Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File:                     JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier:          MG1JwpqQVXdZsL/U849mFTtcvLBvZQsOOnfoxG9hn4A=
Subject key identifier:   1A:E7:C0:77:ED:B5:91:CE:BC:87:D2:61:C7:FE:11:85:0B:69:38:99
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer:       /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number:          7F
Signing time:             Wed 23 Sep 2026 07:33:15 +0000
Manifest this update:     Wed 23 Sep 2026 07:33:14 +0000
Manifest next update:     Wed 30 Sep 2026 07:33:14 +0000
Files and hashes:         1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: sYYbIJ4J5Vxrq3fBftSaOln98uA7qOKn7zw52g/aCWc=)
                          2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: d6S2IX4DR/rLbqbsWRy4XlJUKZ6LC3VVHK1EodAZfjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
        Validity
            Not Before: Sep 23 07:33:14 2026 GMT
            Not After : Sep 30 07:33:14 2026 GMT
        Subject: CN=6ab380bb-40c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:d5:74:34:cf:84:cd:a6:ad:17:6e:2a:92:
                    5d:56:1f:8e:25:b3:63:87:9b:6d:36:24:8f:9a:e6:
                    58:b9:21:85:b3:26:bd:99:75:57:f7:89:fa:59:26:
                    42:34:eb:45:91:b5:0d:14:7e:92:66:4a:76:c1:bd:
                    6e:6d:a1:fb:7f:15:c4:8f:6c:a9:8c:90:a2:4a:57:
                    fc:ba:68:23:02:9f:9e:9a:b9:d7:f8:9f:ca:33:62:
                    ac:de:6d:37:3e:ce:f5:67:4d:ae:a1:69:cc:b4:47:
                    01:70:92:99:4b:de:fe:7d:84:1d:4c:0e:2a:df:87:
                    3a:7a:49:c7:93:5f:46:9d:b7:a4:14:49:b3:dd:9e:
                    9f:99:b3:ef:24:6b:ef:5a:41:d4:5d:fd:8f:f5:55:
                    5b:1e:f0:9c:b8:87:3d:a3:09:ef:df:0b:e4:40:08:
                    df:2c:a3:27:a0:ad:07:ee:b5:6e:23:dd:89:10:82:
                    8a:55:7c:c8:69:74:40:c7:0f:5a:0c:32:e3:4e:90:
                    d5:3a:79:ee:8f:d8:5e:3f:c6:55:61:f7:ce:7c:88:
                    e0:97:90:08:d0:ee:35:f9:b4:d7:81:7f:de:9a:b5:
                    1a:84:58:d7:34:84:8e:7b:e6:af:54:70:b1:e4:1d:
                    b9:08:9f:21:46:f3:96:a8:2d:e6:3a:61:17:78:65:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:C0:77:ED:B5:91:CE:BC:87:D2:61:C7:FE:11:85:0B:69:38:99
            X509v3 Authority Key Identifier:
                keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:37:ca:33:93:7b:a3:4b:9b:64:c7:f9:37:1e:aa:20:e0:89:
         03:2b:f3:fb:51:2a:74:67:df:43:84:d2:a2:c5:01:bd:2c:1b:
         86:8f:a9:96:41:e1:fd:4e:9d:9c:63:e8:c8:9b:43:83:12:20:
         c0:d0:e3:60:9a:99:3f:91:32:82:0e:5b:ef:86:ec:5a:a4:11:
         0a:a4:92:ac:f0:4d:a5:ee:dd:aa:32:92:c7:55:d5:df:26:4e:
         3a:1b:97:25:21:0d:33:b6:e3:0e:8f:78:10:00:1f:7e:c1:87:
         3e:d3:26:75:6f:77:f5:5e:e6:87:29:13:00:e6:37:c9:e0:2e:
         be:3e:67:9c:0b:36:0a:6d:b1:c1:0d:0c:c4:9f:25:5d:8b:c4:
         89:05:54:40:28:55:31:f0:50:ea:56:8c:36:7a:52:b9:4f:8a:
         96:d1:71:19:6b:2f:43:80:2e:8e:f7:7a:8b:8c:44:7b:2b:65:
         0c:60:cb:37:90:9c:ab:81:6a:9e:94:ad:9c:c6:e8:6e:69:de:
         24:01:80:a8:db:8b:bb:00:83:ff:92:f3:d2:ec:db:5a:64:96:
         be:e8:24:b6:c7:f3:af:37:d3:e9:ef:4d:a5:28:7a:44:08:0f:
         76:33:d8:f2:71:3f:a6:49:3f:50:a6:e2:c6:2e:24:f9:d5:3d:
         56:4b:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:37:37 2026 by rpki-client