Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
File:                     jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json)
Hash identifier:          LCuoWnbe2l+4uyS+NUxrSiwpQ7hBoQjTdwRITtiGlHI=
Subject key identifier:   62:65:EA:0B:9D:4E:29:9B:D6:B3:2C:18:6D:08:F7:75:B5:28:39:70
Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77
Certificate issuer:       /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
Manifest number:          0271
Signing time:             Tue 13 Oct 2026 02:30:49 +0000
Manifest this update:     Tue 13 Oct 2026 02:30:48 +0000
Manifest next update:     Tue 20 Oct 2026 02:30:48 +0000
Files and hashes:         1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: OkITfi0SxqG26uMjUGB5klfVdOLSz2AS5rBSYdnrDD8=)
                          2: 27623F48040711F193DC81CA173D8C67.roa (hash: mzCIZfKTucgozxw0jlm4c47n5Z3DTwwALFRuv9z3XQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl
                          rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
        Validity
            Not Before: Oct 13 02:30:48 2026 GMT
            Not After : Oct 20 02:30:48 2026 GMT
        Subject: CN=6acd97d9-63c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:4e:f0:6c:96:56:96:61:d3:d3:0a:03:d6:
                    f6:08:70:d6:91:4c:50:f2:10:de:dc:5c:51:77:fe:
                    cf:7c:98:31:e6:b3:d1:38:e6:bc:81:97:ed:75:5e:
                    74:42:b0:27:61:b8:d2:12:5b:3f:d1:5b:8d:fa:0c:
                    1c:bb:f0:d0:33:6f:a0:2d:bd:06:5c:41:24:d3:23:
                    25:61:c0:d2:67:91:98:57:ef:84:a9:08:86:10:ef:
                    12:b5:a2:8a:b8:e7:d3:5b:93:f1:f5:3e:a9:e5:dd:
                    68:18:7e:91:4c:1f:b7:5a:ff:06:b3:23:d5:bf:dd:
                    ca:ef:de:eb:6d:e2:06:fb:7c:86:77:90:8e:f0:44:
                    d1:08:d0:81:5c:09:d9:c7:08:5b:fd:6a:20:64:5b:
                    bf:d3:57:02:95:a4:36:8b:33:db:04:e6:28:85:a8:
                    19:64:50:de:6b:13:b6:f5:56:62:09:ba:1e:6e:3e:
                    0f:d1:99:5a:ae:86:05:d8:87:bb:39:9e:36:6d:a8:
                    41:2c:83:fa:53:8e:e6:0b:c5:18:c7:b6:2b:f1:50:
                    72:6e:55:f9:14:c0:f5:f0:45:9a:e8:77:40:fb:71:
                    97:47:72:86:e4:70:69:d1:9a:36:dd:18:e2:4c:2d:
                    9c:ed:59:5f:0f:60:4a:d0:ff:6c:fc:7c:e1:91:51:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:65:EA:0B:9D:4E:29:9B:D6:B3:2C:18:6D:08:F7:75:B5:28:39:70
            X509v3 Authority Key Identifier:
                keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:b0:de:89:4f:9c:6d:7b:3e:f6:45:6f:42:76:d9:a2:cd:
         23:95:4d:2d:1f:52:24:7d:1d:8a:52:db:92:8e:1c:d1:42:31:
         b1:67:d2:35:44:fd:48:be:22:94:50:8a:57:4c:a8:25:0f:a2:
         2a:23:8a:0c:df:fb:7d:cb:b9:20:6f:d5:1d:b2:7e:73:f9:e4:
         be:c4:70:eb:8c:ff:57:7f:29:7a:2e:c6:b8:e7:6b:ff:21:54:
         06:61:f7:b4:ac:b6:d2:fa:6d:74:35:42:70:3f:cb:d1:24:b5:
         aa:54:85:da:c4:f4:ae:8b:98:b2:38:ae:34:c6:c9:2c:b0:34:
         94:0f:6e:73:8a:d2:05:45:76:e7:85:74:0e:51:e5:d7:b1:e2:
         1a:7e:c6:d0:d7:42:7b:20:2e:68:fa:60:25:9f:38:fe:27:7f:
         37:92:b1:f7:82:35:25:8e:cd:99:01:77:17:4c:51:af:6d:2a:
         85:66:58:d8:1f:71:cf:c7:d1:35:07:b8:11:61:36:34:8a:74:
         95:c7:5f:a0:d4:7f:13:6e:6e:90:04:10:04:19:42:90:c9:f2:
         da:0a:1f:78:f0:32:7c:c2:93:2f:58:dd:c5:cf:18:05:26:ac:
         cc:94:65:e9:31:d6:9c:96:b5:b2:5d:b6:b5:2d:40:2b:5a:cd:
         71:f4:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:35:45 2026 by rpki-client