Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File:                     jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier:          nAVhM+NszwFuA72eu/bMQ1Q0rO6WKFV5OHM2YL+XJrk=
Subject key identifier:   08:FC:2A:67:D8:F5:4C:FA:0D:C9:37:F4:3C:B2:80:3F:9F:88:98:F3
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer:       /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number:          B2
Signing time:             Mon 21 Sep 2026 07:16:38 +0000
Manifest this update:     Mon 21 Sep 2026 07:16:38 +0000
Manifest next update:     Mon 28 Sep 2026 07:16:38 +0000
Files and hashes:         1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: g8YdyM/lYmXir/Si5B+sebrxhmg7hBw8IsAO9TAtgnQ=)
                          2: 2A400140AB4711F18E8A34C87111F970.roa (hash: CUggDrBAvzXvaQYrMSRg9yvdzFs6xCvDyXhOQ31B8a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
                          rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
        Validity
            Not Before: Sep 21 07:16:38 2026 GMT
            Not After : Sep 28 07:16:38 2026 GMT
        Subject: CN=6ab0d9d6-ddeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:54:bc:50:03:b1:3f:3b:15:97:d6:e2:6c:
                    03:cb:7e:c9:83:67:fb:d3:aa:23:33:cb:96:97:6c:
                    c3:b4:32:90:cc:97:33:22:f0:23:0a:0b:85:5f:61:
                    ea:ea:9d:6f:7f:30:60:34:45:4a:91:94:cc:78:de:
                    29:f5:93:0e:ff:0d:44:e6:13:f1:bd:7d:f5:1f:e3:
                    da:87:64:d5:8b:cf:33:c5:8b:c2:79:67:8f:3c:bd:
                    6e:30:d6:db:2e:ea:08:e0:20:b3:b3:2f:8a:69:83:
                    64:ec:20:79:f7:6e:e9:02:40:b1:9f:9f:52:8f:96:
                    ca:66:84:98:75:f4:08:96:5d:9c:e5:1b:5a:32:9c:
                    61:77:ad:09:e0:0c:54:dd:d9:4e:1c:a6:f1:83:bc:
                    d4:78:47:82:d3:aa:44:d7:b6:fd:df:c4:d0:aa:2a:
                    8a:61:b1:35:99:57:1e:d7:77:b1:42:45:51:45:d4:
                    38:46:00:60:93:e8:f0:2b:5f:04:4f:9e:44:48:47:
                    e1:74:4e:9b:b2:85:67:2c:43:90:23:50:09:66:8c:
                    75:c7:b1:56:43:b2:a7:37:0a:e0:8c:28:d9:11:fd:
                    66:2a:8c:44:8c:e2:75:88:5e:ba:6b:44:2e:52:24:
                    6e:21:9d:fe:76:8f:68:fa:b1:a5:92:df:41:52:bb:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FC:2A:67:D8:F5:4C:FA:0D:C9:37:F4:3C:B2:80:3F:9F:88:98:F3
            X509v3 Authority Key Identifier:
                keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:77:62:98:3b:7d:ce:30:45:5b:32:fc:87:78:98:df:7d:
         20:a8:42:cb:ae:39:a2:f3:f2:d3:5d:bc:20:3f:a6:28:33:17:
         13:6e:ae:7e:b3:d8:9d:4f:ac:22:f5:75:a9:ef:da:79:0d:26:
         30:5b:8b:49:60:eb:c5:f6:5f:7c:0a:23:de:70:84:83:d1:d0:
         99:d1:86:15:af:19:7b:96:4f:f7:c6:74:d9:c7:38:50:a4:c0:
         93:07:e7:36:98:bd:31:97:d4:70:19:0d:43:bf:69:c5:a0:9b:
         ac:f6:ef:47:f4:05:d8:7e:e6:ac:40:f5:e7:de:25:0a:a7:23:
         8c:7c:d2:5d:6a:53:ac:fe:0c:bd:c1:db:57:3b:9c:a8:6a:8a:
         80:0b:45:34:15:39:08:de:43:ea:b5:5d:af:ef:5f:85:bc:be:
         08:4a:a1:e2:14:4a:7c:c8:5b:78:d7:f0:76:3e:9f:72:af:81:
         b3:f8:7d:4e:67:6a:7b:7a:8c:6a:9b:e1:30:3a:c7:f6:3e:8f:
         a2:4b:a7:28:ef:15:96:a1:2a:68:2a:32:3a:f2:9d:4f:06:0b:
         09:f3:19:82:47:b2:89:e3:8e:04:c4:09:63:b0:63:60:46:bd:
         09:8a:82:e1:2a:e4:05:a7:db:c2:a1:63:00:d3:89:0e:3a:63:
         d0:43:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:29:28 2026 by rpki-client