Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
File:                     JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json)
Hash identifier:          /AB/TbC7J3IPlPaT2WMG8tjQCKixAuzPu9Wk4r0Kbmc=
Subject key identifier:   43:FF:22:5B:E8:C5:42:2F:C6:E7:11:AA:53:C5:B8:78:D5:90:AF:82
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Certificate issuer:       /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial:       0D4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
Manifest number:          0D3B
Signing time:             Tue 22 Sep 2026 18:08:50 +0000
Manifest this update:     Tue 22 Sep 2026 18:08:50 +0000
Manifest next update:     Tue 29 Sep 2026 18:08:50 +0000
Files and hashes:         1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: iPoBVRjNDq4R2OBAiSgJYzVWM85Zq5YWhWYLbraq7As=)
                          2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: XdeY3ZDU1gYVo5EdHhvTECPUKXRrCiVs/YpC5WS4lcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3407 (0xd4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
        Validity
            Not Before: Sep 22 18:08:50 2026 GMT
            Not After : Sep 29 18:08:50 2026 GMT
        Subject: CN=6ab2c432-f972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:e8:37:e4:ff:b0:73:1f:16:af:f8:f6:57:
                    8f:0e:63:b8:e8:6b:19:a7:c4:ce:ce:f5:3b:9b:a3:
                    eb:c4:2a:21:c2:d8:fb:71:7b:e7:c6:94:1a:4b:52:
                    f6:14:7e:16:24:48:9e:76:6a:f1:7a:d3:8c:ac:f7:
                    56:c1:40:d4:57:5f:32:1f:23:c3:7d:ce:d7:6c:cd:
                    f2:4f:56:21:5b:30:5c:9e:87:7c:bb:77:9c:0a:0b:
                    30:27:c8:06:cc:cf:a7:ef:52:88:21:03:37:3a:56:
                    69:0c:84:6e:54:4a:0f:e5:23:ff:83:86:0b:18:a4:
                    13:89:1d:a0:55:fd:95:73:04:a6:85:9e:91:46:09:
                    23:0f:7f:39:e2:f1:12:27:63:47:1e:e3:6c:e5:77:
                    48:7f:8e:f1:9d:c6:38:78:11:2c:ee:b6:a6:d1:9a:
                    1d:f2:7e:e0:f9:06:f6:55:47:50:04:16:b4:10:86:
                    46:41:6c:e9:1a:2a:d1:00:e0:85:4a:ff:ad:ab:cc:
                    84:e9:94:af:98:75:6d:5f:a7:d3:7a:6c:53:59:33:
                    6d:fc:49:b0:7e:38:71:13:86:f9:c0:f5:f0:67:ea:
                    59:da:70:20:3d:4e:2c:46:66:9b:a1:94:5f:0b:17:
                    3d:dc:3b:3d:e7:2e:ff:4f:71:82:20:1b:f6:c9:8f:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FF:22:5B:E8:C5:42:2F:C6:E7:11:AA:53:C5:B8:78:D5:90:AF:82
            X509v3 Authority Key Identifier:
                keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3d:9f:38:36:38:b2:df:ee:2e:0f:30:df:5f:ff:53:02:a1:
         33:93:c0:39:f2:ee:2a:c7:4f:95:bb:43:75:30:ea:22:06:07:
         cf:1d:f8:3c:38:b5:da:23:94:33:01:2e:b4:a8:c0:8f:7f:fa:
         62:07:46:37:6c:48:e3:29:71:cb:00:32:82:48:d1:f6:37:25:
         77:6a:d6:8a:d7:89:99:b6:6b:2c:7c:9d:f0:8f:ed:c0:46:ce:
         b0:27:64:4f:59:29:af:f6:73:8a:47:e6:a3:6c:53:1c:66:e6:
         2a:b0:56:b2:ca:a7:b5:a3:e3:df:5a:71:06:59:82:af:87:2b:
         21:85:99:45:72:1c:f5:59:e0:df:22:b2:66:42:39:54:40:8d:
         36:ce:bc:55:64:a5:93:4a:40:d1:5a:09:3f:98:c2:41:33:07:
         88:89:fe:48:30:89:ba:63:64:52:b4:08:18:0f:e1:eb:45:1e:
         2e:40:0c:d8:bc:1c:c7:27:a8:fa:92:25:41:95:08:a1:ab:d8:
         86:c5:0d:1b:bc:e9:85:66:0b:70:0d:07:6c:19:4c:24:ee:31:
         d0:58:c3:82:7c:d0:26:bf:e8:02:96:0c:08:f1:cb:b1:1b:16:
         4b:2d:58:f6:52:69:3a:1d:1f:19:fd:bc:c0:1e:db:70:62:50:
         f9:9b:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:21:22 2026 by rpki-client