Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
File:                     JfzCC3gzseILvBM0UQqTrh1obMA.mft (raw, json)
Hash identifier:          H6NOQBb7v3oNLwcU/AMXybu/B05Ev7SSm8xcnI1DgZU=
Subject key identifier:   75:66:11:74:17:1C:E0:73:EC:EE:0E:F1:CF:3C:F9:61:62:45:CE:84
Authority key identifier: 25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0
Certificate issuer:       /CN=A918AA54/serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
Manifest number:          0400
Signing time:             Mon 21 Sep 2026 00:17:14 +0000
Manifest this update:     Mon 21 Sep 2026 00:17:14 +0000
Manifest next update:     Mon 28 Sep 2026 00:17:14 +0000
Files and hashes:         1: JfzCC3gzseILvBM0UQqTrh1obMA.crl (hash: 9Sz/DbndBm946rb6m/qelMn0wWDCpOC8xR0BZQjuIPU=)
                          2: FD8683B6AB2F11F199111181AFEE528E.roa (hash: nj7zpHhdZPeAnSuqqiBAFC350E8Xly3tDniLk5HF2SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl
                          rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA54, serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
        Validity
            Not Before: Sep 21 00:17:14 2026 GMT
            Not After : Sep 28 00:17:14 2026 GMT
        Subject: CN=6ab0778a-453d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:00:f5:50:61:d2:24:04:40:ae:7a:90:19:
                    40:0f:cd:5b:6f:35:6c:11:81:a2:4a:3e:b8:31:2e:
                    56:ce:a8:85:88:f7:da:3b:6a:14:ce:23:0d:b8:ee:
                    bd:46:4f:a7:70:e4:58:f6:33:30:bd:27:05:e8:8f:
                    9f:54:1e:a8:42:a5:c2:5c:c1:b2:38:a4:f9:48:f1:
                    ba:b3:49:4f:ef:38:35:ef:a4:01:bf:68:a7:8d:c5:
                    1f:82:c8:06:fe:5e:5b:74:ae:5b:dc:98:29:70:8d:
                    cc:73:5d:b7:f4:cf:6a:c4:97:4f:0d:ad:69:8f:ee:
                    ef:14:81:42:f6:7b:df:c8:55:06:d2:ff:2d:2d:bf:
                    22:db:aa:73:40:2e:11:7d:6a:be:4f:b2:ee:3c:8d:
                    d3:74:2e:ed:ea:51:e8:1d:5e:29:ae:dc:c1:25:5d:
                    71:02:cf:46:79:1a:cb:a8:c9:af:45:a0:fd:72:9a:
                    e4:28:b5:3c:70:e2:99:d8:4b:65:cd:ae:9b:2a:3b:
                    03:b6:64:44:9e:a1:bb:37:e8:dc:e6:02:75:4c:d6:
                    a3:09:e8:24:9a:e4:42:cc:74:63:3f:db:28:9e:94:
                    3c:55:74:db:17:95:85:41:d6:41:1d:5c:04:a4:c7:
                    30:f6:eb:90:67:8a:0b:cc:c1:95:79:82:99:9e:de:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:66:11:74:17:1C:E0:73:EC:EE:0E:F1:CF:3C:F9:61:62:45:CE:84
            X509v3 Authority Key Identifier:
                keyid:25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:f4:47:02:e4:1d:51:22:03:c4:e3:2d:7f:c7:53:36:97:
         6e:9f:61:fd:fe:43:c5:c9:0c:c7:bd:b5:5c:56:32:b4:0f:6e:
         5d:68:7f:24:c7:e2:60:b2:ca:ff:2f:c8:3f:c7:f1:db:77:e6:
         52:40:c1:1b:fe:74:f1:56:80:9d:be:1d:5a:4e:a4:fc:5e:a4:
         2d:d3:23:9c:0b:bb:5a:04:95:a1:60:ca:30:a7:e6:cb:a9:be:
         5a:15:22:f4:c8:b6:9d:3f:38:1f:6c:c9:72:73:9c:ab:d4:96:
         d0:00:1f:93:bd:d2:f3:67:ab:52:25:6a:1e:7b:cf:88:e0:71:
         3e:9b:9b:4a:a0:4b:4d:a3:8c:b2:39:d7:52:a5:a5:02:45:12:
         d1:18:14:19:81:e4:12:1c:56:8d:7c:e3:22:d0:6c:70:bf:f3:
         84:26:31:08:3e:02:0a:6b:8d:8b:67:25:63:f8:fc:54:9d:6e:
         32:b0:02:ec:a7:94:ab:90:ac:48:ee:31:2f:97:a1:e0:5e:e4:
         b8:f4:ec:9b:34:02:0d:28:40:31:95:e4:0e:33:ef:16:74:d4:
         30:d4:aa:be:58:ac:54:91:5d:11:f4:85:c7:e8:be:a5:16:87:
         24:ef:30:b3:61:1a:ff:e3:6d:89:bf:6e:82:92:28:ea:18:bf:
         15:69:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:28:34 2026 by rpki-client