Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File:                     JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier:          COiiRrB9eFncFHQGqflOTo34cKXSBT5TvVCdmQC2Jao=
Subject key identifier:   2E:B4:89:BE:15:C1:C0:D7:7D:52:0B:3F:89:FE:56:5C:A3:44:0C:3F
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer:       /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number:          017D
Signing time:             Thu 05 Nov 2026 05:32:00 +0000
Manifest this update:     Thu 05 Nov 2026 05:31:59 +0000
Manifest next update:     Thu 12 Nov 2026 05:31:59 +0000
Files and hashes:         1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: goJOysm4ZGlA42k1UCVDukA8ZcV0mMk5iYrnSJBrBNI=)
                          2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 04:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
        Validity
            Not Before: Nov  5 05:31:59 2026 GMT
            Not After : Nov 12 05:31:59 2026 GMT
        Subject: CN=6aec14d0-5091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:58:31:29:46:c6:c4:87:ad:49:2c:5f:75:
                    b4:5d:35:a6:a5:70:08:82:11:3b:9e:8a:d9:e4:68:
                    84:71:d6:e2:bc:46:c8:9e:c4:6b:af:c7:c4:77:e4:
                    34:e9:3f:24:20:12:2f:31:f8:04:fb:a0:9c:5b:bd:
                    e8:18:ad:1a:ee:19:b8:36:9a:5d:aa:0f:cf:aa:ea:
                    f3:b8:a1:af:5b:61:1f:eb:86:b5:e6:ac:81:d9:bc:
                    5b:dc:84:3b:e8:6d:a6:28:81:9a:11:6f:17:59:ca:
                    ee:94:b7:04:56:82:a2:53:b2:41:5f:7c:15:f6:fd:
                    00:a4:7f:47:b1:ce:96:34:8f:0a:12:19:bb:d8:4c:
                    b2:c7:87:f1:18:45:ae:50:00:15:a5:3e:4c:4f:45:
                    ba:92:24:59:47:c5:45:80:f1:e9:13:e2:76:a2:23:
                    9b:1f:09:1a:f7:b0:15:cf:4e:c0:7e:8d:e6:ba:71:
                    1a:4c:d4:8d:ec:52:a3:70:e7:11:e7:d8:e2:df:83:
                    b6:05:f8:ac:6e:e4:10:0e:e1:77:eb:8d:df:a0:df:
                    d5:2e:67:a1:65:0b:79:b5:46:be:d1:ef:95:6d:d1:
                    c0:a6:59:f8:b5:23:2e:67:79:fc:de:5d:36:d3:b7:
                    bb:29:9d:2a:36:f7:2a:a4:0b:22:4c:c6:f2:58:0f:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B4:89:BE:15:C1:C0:D7:7D:52:0B:3F:89:FE:56:5C:A3:44:0C:3F
            X509v3 Authority Key Identifier:
                keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:83:2e:40:5d:5a:a1:c9:1f:7a:74:02:90:87:37:48:56:42:
         78:ae:85:2a:ac:2d:60:80:fb:53:b8:f4:8f:eb:bf:5c:76:db:
         86:46:39:72:ae:55:6f:69:c1:14:96:9f:c2:a1:98:49:be:1a:
         9c:4d:5d:dc:b6:3c:4e:7f:d9:79:b7:53:df:06:73:2e:54:b6:
         eb:d4:88:1e:51:70:e8:a7:94:54:ab:23:8e:02:58:0d:0e:d4:
         d6:e4:5f:bd:09:a5:ee:2e:a4:0a:2c:33:95:c4:37:12:cc:77:
         1f:37:33:92:e0:81:de:0b:f2:4a:07:76:18:4a:f4:d6:4f:dc:
         e0:8e:39:cd:63:3d:86:c6:92:2e:03:4c:50:b6:9f:34:45:fe:
         dd:02:3d:c5:2d:5b:49:f4:7d:f5:e0:5e:d5:bc:8c:ed:4b:99:
         5d:96:fb:20:e4:58:8d:20:e3:26:51:e2:d1:74:cb:38:a1:f0:
         9a:0a:cc:52:e4:a6:e6:3b:16:fd:49:e1:05:2c:3b:31:9b:a5:
         e8:07:b1:18:76:0d:c6:c5:01:3c:16:ec:d5:94:0c:f6:3a:fe:
         ff:fe:fa:01:2d:69:0e:85:29:b6:71:8d:46:fe:58:7e:8b:2c:
         25:65:98:8e:91:6d:79:8a:12:5a:d9:1e:4e:e2:49:ae:3b:4b:
         71:bf:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 10:52:18 2026 by rpki-client