Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
File:                     JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json)
Hash identifier:          PkPMXP+zMGRX9ofNFdKHpLkdd13IMdpFVAMbE7+D59U=
Subject key identifier:   AA:FC:61:0B:AE:F4:E9:79:05:4A:CE:AD:40:D7:F3:DC:9A:1F:E2:80
Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB
Certificate issuer:       /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB
Certificate serial:       0E62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
Manifest number:          0E58
Signing time:             Tue 22 Sep 2026 17:39:31 +0000
Manifest this update:     Tue 22 Sep 2026 17:39:30 +0000
Manifest next update:     Tue 29 Sep 2026 17:39:30 +0000
Files and hashes:         1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: Fp2ORR+0wT72nMfrKyUoIlsY+Songj3PPJLgYjldXuw=)
                          2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: N1MxiNWDcRhs9V3+oDElXSu77YC7WZEZPRwCQu2D/KU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl
                          rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3682 (0xe62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB
        Validity
            Not Before: Sep 22 17:39:30 2026 GMT
            Not After : Sep 29 17:39:30 2026 GMT
        Subject: CN=6ab2bd53-8238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:24:1d:04:0a:63:dd:78:4f:c4:7a:71:2c:0e:
                    6a:c9:88:89:de:cf:72:35:37:59:84:13:68:7b:bb:
                    fd:36:85:48:23:8d:93:38:ae:45:da:0b:2a:cf:34:
                    6f:c5:72:14:45:a2:f1:b0:b2:4a:f4:f5:d9:49:3d:
                    d8:4d:4e:2c:d5:c9:a5:f4:af:bb:76:51:a2:18:c3:
                    51:2f:8d:4d:c0:c3:a2:59:8a:c6:ac:eb:37:54:48:
                    27:ed:84:b4:cb:7d:18:7c:5c:a2:46:50:e4:52:a5:
                    2d:42:ce:af:64:f9:2b:47:92:9b:7d:6f:9f:ce:33:
                    1b:11:2b:88:a9:88:d4:d2:66:ac:55:dd:66:ed:46:
                    15:64:c8:1f:8c:03:27:ef:a0:64:02:de:b7:d2:0f:
                    81:ad:d2:31:85:de:44:14:f6:23:88:b4:37:db:d9:
                    65:65:eb:42:94:79:c1:e4:f8:28:5e:66:f7:42:ee:
                    25:30:0d:9f:ca:0d:07:4b:65:69:4b:e2:57:1f:dd:
                    fe:03:ce:37:f6:77:d8:63:91:e8:20:bc:82:da:a9:
                    f8:d8:34:b1:b4:0b:ef:13:5b:a9:e8:08:95:a2:77:
                    5c:3c:a2:f9:84:9e:98:c4:73:8f:cd:dc:1b:16:3f:
                    bc:4d:b3:4d:a6:e8:3e:1f:df:cd:bf:79:8b:b6:6c:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:61:0B:AE:F4:E9:79:05:4A:CE:AD:40:D7:F3:DC:9A:1F:E2:80
            X509v3 Authority Key Identifier:
                keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f8:09:c7:06:33:1b:25:3e:35:c6:81:88:07:51:5c:f3:99:
         0d:f5:7c:5c:40:d1:ce:c3:15:bb:42:64:24:f3:03:c1:e0:bb:
         1d:48:fa:14:9c:9a:e9:ff:d5:b7:54:6f:0d:f0:04:05:94:71:
         90:97:25:c4:21:85:bb:6b:77:02:79:96:cd:30:c3:a1:cc:19:
         0c:56:7e:25:40:73:84:9e:59:f7:ba:28:75:a8:94:e0:b0:80:
         c3:73:5d:af:27:c5:e2:a3:2f:5a:be:86:3b:e3:ce:78:38:1d:
         b8:c9:ef:88:b8:cf:c2:cf:1d:5b:9a:79:10:6b:88:ad:2c:df:
         11:c8:c6:51:fb:82:ff:fe:3c:9f:0a:a1:0c:e1:1d:23:a1:cf:
         fc:af:62:0f:23:47:2f:75:16:2f:66:f6:02:11:8c:61:e6:a5:
         26:d7:f8:87:52:5c:0d:68:ca:9a:03:36:e8:4f:7f:dc:93:8c:
         f2:c9:1a:84:c1:25:5c:86:94:fd:62:7f:9c:8f:de:cf:7e:8a:
         bc:f7:8c:fb:41:4a:cb:35:e4:6e:86:98:3f:dd:54:89:45:ea:
         96:82:10:0c:02:5f:b3:df:7c:a5:f9:fb:ec:04:aa:5d:7b:59:
         c5:d0:28:1e:d3:77:2d:c0:3b:ea:26:a5:9f:ab:46:de:1c:1b:
         86:e8:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:54:37 2026 by rpki-client