Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
File:                     JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json)
Hash identifier:          +45WaCVz8NAG/Goim93Heu69XS6FzupGxYMJJnTrB8g=
Subject key identifier:   AF:6A:30:73:BC:58:5A:F6:BA:C9:45:5A:18:80:E2:90:FE:82:A1:B2
Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF
Certificate issuer:       /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
Manifest number:          02D2
Signing time:             Mon 21 Sep 2026 01:16:25 +0000
Manifest this update:     Mon 21 Sep 2026 01:16:24 +0000
Manifest next update:     Mon 28 Sep 2026 01:16:24 +0000
Files and hashes:         1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: D1wYbAdzAdQo8QJ37ioR8Bu7euVHB9REdJqpC4cl/AU=)
                          2: gpWnLj-2gskbvrnOqpg6KYODB2c.asa (hash: TiuoTk6mlE7QSw/YupJFbCYHW8Dvc9OuUmJzuhbKSEE=)
                          3: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: eqn9sEe4JyayU+B+c14J08VShOSA+AaQJ0q21W2uhKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl
                          rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF
        Validity
            Not Before: Sep 21 01:16:24 2026 GMT
            Not After : Sep 28 01:16:24 2026 GMT
        Subject: CN=6ab08569-f031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:e8:ab:d4:c1:3b:65:45:25:6b:1f:34:61:
                    5a:5d:f0:99:c1:58:b2:50:b8:c5:cd:30:7a:27:df:
                    d0:da:c4:7f:6d:ac:c8:f0:09:18:7a:8e:db:1c:9a:
                    a8:b0:ad:f8:df:d1:99:75:05:12:84:65:a6:bf:31:
                    e1:cd:1c:7c:0c:c2:29:1a:cf:b2:9e:d0:10:1e:d8:
                    83:2e:03:49:ed:3e:3f:4b:4c:98:d0:cf:a1:b3:49:
                    a5:63:97:1b:0f:ed:f2:59:74:1e:e3:d6:ee:fc:38:
                    29:1b:98:87:29:c7:6b:06:55:e4:9d:32:10:86:28:
                    85:2c:07:cf:c4:da:b2:11:da:75:0e:56:9a:60:01:
                    4c:1f:fc:b9:34:1d:3f:ba:b3:b0:ae:60:9a:a3:92:
                    96:d0:2b:71:65:79:27:99:81:6c:db:c7:aa:10:2c:
                    e2:c6:56:31:e6:1e:40:ae:99:db:6d:b8:78:6d:29:
                    43:27:31:70:19:9c:ea:1d:04:04:c8:47:c4:cf:06:
                    9e:02:16:41:1c:5b:ee:42:95:18:9e:39:43:cb:ea:
                    90:20:70:f7:bb:0c:00:bc:c3:2e:0c:4d:d7:9e:fb:
                    7c:ae:d0:fb:15:bc:18:7b:aa:c2:7b:eb:c8:98:5c:
                    da:99:8b:f6:5f:ad:4e:21:f9:b9:da:1b:54:d6:19:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:30:73:BC:58:5A:F6:BA:C9:45:5A:18:80:E2:90:FE:82:A1:B2
            X509v3 Authority Key Identifier:
                keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:db:dc:b6:7c:d6:26:d7:03:d5:d0:19:8f:be:21:1c:04:ca:
         18:d6:c6:2b:3f:0b:46:68:b2:f6:b8:09:aa:cb:83:02:47:dd:
         47:5e:9c:80:76:4f:d0:5a:61:5d:36:a0:d1:98:88:03:3e:fe:
         3d:1e:21:3d:29:df:d0:a2:b5:94:10:8e:e9:5c:f7:f2:a2:76:
         bc:c7:3c:73:34:d1:bb:8a:63:e4:4e:f9:a2:df:e1:9a:87:49:
         99:d2:ed:d5:87:36:b6:67:f9:d8:d1:2d:d5:7d:d1:a2:4e:a8:
         d3:0c:45:f6:ac:ea:de:bf:90:1c:be:5a:a2:9b:bf:19:5f:4a:
         c0:88:60:81:44:ac:1a:01:b7:1d:54:c2:06:fe:3a:49:2a:38:
         5d:d4:77:a8:b4:6c:74:9a:28:83:18:ca:50:c6:1d:39:55:20:
         04:98:24:94:32:04:67:10:5d:b6:6e:e6:a9:0b:b2:06:49:82:
         b4:41:40:68:4e:2a:b8:db:cc:a2:fa:36:91:aa:dc:97:7b:ed:
         7a:24:85:72:44:ed:de:c9:d8:a4:e9:5b:e8:4e:62:7d:6a:27:
         25:82:b5:fa:e2:ed:85:c8:ea:7d:75:7f:4d:ab:91:d1:7a:05:
         b7:21:6f:5a:d6:b9:c9:c3:c9:f3:88:8f:00:60:e6:9f:b9:3f:
         30:b2:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:46:16 2026 by rpki-client