Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
File:                     JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json)
Hash identifier:          ur+7dBTXgU7SgDVZpZ/GAFnQJC2NybDpeXMErJV7SJA=
Subject key identifier:   9E:7E:CB:FE:04:AF:B3:7E:C2:4F:0E:0E:5C:D9:3A:03:6E:9B:C4:51
Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Certificate issuer:       /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
Manifest number:          015D
Signing time:             Fri 25 Sep 2026 01:27:21 +0000
Manifest this update:     Fri 25 Sep 2026 01:27:20 +0000
Manifest next update:     Fri 02 Oct 2026 01:27:20 +0000
Files and hashes:         1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: 58VxPtcecAbe3NYQ79tRrGc/dwVNfix0rQdBjwdhtxo=)
                          2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: VXtDiwiZo4Ue40kQIlfUesjgEwjjrX0+c0GVZ1Q0Ke4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
        Validity
            Not Before: Sep 25 01:27:20 2026 GMT
            Not After : Oct  2 01:27:20 2026 GMT
        Subject: CN=6ab5cdf9-db94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:4b:63:12:bd:5f:1f:e2:de:af:10:e8:7b:
                    19:fb:8c:62:dc:3d:31:c9:f9:d8:94:ef:00:bd:24:
                    9b:8c:f4:9e:84:ab:1c:27:d1:9e:4e:78:47:d8:2b:
                    93:06:fd:61:86:2c:7d:54:57:0d:9f:e6:3c:0d:78:
                    e2:87:b2:3d:eb:53:9f:84:68:b2:30:d9:ba:d3:95:
                    56:14:62:e3:ca:d5:0d:01:e6:81:b3:0b:8d:2d:21:
                    fa:51:6f:ad:da:f3:3b:5c:93:aa:74:1d:a7:88:e5:
                    20:b3:ea:c3:19:e0:56:5f:e3:54:32:4f:55:1e:73:
                    f5:b4:f6:5f:79:a1:89:15:bc:da:ae:64:e9:50:4c:
                    e6:62:5c:91:74:78:ab:20:20:d5:52:56:86:69:06:
                    1f:74:22:ac:42:73:e0:73:8e:f6:b8:e2:65:a5:5f:
                    04:68:2f:36:a3:c3:6a:88:73:3f:8b:24:da:7c:64:
                    b7:31:87:85:21:3d:11:cd:46:d4:c6:86:e2:0f:01:
                    f7:fe:86:2e:fd:b5:3d:50:d8:01:39:c1:1b:05:91:
                    0e:30:9f:63:b1:25:57:85:af:31:67:63:0d:cf:ec:
                    eb:00:2a:71:65:85:4d:3a:93:95:cd:c4:3e:b1:b2:
                    3d:45:4e:14:fd:5b:77:75:65:c6:a6:72:f2:e9:d2:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7E:CB:FE:04:AF:B3:7E:C2:4F:0E:0E:5C:D9:3A:03:6E:9B:C4:51
            X509v3 Authority Key Identifier:
                keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:77:af:80:25:27:3a:b9:2a:75:c2:8b:40:e5:ef:c5:49:8e:
         88:c2:6c:d9:b9:bc:0b:e6:99:07:56:4a:45:d0:e5:68:2a:07:
         44:5d:1d:5c:fa:86:e5:3b:55:6b:80:52:40:43:fd:f1:c7:99:
         c9:76:ab:91:62:6b:af:cd:e8:66:e3:70:24:d2:3a:ad:47:b7:
         cf:30:ed:5b:12:ae:45:ae:99:0d:ea:c1:d7:4a:b7:18:92:c8:
         1d:8c:51:3e:1c:8a:9f:95:76:3f:39:3a:f4:ac:11:0d:df:55:
         7f:53:2c:1a:c8:88:fa:be:b3:76:fe:99:b3:dc:61:db:df:45:
         b7:47:d8:31:fc:b1:e0:3d:99:05:8d:f1:bc:96:fe:07:6e:db:
         1f:da:25:a8:05:cc:6f:dc:c0:f2:9e:f4:e7:1c:11:34:2a:5c:
         0a:e1:ac:a1:f6:eb:b8:e1:b3:ef:f0:15:7c:e3:61:67:2b:cb:
         73:83:6d:1d:42:d7:b4:ba:b5:84:6f:34:16:b6:3a:3e:69:a1:
         57:db:ef:4a:19:8d:e0:0e:3b:4f:a6:51:73:58:64:ee:45:a9:
         01:02:a1:24:82:e2:93:5f:7b:ba:af:3c:ec:9d:2e:c1:45:8f:
         45:02:83:f3:78:13:6f:c1:d5:d5:fe:1d:ce:9a:28:ef:93:2d:
         0d:35:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:04:42 2026 by rpki-client