Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
File:                     ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft (raw, json)
Hash identifier:          UCOit8y6S78CrpEXKfi4cb30/V2zs2V1FTMdSXqAQV8=
Subject key identifier:   28:36:C1:E1:AA:C6:49:D5:A3:C3:70:EC:FD:90:36:5A:E5:33:16:E2
Authority key identifier: 8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
Certificate issuer:       /CN=A91A6D85/serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
Manifest number:          11
Signing time:             Sat 03 Oct 2026 09:51:56 +0000
Manifest this update:     Sat 03 Oct 2026 09:51:56 +0000
Manifest next update:     Sat 10 Oct 2026 09:51:56 +0000
Files and hashes:         1: ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl (hash: K32eNtHVwjduaiHIyHVoCrQYYDfRtRSTUeUG6HV70J0=)
                          2: BCB00D18AA3411F199884E135211F970.roa (hash: ioGTh9GFvQ4kQHCP2Gi/w+boq7++x3V3C4G94SC7Uro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D85, serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
        Validity
            Not Before: Oct  3 09:51:56 2026 GMT
            Not After : Oct 10 09:51:56 2026 GMT
        Subject: CN=6ac0d03c-6df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:d4:3a:a6:83:eb:eb:22:d0:7d:6f:82:f5:
                    e5:53:fd:19:52:16:7f:3e:b8:d8:0b:73:d9:a0:82:
                    e0:10:62:bc:6f:11:89:20:b5:b8:fb:ee:0d:a6:7c:
                    e6:4b:e7:c7:32:2f:36:f7:26:9e:e2:9b:e9:0b:21:
                    45:a0:b0:f8:eb:46:20:67:04:74:95:b7:de:47:78:
                    f5:2b:d8:6e:b7:d9:cb:c8:a3:aa:d3:e5:ad:9f:84:
                    8b:bd:23:a8:0f:5c:03:d3:1a:35:9e:1f:31:f9:1d:
                    e1:f4:e2:f7:38:35:96:38:ad:cc:51:7b:b3:1a:c6:
                    5d:43:b8:41:79:60:0f:ef:4c:f3:ea:05:e3:c4:18:
                    03:88:3f:0c:f4:c1:62:5f:29:3a:cc:0b:10:d8:9f:
                    2b:43:05:09:43:4b:29:34:0d:d4:f5:9d:9e:d6:ba:
                    ca:f2:00:70:8d:c9:29:dd:bb:c6:92:e8:82:2e:59:
                    1b:20:d8:33:d8:e7:56:ed:22:39:84:b1:54:00:43:
                    ef:8d:71:98:fb:15:fc:a9:f0:f2:98:fb:39:0e:af:
                    62:d3:71:16:ee:6e:ec:12:61:fb:46:fa:35:84:27:
                    ed:d9:8b:82:c8:cd:c0:ce:80:d2:44:ea:09:ba:3d:
                    6f:05:00:f7:b3:37:29:38:ce:71:cf:b2:2d:27:27:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:36:C1:E1:AA:C6:49:D5:A3:C3:70:EC:FD:90:36:5A:E5:33:16:E2
            X509v3 Authority Key Identifier:
                keyid:8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:43:4a:18:98:42:85:50:9a:c4:9c:94:7e:c8:e6:ea:84:da:
         4c:46:da:a0:ba:1f:0e:2f:3b:27:b7:4c:ba:a1:2e:02:09:f4:
         bd:07:9d:09:7e:ac:21:fb:8d:44:07:9f:48:e3:5c:44:65:a8:
         d3:ff:a6:41:22:3b:1e:62:82:96:ea:19:a3:d3:28:5e:a2:a8:
         39:fd:80:64:73:ca:b2:66:06:e9:4d:fb:b0:75:db:8e:b5:f8:
         e3:47:d6:81:31:78:8a:9d:63:1e:90:92:b1:bb:eb:15:1d:6d:
         8a:80:6c:a9:bb:54:a0:66:4f:5f:07:e0:43:de:d2:68:eb:c6:
         cd:00:7f:8d:79:b0:72:ad:dc:5d:f4:a7:90:02:fc:48:a0:b9:
         f9:31:a5:38:ff:65:36:9a:1b:36:4c:42:ac:b4:5e:2c:9d:5c:
         c8:2d:52:82:8e:70:b9:58:c2:73:1b:a3:7f:d1:47:83:4c:78:
         10:60:ab:4d:a8:dc:c1:c0:24:6f:d6:ff:90:59:9b:55:bd:1f:
         a7:5f:21:82:16:37:98:52:32:34:31:6e:f3:a4:d8:54:24:a6:
         69:54:08:f1:45:d8:bf:06:a0:ed:9e:5a:35:fe:71:27:03:dd:
         f5:f9:36:e7:a9:59:e9:6d:8e:ce:75:e6:8d:c3:c9:43:28:77:
         73:df:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:38:42 2026 by rpki-client