Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
File:                     JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json)
Hash identifier:          F01kgc9j73+x387puFDAapjwUsfHsRfjGQKlFFthoqc=
Subject key identifier:   1A:C3:A9:73:00:42:EA:3D:EE:1B:D4:0F:5C:D0:EF:16:08:F0:22:9A
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Certificate issuer:       /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial:       0308
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
Manifest number:          02F3
Signing time:             Tue 13 Oct 2026 01:26:39 +0000
Manifest this update:     Tue 13 Oct 2026 01:26:39 +0000
Manifest next update:     Tue 20 Oct 2026 01:26:39 +0000
Files and hashes:         1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: bjkWqwFt5GjqudvYLzC3oOQdM7h8pcQqR9CGptSccS0=)
                          2: 7C562342FB6111F0999DAF114B6F56BC.roa (hash: 4I/aBZekpVxiHK08zsqmF9hWHqatnQF4vOf7EgjVuzw=)
                          3: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8=)
                          4: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 01:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
        Validity
            Not Before: Oct 13 01:26:39 2026 GMT
            Not After : Oct 20 01:26:39 2026 GMT
        Subject: CN=6acd88cf-e718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:54:f9:78:41:96:1e:9f:1f:09:15:c2:2b:
                    56:9b:80:85:28:43:69:68:7b:57:68:dd:b6:9d:eb:
                    26:58:c7:af:eb:f4:e8:e3:2c:e5:e2:da:7e:26:7b:
                    d9:2b:1f:d4:5a:91:c4:7a:24:32:6d:b0:20:23:b2:
                    65:53:32:7d:cd:09:b0:1f:67:ef:fc:84:66:46:7d:
                    e2:f2:c0:f0:c6:1c:31:60:4a:9f:61:94:14:0c:f6:
                    83:5a:d0:c7:6b:a7:89:99:f9:f5:23:e8:13:eb:6e:
                    19:0f:0f:37:ff:4e:67:74:13:f9:a8:17:67:06:b1:
                    d4:e3:b6:c0:2e:b9:1f:37:4a:47:42:0b:c6:36:ca:
                    d1:5e:67:c1:9a:8e:42:e4:05:62:2e:d9:5d:5c:cd:
                    f5:ae:44:6c:6c:8c:2f:74:61:94:c6:7c:96:24:c5:
                    92:18:87:c6:19:c9:26:90:20:1e:60:4b:4f:bc:d9:
                    f9:7c:fa:0a:90:0d:28:16:30:d1:65:dd:51:98:59:
                    0b:68:3c:08:3c:31:90:c0:a9:19:66:dc:1a:a3:f5:
                    4c:de:79:aa:ad:b5:6a:68:7a:00:d2:07:7b:fd:a1:
                    c0:ae:8f:0a:8c:47:6c:a6:8f:b6:71:db:fa:02:bf:
                    cf:75:c5:fa:d3:92:f6:e7:7f:24:94:d5:6e:79:67:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C3:A9:73:00:42:EA:3D:EE:1B:D4:0F:5C:D0:EF:16:08:F0:22:9A
            X509v3 Authority Key Identifier:
                keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fd:5b:fa:7a:98:2e:b7:ff:4b:1c:4d:b4:24:ce:56:b8:55:
         a5:aa:d0:3a:77:6e:86:f4:32:dd:a4:69:a5:64:c0:15:f8:95:
         3b:49:1b:a2:4e:5f:2d:a9:c7:aa:7c:d0:2e:de:92:2c:44:7d:
         a9:ec:2c:f8:43:5e:ed:8f:cd:aa:13:65:d4:f5:0b:d6:fd:4c:
         b5:9c:f1:2e:7b:3a:c3:04:15:c0:e9:8e:ad:3e:1a:ed:f8:c6:
         f4:25:21:2c:4d:ca:21:b1:6d:59:3b:b2:52:2f:0a:1c:4b:55:
         63:b7:0d:c4:ad:67:a6:88:30:4a:95:21:6a:c1:a3:5e:da:b7:
         68:77:40:be:e9:ef:26:08:1e:52:28:b1:55:cb:50:54:63:c9:
         cf:b4:f6:cf:5c:25:33:e8:cc:21:a1:61:22:c7:7b:f3:fe:1d:
         3a:79:ed:45:2a:30:b4:6a:03:85:ff:4f:5c:34:ee:63:cf:d6:
         1f:84:b9:3c:40:2d:5d:0c:fc:b4:93:51:74:c6:86:23:ae:38:
         2f:25:df:31:d2:b9:0d:73:29:d7:5e:9f:b6:e4:39:27:15:ae:
         71:1f:1d:71:e7:89:ff:33:05:a9:ed:f7:8a:f1:55:a6:dc:f1:
         d6:93:66:10:0c:4d:bd:71:f6:a9:de:8e:fb:db:b1:5d:51:56:
         f8:f5:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:39:53 2026 by rpki-client