Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File:                     JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier:          BqEhjVyvErQv7CXf7AtIeU8tDdf5WM085Ffm8Xfm8gM=
Subject key identifier:   1E:10:A1:EB:2E:84:BE:42:E0:CB:43:D7:6C:33:A0:CE:07:90:B9:D5
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number:          0245
Signing time:             Wed 23 Sep 2026 02:24:15 +0000
Manifest this update:     Wed 23 Sep 2026 02:24:14 +0000
Manifest next update:     Wed 30 Sep 2026 02:24:14 +0000
Files and hashes:         1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: aQ14eNbpIKxYVg65tB6h134BIxh+oYf5smiVwPRvkU4=)
                          2: 03E47340AAE411F1907AB5A24C11F970.roa (hash: HpRt0vzil1Vu87MMyiV/ZYFFIZltZpvK50E0vihNkcc=)
                          3: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: cj04D5TFFsw18/RIkG4j75yIN0cec3Y+qkgv9xjLhic=)
                          4: 26925A20AC1411F1B5E0CE217111F970.roa (hash: z3iFymkxPG1qE7D8b7qi/84RqpzxTtWddWroC+WpMBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Sep 23 02:24:14 2026 GMT
            Not After : Sep 30 02:24:14 2026 GMT
        Subject: CN=6ab3384f-8652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:b8:5f:1a:70:b3:8a:90:a2:e8:56:e3:e6:
                    0d:49:a0:38:ed:50:2d:bd:5a:0a:fd:b1:3b:41:53:
                    d4:83:34:a5:9a:28:cf:e8:f8:74:0e:01:1d:2c:d1:
                    18:7f:3a:9c:8d:ed:62:f7:8f:2b:d9:38:09:71:74:
                    7e:34:45:3d:59:44:e4:11:b2:e9:e3:d4:36:38:56:
                    f3:16:bb:b5:04:8e:88:99:d9:ed:26:87:20:ea:b4:
                    b1:1a:9b:7e:e5:91:fd:e7:de:b8:23:b0:01:0b:2e:
                    c4:e5:90:ab:13:b3:9c:df:52:c7:88:22:7d:07:86:
                    e1:93:63:60:0f:ba:34:13:9e:d8:0e:d2:e7:9f:e1:
                    71:7c:c7:e1:a7:f8:dd:0f:cf:e3:90:4f:41:f2:da:
                    e6:f2:76:72:6e:47:e4:3f:28:0b:c5:e0:10:86:83:
                    ec:92:d9:44:6c:c4:ac:2d:4c:10:5f:be:70:fa:ee:
                    4f:da:02:34:c4:f6:28:01:d6:8e:36:60:1a:76:83:
                    69:ba:48:85:af:77:33:03:bf:c5:b6:70:3b:49:43:
                    06:9c:6a:c1:59:49:87:63:95:59:43:38:4c:b6:54:
                    53:7a:16:0f:84:83:ea:57:e5:70:b0:8b:91:e9:7b:
                    c2:e4:39:8d:d4:2a:d4:7b:bf:83:7e:1f:cc:00:df:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:10:A1:EB:2E:84:BE:42:E0:CB:43:D7:6C:33:A0:CE:07:90:B9:D5
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0b:2d:bc:d5:47:89:d0:ed:c5:73:6e:f3:76:86:1f:41:9f:
         5b:f7:78:f3:4a:a2:c4:b6:f8:1d:6e:49:66:32:4c:87:95:51:
         50:ee:73:ba:3c:88:68:47:50:0d:4e:0f:60:1b:f4:6d:64:84:
         46:67:d6:f1:57:9e:ef:52:af:de:06:0b:10:1f:75:14:49:0e:
         c5:fc:9e:79:a3:5b:ea:ab:e4:8d:a2:7f:89:ad:ad:6e:b8:c5:
         6e:34:e4:0d:0d:72:b6:17:78:87:f7:1d:a9:7b:fd:b5:72:e8:
         5c:c1:7e:35:9d:7a:39:57:8a:a5:5f:02:c6:25:e2:7f:28:b1:
         ae:bc:cd:72:e4:9e:9a:86:e5:25:a9:ac:d0:70:6f:0c:55:b2:
         a9:22:27:22:b3:25:fb:83:7c:66:f7:3c:6f:e9:7e:27:91:1f:
         dd:68:3b:1c:66:5c:3e:68:12:9c:8d:c6:10:6b:cf:ba:67:30:
         c3:2a:aa:e3:fd:19:16:c5:ae:4d:60:55:4e:02:df:bf:74:32:
         de:51:9d:a8:af:ad:28:4a:f8:d9:35:06:81:a8:24:71:cb:49:
         bc:40:05:12:9b:49:73:09:0d:ef:8e:dd:b5:3b:79:22:b4:e4:
         47:1e:fc:87:2b:b3:9a:ac:39:33:e9:b5:1f:a5:32:8d:e5:be:
         c3:44:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:22:57 2026 by rpki-client