Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File:                     JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier:          Z3LIcalR0U04FdIJmw32ex73G+fFaTi7o96FudElsJs=
Subject key identifier:   A2:C6:AF:78:55:43:28:FC:3F:CF:A1:03:AA:73:71:61:F3:87:9C:B6
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer:       /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial:       0EEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number:          0EBC
Signing time:             Sun 20 Sep 2026 17:13:59 +0000
Manifest this update:     Sun 20 Sep 2026 17:13:58 +0000
Manifest next update:     Sun 27 Sep 2026 17:13:58 +0000
Files and hashes:         1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: L8JZtx8dqo02JA501w9tWwSxc8pm3RzrRA7mo0+ApPw=)
                          2: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: FZBTRmN4jNtPYjIkOHiUIokPiCQDNfx5hxg3M5I9k0s=)
                          3: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: JaUMO42d058IElCDiIbG4Rs0tOfpVC1kruVkh0dRo+Q=)
                          4: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: yXwdOd72bbovK/lF6Uti3upvDyZiu0XdcxdU6SGbEWE=)
                          5: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: OqElOiSTNAv1KVlC60CPfYWdntL1lekOatGd/7iB4Y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3820 (0xeec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
        Validity
            Not Before: Sep 20 17:13:58 2026 GMT
            Not After : Sep 27 17:13:58 2026 GMT
        Subject: CN=6ab01456-9af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:6f:97:b5:0f:02:49:81:7d:cf:39:e9:46:
                    73:3e:94:cd:ad:55:44:2f:1d:76:af:9b:c8:ed:7f:
                    8f:93:9c:f0:c6:4c:97:b0:43:31:97:5e:8a:e2:c8:
                    de:ba:81:6a:86:7f:4c:4b:a9:eb:e0:ed:b8:00:f2:
                    13:32:3b:12:14:c5:54:94:30:ce:7c:df:8d:b4:6d:
                    4c:96:a5:45:25:3c:d1:a9:bc:2f:d7:f1:6e:d7:4f:
                    8f:7a:43:b6:65:28:06:e9:8b:ec:a2:9e:7e:b7:d6:
                    1b:dc:8a:cc:40:26:83:22:30:64:1a:f0:29:5f:00:
                    f4:35:0c:45:a7:e9:e7:e4:17:77:46:6f:b1:59:88:
                    9d:14:2a:37:b6:c1:b0:e8:f4:d2:c4:fe:92:93:e2:
                    8c:fa:2a:b0:d0:68:fc:94:2e:6f:51:73:99:16:bc:
                    7a:be:36:88:d5:76:de:f5:d5:53:77:50:a3:39:f3:
                    6f:cc:0d:fd:9b:e2:18:3f:d4:a0:a3:9c:99:7a:6a:
                    79:4f:48:66:87:c2:64:11:2d:fe:f7:2e:41:5e:9e:
                    4e:22:9b:09:1f:a2:05:d1:df:c2:69:a7:28:63:f0:
                    d2:bb:af:d4:60:a9:b0:06:7c:c7:47:cc:7b:ef:8f:
                    fc:a5:5d:45:5e:89:69:69:49:30:56:73:1f:f8:c3:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C6:AF:78:55:43:28:FC:3F:CF:A1:03:AA:73:71:61:F3:87:9C:B6
            X509v3 Authority Key Identifier:
                keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:18:b6:ed:5f:cc:87:5b:8b:e1:f3:32:81:f9:a9:1f:86:
         0f:68:ec:11:87:15:f3:0f:b3:36:a0:91:b5:f6:d6:35:32:ef:
         03:d2:12:d6:c1:42:26:72:40:b3:4d:57:3a:fe:0d:58:c7:48:
         c5:81:cb:6b:a0:79:79:62:e4:79:17:3c:1b:c2:81:44:3e:67:
         95:57:95:cd:bc:55:8d:0d:df:92:50:fa:60:6c:38:03:3a:fe:
         99:fd:db:a5:6e:2c:0e:cc:a7:72:06:65:9b:99:f7:fa:81:dd:
         1c:f1:69:c4:72:0d:d6:d8:46:28:21:9b:49:a2:ac:69:ca:a2:
         34:fa:27:50:48:e6:ef:0c:14:16:12:7c:8b:39:86:31:3a:e0:
         17:e8:fd:82:f9:d9:f2:d9:85:fd:1a:31:49:c9:63:2e:d7:93:
         e0:37:c0:77:46:26:3a:cd:5c:6c:cc:1a:07:3d:ed:91:b5:93:
         2e:c3:dc:f4:73:0f:ad:f2:32:06:58:00:91:20:a3:23:f7:f0:
         64:ef:6c:4d:f0:93:69:92:3b:cf:58:03:71:66:73:d8:3e:85:
         da:4a:d8:c4:fd:87:fe:cc:57:85:86:69:77:52:0d:e1:30:97:
         2b:c9:a8:71:48:2f:b8:e4:cc:0a:18:32:c8:ca:ea:b0:d3:27:
         60:d0:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:46:46 2026 by rpki-client