Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
File:                     jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json)
Hash identifier:          OLSSc+JU3VLfpKE7BETC11x7QWeqQYxCQ4PtKjAS8Dg=
Subject key identifier:   33:CA:B6:FC:2A:A3:08:ED:0D:00:BF:5C:86:CD:D8:70:14:70:9E:B8
Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8
Certificate issuer:       /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
Manifest number:          0215
Signing time:             Mon 21 Sep 2026 03:02:12 +0000
Manifest this update:     Mon 21 Sep 2026 03:02:11 +0000
Manifest next update:     Mon 28 Sep 2026 03:02:11 +0000
Files and hashes:         1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: af6fRkb5jFv1mSsP+g4yemYuKxXWihBMLzKfQpRFGG0=)
                          2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: x74beNv2bckC9kjbYSqsfhvkgGA3DJlDz0+S6jQZlEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl
                          rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
        Validity
            Not Before: Sep 21 03:02:11 2026 GMT
            Not After : Sep 28 03:02:11 2026 GMT
        Subject: CN=6ab09e33-cf4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:1d:25:81:98:ac:d3:1e:8e:b2:24:1a:78:
                    6c:38:74:b0:13:f7:cc:e8:d2:9b:17:ae:fb:3e:a2:
                    ff:40:e4:f5:29:c2:5a:26:1f:fc:b0:35:04:b4:9d:
                    fb:0d:e0:75:da:12:17:40:dc:97:cf:26:ba:ab:07:
                    cc:5e:dc:ba:26:be:45:3b:21:9f:9c:dc:f8:ea:b6:
                    91:0e:f4:71:1f:36:2f:65:8a:86:2f:16:20:bb:d0:
                    fb:b0:88:f3:81:7f:18:b8:22:65:a7:df:55:f6:3b:
                    70:9d:57:75:3f:88:6b:df:79:24:a8:1b:89:e0:5e:
                    05:54:ea:91:51:6d:70:a7:cf:7a:02:64:b3:a1:0a:
                    7f:64:23:5c:59:fc:4e:2e:89:fb:63:b6:02:64:3b:
                    78:9d:6a:1e:01:61:c1:1e:a7:07:1f:3d:63:d6:66:
                    71:b1:42:eb:c9:22:10:d6:26:e4:51:1d:ed:95:f8:
                    2c:28:b9:15:d0:78:19:de:5e:39:8f:49:16:81:cd:
                    6a:ed:75:73:d7:26:d7:24:43:db:cc:a2:f1:d2:4f:
                    bc:71:0d:f0:c5:19:cd:09:f4:b2:17:77:46:7c:3f:
                    ec:17:62:6c:d7:f6:db:df:f6:71:0d:ec:12:c9:1b:
                    d6:0b:1c:7f:d9:a6:11:26:b4:58:50:b7:8d:38:72:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CA:B6:FC:2A:A3:08:ED:0D:00:BF:5C:86:CD:D8:70:14:70:9E:B8
            X509v3 Authority Key Identifier:
                keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c7:d2:a7:a3:7b:a5:97:f2:c5:4d:95:45:de:78:ce:da:49:
         f9:ea:df:63:c3:72:c2:22:d0:d5:a7:87:a0:96:49:ca:d5:4b:
         ca:1b:3a:af:fb:2e:86:5f:5f:93:66:ad:0d:67:d7:f1:e6:fd:
         47:19:8c:72:da:45:e3:30:b5:f1:18:f2:e8:d9:1e:0c:39:bb:
         04:22:14:fe:37:d3:59:28:82:4a:19:be:b0:33:ce:e5:c3:e2:
         35:ea:fc:e8:ca:03:f4:be:0f:2f:a5:d1:3b:44:fb:db:b3:6b:
         1e:9b:97:f8:40:4f:d6:aa:02:57:b1:90:df:b0:8c:ae:d9:16:
         af:03:ee:26:fc:26:cf:ab:69:0d:56:e8:70:31:29:c4:0d:c9:
         fc:94:39:a7:f0:f9:ae:02:1d:13:37:f7:c1:a6:cd:0f:3c:6a:
         14:a2:01:6c:fd:7c:54:7a:c5:be:6d:65:17:49:ab:e3:72:3d:
         e2:4d:bf:37:11:b3:39:02:65:e4:30:de:84:69:26:7c:94:bc:
         cb:1d:73:a6:49:8e:2c:e6:ed:69:ec:4d:ac:d0:d4:72:1b:38:
         6c:4b:2e:46:03:1f:c8:b6:e7:f6:85:e4:37:3b:df:82:38:a9:
         54:8c:ea:51:bc:b3:66:4a:f3:fe:bd:66:88:39:cd:d3:b7:bb:
         ef:ed:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:29:17 2026 by rpki-client