Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
File:                     juyxGYDtEVNPQZL03gjRss25Fsg.mft (raw, json)
Hash identifier:          LLV+r9pMwvFw4s5GLL7DNTZfWKtXwFBYvlbsJptBP7Q=
Subject key identifier:   E9:DA:2B:4B:9F:EC:FC:66:91:94:B9:EC:BA:9E:9A:31:00:2B:7C:53
Authority key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8
Certificate issuer:       /CN=A9191DE0/serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
Manifest number:          8D
Signing time:             Sat 26 Sep 2026 19:41:52 +0000
Manifest this update:     Sat 26 Sep 2026 19:41:51 +0000
Manifest next update:     Sat 03 Oct 2026 19:41:51 +0000
Files and hashes:         1: juyxGYDtEVNPQZL03gjRss25Fsg.crl (hash: rLnzdMSrUtsqDssvHLGT0/U+KoFs9nVEzs9SG4zSbzk=)
                          2: A4C79C9AEC4611F0B45F05E8456F56BC.roa (hash: EVMXznE3JflMcjw9lwizAdWj6kleJyA1NEdHm23XCPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
        Validity
            Not Before: Sep 26 19:41:51 2026 GMT
            Not After : Oct  3 19:41:51 2026 GMT
        Subject: CN=6ab81fff-9085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:94:0c:83:83:11:c5:67:d0:44:b1:7e:b0:
                    4b:de:4e:ff:0b:72:0f:f4:4a:b9:b6:da:90:ac:7e:
                    1f:76:2c:28:f5:e6:30:b1:06:ed:9f:8d:da:f7:ef:
                    1f:0f:00:ae:24:82:f0:68:bd:d8:f7:91:f5:eb:fe:
                    36:98:87:7a:c5:6b:39:80:f8:ed:fa:2c:cf:47:2c:
                    73:05:04:26:f4:59:6a:84:fa:2d:62:4e:91:5e:18:
                    2b:da:b7:b9:46:70:67:43:2b:b0:05:69:1a:ad:78:
                    b7:53:40:a8:2c:ba:90:b1:49:94:5b:df:bf:df:da:
                    2d:86:ba:e0:d1:d6:1a:ec:9c:6a:0b:f3:34:1b:a9:
                    10:26:16:c2:78:08:1b:da:f6:f1:49:1a:ab:5c:a6:
                    83:24:06:6f:79:0f:f7:62:c9:45:9b:10:6a:4d:76:
                    c5:53:fd:88:62:39:73:a2:2d:4a:8f:45:e4:1c:13:
                    25:ee:2f:2d:78:0d:49:b7:76:cd:cb:e5:2e:20:06:
                    d2:0a:21:42:66:73:cb:01:d6:0f:a2:63:96:04:27:
                    68:b3:65:61:6c:2d:f0:b8:0f:99:a6:1e:fe:d9:94:
                    ba:72:ae:6c:6d:6b:7f:e4:42:4a:3c:12:9f:0e:48:
                    a5:8d:77:ac:45:7f:72:26:94:40:6e:56:84:af:ec:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:2B:4B:9F:EC:FC:66:91:94:B9:EC:BA:9E:9A:31:00:2B:7C:53
            X509v3 Authority Key Identifier:
                keyid:8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:36:94:46:49:26:24:2a:ce:ab:93:34:65:82:e8:80:d2:
         d6:ae:3d:e7:cd:35:57:2c:fa:b6:df:4e:d8:d8:09:0a:f9:17:
         0a:76:26:53:93:32:8b:3e:b1:b1:f5:f9:c9:f0:9c:ee:f5:d7:
         df:13:3a:87:77:27:f2:26:f3:98:38:c5:08:2a:2e:7e:4a:fb:
         0f:b5:c6:1d:d1:2f:9d:f1:cf:c1:69:8a:b4:33:26:7f:fe:e8:
         54:17:c4:06:10:5c:f9:a0:1c:76:70:8c:d8:d2:4e:d5:6a:12:
         ac:06:4f:3b:df:d6:6b:82:eb:97:71:0f:16:b8:a2:09:b1:cf:
         d6:62:5b:6e:f2:13:87:32:f9:06:91:1b:cc:e1:19:6f:d8:58:
         2f:ca:bf:c3:02:37:b6:05:da:53:14:3c:dd:28:55:e4:f7:7e:
         47:44:23:88:ed:a1:0f:23:c9:c7:d0:93:f4:c2:82:b7:4e:da:
         3f:8b:a1:93:dc:b4:4d:1f:31:19:fb:6e:db:2b:0b:0e:71:ba:
         a9:df:c0:36:2a:74:90:9f:da:df:5d:17:fc:38:4a:f0:2c:26:
         d1:a7:8f:96:49:75:ce:ce:0f:5f:72:43:9f:7b:0a:a0:af:52:
         77:49:6d:8d:46:4b:df:6e:68:b7:02:8a:fa:66:67:5d:b5:64:
         00:2b:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:27:07 2026 by rpki-client