c:18:b8:21:d4:d7:
         1e:29:b8:a1:48:99:ed:d8:f7:b4:b8:36:88:99:69:0b:85:0b:
         b0:2c:e1:eb:23:e3:39:37:2f:c3:eb:4a:35:ec:ee:dc:da:3a:
         4a:aa:9d:9b:c5:12:4b:1f:dd:37:ff:04:46:4f:47:63:fc:14:
         9d:16:5d:20:57:45:d7:8f:22:37:76:51:73:7f:f0:e9:c8:37:
         f6:fc:a6:4f:03:41:75:ff:27:c5:88:81:f9:b5:aa:30:a2:48:
         52:31:f2:16:82:57:4a:0f:40:4c:e5:a7:b8:83:ba:15:de:5c:
         73:73:aa:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2
NDlENTY0QzQwHhcNMjYxMDA4MTU0NTM2WhcNMjYxMDE1MTU0NTM2WjAYMRYwFAYD
VQQDEw02YWM3YmFhMC1kYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmT5maUbhHgmfiy1FBnSXczdtf4dAdBeYLx/cHWXjtGPiPL5887pqfS6RED1v
a51ooOkyJcMLrJkKBYe1ahUvXEhLe9XCTmIxhOFnsCOQsAcdYaaPdLDiFw8MMiH7
bkN+8XILczML471xhA7KCFtcW2i2oxtIlIRjByxY7u5xl6DS6fvpSX6hP+esiCZi
GKOXaJNW2AtAZS8nqXYZ9rXLF194oU1q5MyBHIRXIH5bgmvHm2lQwdex2G03ilBL
SbEPZHKheP9rkN5e0gQxsv3F5NJUT7PaXTNefdD/w89XOZpuCGRhhE2OrHtBXgR2
yWJ40zM5+pQTPWPPkG7E0yMSKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExlPhr1
8TjHga5PEUxiyDu21sfOMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1
QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V
VkhJRHZRVVdqTU5rblZaTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEFuoWiUIninhRNO1PCWsl2ltaRYUM7wF6p/Y1BX/aYWMpeb6FMt40x6jkwzX
MtUHr2S4cy3g4MtPWWslezMRzZLbU6PXtJdm2MwBdam09LW3Uxqk/9Xujw2LQ2co
BzzfBbrh00zM212Fs8mppwZZ0OYs3nrV9Bj3r4O/c4gyijc166c1ToS9WxBpXBi4
IdTXHim4oUiZ7dj3tLg2iJlpC4ULsCzh6yPjOTcvw+tKNezu3No6Sqqdm8USSx/d
N/8ERk9HY/wUnRZdIFdF148iN3ZRc3/w6cg39vymTwNBdf8nxYiB+bWqMKJIUjHy
FoJXSg9ATOWnuIO6Fd5cc3Oq+A==
-----END CERTIFICATE-----
Generated at Fri Oct 9 06:30:27 2026 by rpki-client