Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
File:                     JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json)
Hash identifier:          FlAGfQ2c9erIpdiOuUqxWsAEpfZPhb4QNBSVWNoYc4M=
Subject key identifier:   BB:1D:33:66:88:9D:66:6B:30:01:CE:A6:35:40:6D:64:6E:2A:5C:B5
Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
Certificate issuer:       /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
Manifest number:          0132
Signing time:             Mon 21 Sep 2026 05:41:35 +0000
Manifest this update:     Mon 21 Sep 2026 05:41:35 +0000
Manifest next update:     Mon 28 Sep 2026 05:41:35 +0000
Files and hashes:         1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: 8DlKj7jcABGcvsMWa2FQmbDoSe4UBWoC95UUpw9ma3w=)
                          2: 7F639A182CB011F08B722116C4F9AE02.roa (hash: 7YbtNnJCqqYGkWXbAOraecUqD8bW4P8HUGL4Pnjq7RY=)
                          3: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: hglWubZXzfjiLQUkYHVzTqN3YyCMG1Pzr8h/6XyrD8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
        Validity
            Not Before: Sep 21 05:41:35 2026 GMT
            Not After : Sep 28 05:41:35 2026 GMT
        Subject: CN=6ab0c38f-3fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:cc:a8:55:33:07:2a:18:ac:40:cc:14:18:
                    1e:dd:69:e9:44:38:23:00:e9:0a:e0:bb:b2:45:33:
                    af:1e:91:f4:e2:4c:aa:bc:8d:a6:ce:c6:4e:36:1d:
                    cf:55:56:61:51:3c:03:e8:90:ba:20:b4:d7:04:65:
                    88:be:37:db:7b:d2:78:82:4e:5c:99:09:d6:a9:5c:
                    98:7e:06:67:13:58:fe:2c:de:2d:82:a2:d1:5d:5b:
                    f8:ef:cb:e1:ff:c5:80:63:a6:ff:af:01:27:72:3e:
                    33:2e:42:94:e0:ec:e2:f7:85:d9:f0:cd:c1:de:7b:
                    de:5f:7b:76:fd:25:1b:77:64:07:32:92:bc:37:2f:
                    d7:a7:d2:c4:e4:2f:aa:83:4e:72:75:93:66:b3:f9:
                    f7:3e:85:df:61:72:0b:a8:e6:da:43:03:5c:d9:2c:
                    8f:34:64:c7:0e:97:9e:ae:81:e7:be:ab:66:13:39:
                    12:a0:95:4e:2e:69:d5:32:56:e3:fb:45:0b:53:2b:
                    82:7b:c4:f2:e5:fb:fb:7e:f8:74:78:8c:2b:ef:75:
                    62:0f:21:92:53:0c:32:04:0b:62:9c:ec:67:df:84:
                    fc:f3:4c:b7:2e:38:c3:2f:2d:b1:17:6a:99:01:57:
                    a4:a1:c2:cc:f0:36:e5:48:0a:b6:72:50:f1:e3:73:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1D:33:66:88:9D:66:6B:30:01:CE:A6:35:40:6D:64:6E:2A:5C:B5
            X509v3 Authority Key Identifier:
                keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d4:dc:3c:4f:90:d2:e8:ca:2f:c8:90:b0:15:11:ab:bc:e4:
         86:e2:87:11:28:2e:54:19:cb:5b:59:fa:0b:99:7e:5e:23:35:
         53:82:4d:cc:e0:e2:c0:a2:9f:3b:64:69:28:81:9a:99:bf:7c:
         af:ed:a1:66:35:67:30:ad:86:e4:1e:aa:a6:02:1b:6e:41:f5:
         b1:0d:31:ae:69:0a:10:bd:56:19:80:72:b4:6f:b5:15:10:6e:
         c0:4d:6a:4c:9e:46:25:15:3b:e6:9b:5e:1e:45:3e:78:e2:62:
         44:a2:b9:fa:05:91:1c:3d:ff:a6:49:8e:db:e8:8d:cb:7a:75:
         b9:e4:77:4c:16:39:08:ec:b3:c4:99:78:2a:d5:7e:09:12:d7:
         96:10:07:6d:34:53:f8:82:80:b5:8e:f0:aa:84:8e:f8:38:58:
         0d:7e:9f:cd:97:a2:d8:5c:5a:b0:c5:dd:2e:51:47:28:b3:1a:
         08:f1:ab:32:ee:8b:9a:73:a3:ce:fd:61:eb:0e:42:dc:ca:e0:
         64:e5:de:09:7c:6e:77:3a:43:c1:89:14:2b:a4:b1:c2:90:99:
         34:c3:18:6c:44:b0:b8:3d:16:21:f1:74:0d:e8:c0:f1:91:23:
         ab:4e:4f:b9:5c:ea:41:d8:06:12:22:f6:c8:ef:0d:ef:d8:78:
         58:58:8d:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU5NkUxMTAvBgNVBAUTKDI0MjlBM0VFNTA4OEYzRDQ1MzcyQThFM0IzNjgzNEM3
NUVBRTZEMjkwHhcNMjYwOTIxMDU0MTM1WhcNMjYwOTI4MDU0MTM1WjAYMRYwFAYD
VQQDEw02YWIwYzM4Zi0zZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8rMqFUzByoYrEDMFBge3WnpRDgjAOkK4LuyRTOvHpH04kyqvI2mzsZONh3P
VVZhUTwD6JC6ILTXBGWIvjfbe9J4gk5cmQnWqVyYfgZnE1j+LN4tgqLRXVv478vh
/8WAY6b/rwEncj4zLkKU4Ozi94XZ8M3B3nveX3t2/SUbd2QHMpK8Ny/Xp9LE5C+q
g05ydZNms/n3PoXfYXILqObaQwNc2SyPNGTHDpeeroHnvqtmEzkSoJVOLmnVMlbj
+0ULUyuCe8Ty5fv7fvh0eIwr73ViDyGSUwwyBAtinOxn34T880y3LjjDLy2xF2qZ
AVekocLM8DblSAq2clDx43N0sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsdM2aI
nWZrMAHOpjVAbWRuKly1MB8GA1UdIwQYMBaAFCQpo+5QiPPUU3Ko47NoNMderm0p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTk2RS8yM0QyRjE2RUVD
MjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5UlRjcWpqczJnMHgxNnVi
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJTay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTk2RS8yM0QyRjE2RUVDMjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5
UlRjcWpqczJnMHgxNnViU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT9TcPE+Q0ujKL8iQsBURq7zkhuKHESguVBnLW1n6C5l+XiM1U4JNzODiwKKf
O2RpKIGamb98r+2hZjVnMK2G5B6qpgIbbkH1sQ0xrmkKEL1WGYBytG+1FRBuwE1q
TJ5GJRU75pteHkU+eOJiRKK5+gWRHD3/pkmO2+iNy3p1ueR3TBY5COyzxJl4KtV+
CRLXlhAHbTRT+IKAtY7wqoSO+DhYDX6fzZei2FxasMXdLlFHKLMaCPGrMu6LmnOj
zv1h6w5C3MrgZOXeCXxudzpDwYkUK6SxwpCZNMMYbESwuD0WIfF0DejA8ZEjq05P
uVzqQdgGEiL2yO8N79h4WFiNFQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:23:16 2026 by rpki-client