Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
File:                     JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json)
Hash identifier:          xULZukzxLpy51ZxmuJc9PG2b0tfoLz9CIiJqI8eFhME=
Subject key identifier:   C1:23:48:6C:56:F5:D9:44:E8:4A:1C:3E:F1:ED:B2:00:96:17:55:6D
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Certificate issuer:       /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
Manifest number:          0115
Signing time:             Wed 23 Sep 2026 05:45:34 +0000
Manifest this update:     Wed 23 Sep 2026 05:45:33 +0000
Manifest next update:     Wed 30 Sep 2026 05:45:33 +0000
Files and hashes:         1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: 5H8ct0OSYgIKEKO5P9wMR2JAJ3qAfQ6tBh8E952d97o=)
                          2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: PGIqw8BHbURwduSPg9mp4INfNEkXZEuiYDqUDhxyyK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
                          rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
        Validity
            Not Before: Sep 23 05:45:33 2026 GMT
            Not After : Sep 30 05:45:33 2026 GMT
        Subject: CN=6ab3677e-24a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:72:46:b1:93:7e:39:cc:30:4b:82:64:f5:
                    c2:f5:22:9f:e1:ee:32:36:a4:9b:54:17:b9:a5:4f:
                    40:69:77:f4:96:df:ef:af:12:41:6b:07:82:dc:c0:
                    51:97:b6:3f:20:5c:69:4b:5a:78:04:85:91:b0:3a:
                    70:56:60:53:d0:cf:ab:c2:05:05:fd:9b:7c:d9:c0:
                    15:72:06:3e:a1:8a:34:0f:4f:7e:da:60:e9:91:cb:
                    68:25:c3:72:1a:a9:86:26:bd:97:19:49:50:93:23:
                    e3:12:65:10:0e:69:01:3d:e8:88:56:23:6a:09:65:
                    6e:94:50:45:da:c2:40:37:25:15:a4:cb:a6:f2:f3:
                    b8:99:5b:51:19:e2:58:32:2f:ff:ff:16:81:01:6a:
                    72:59:05:99:1d:d0:e2:1d:b3:71:a6:c0:fc:79:50:
                    a4:0e:9a:5b:14:90:08:f8:5c:0b:a0:04:83:bb:f5:
                    e0:af:85:f0:5c:42:5f:c9:79:79:11:13:36:d3:45:
                    1f:33:32:f0:e7:d5:f2:5f:1e:2b:ae:ea:92:43:4b:
                    e6:2d:d5:de:db:6d:fc:ff:cf:26:eb:26:10:34:91:
                    30:dc:9a:c1:ad:f0:24:3a:c9:87:9e:84:d4:0f:fb:
                    01:7a:e8:9f:58:a9:3e:8e:0a:0f:99:17:9e:67:a2:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:23:48:6C:56:F5:D9:44:E8:4A:1C:3E:F1:ED:B2:00:96:17:55:6D
            X509v3 Authority Key Identifier:
                keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:46:f9:96:b7:33:4f:ab:7d:68:c5:55:46:71:4f:91:f6:ac:
         4e:c9:99:5a:3b:13:21:1a:55:3e:86:45:5f:3c:41:8b:d2:d3:
         c5:31:ca:89:24:53:9b:d7:9b:6f:8e:87:1d:f8:57:c9:80:60:
         34:0b:78:10:3f:18:99:95:19:0b:e5:53:9a:ed:f3:10:af:11:
         71:9d:3a:fb:b2:40:39:76:19:68:b1:a8:13:ed:cc:3b:fb:1c:
         e4:23:ed:bc:49:bb:e7:b8:21:95:f3:ce:1f:54:6b:71:a5:ff:
         8b:d6:76:ee:8d:bf:c8:01:db:2a:14:05:b3:52:51:39:fc:c9:
         03:7e:e6:a9:cb:38:46:a3:59:b5:ec:07:22:47:31:5d:a0:4b:
         8a:b9:92:31:37:77:50:f3:99:32:d4:f7:98:ae:56:51:2e:32:
         85:df:f7:fa:51:ae:f4:76:b4:60:d7:d6:a3:e8:10:db:f4:4b:
         e0:78:75:b9:14:35:b6:ed:0e:fd:24:1b:66:0b:42:78:70:5d:
         e6:bc:21:61:17:33:7a:33:11:cb:5f:81:03:87:83:1d:4e:82:
         37:13:c7:db:85:33:4f:da:8b:0f:4c:a2:67:83:20:76:52:e6:
         c8:cf:4d:74:ed:ff:c9:4f:9c:60:8e:25:b8:bc:13:c0:f4:41:
         3b:e5:d1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:33:59 2026 by rpki-client