Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
File:                     jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json)
Hash identifier:          93e9RwsYPH51Uw9X3eULyszgFRvisLOH4OXfl7QzO7k=
Subject key identifier:   DF:70:95:33:BD:17:EC:FD:A9:B7:FB:8B:79:12:62:70:2E:C0:76:7B
Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B
Certificate issuer:       /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B
Certificate serial:       0C31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
Manifest number:          0C15
Signing time:             Sun 18 Oct 2026 19:00:24 +0000
Manifest this update:     Sun 18 Oct 2026 19:00:23 +0000
Manifest next update:     Sun 25 Oct 2026 19:00:23 +0000
Files and hashes:         1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: 9cP0qxSp3aKyRLtrpPM7mF5vBr8EZkAgCwS2Sst2O1I=)
                          2: 2F939E3C750911F19B5A4D0A6DA30FBC.roa (hash: HnLiuGCrAI+NDuwEK/UZpwY6cCsnnWIESYz6GJ1T9Gk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl
                          rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B
        Validity
            Not Before: Oct 18 19:00:23 2026 GMT
            Not After : Oct 25 19:00:23 2026 GMT
        Subject: CN=6ad51748-e673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ab:84:07:d4:ca:e8:1c:99:d7:b5:40:61:5b:
                    37:d0:2a:fb:34:e3:ac:46:68:fc:2e:83:b4:34:1d:
                    21:31:2e:94:17:94:46:c6:31:a0:6e:4f:fe:b5:54:
                    09:39:93:40:ba:c6:ce:89:e5:56:d0:bc:6b:de:f9:
                    b6:04:fc:e3:fc:1c:50:0b:72:92:44:c3:71:cf:fd:
                    66:28:42:e7:2f:94:54:f5:e6:28:f8:70:a0:93:85:
                    2f:52:60:66:33:cf:0d:41:60:dc:04:8f:8e:81:6e:
                    7d:d5:cc:57:96:34:ee:15:20:9d:f7:d6:91:a6:8c:
                    c5:8c:8d:10:e4:2c:7a:97:ed:03:00:d3:2a:e0:90:
                    18:0f:a3:ca:2a:4b:14:db:d7:14:ba:da:e3:5e:83:
                    cc:c3:d5:48:a8:74:b6:87:68:2c:3e:f2:53:ae:3b:
                    52:08:89:43:62:23:c2:f5:61:b7:fc:be:21:50:8d:
                    1c:d0:32:cc:9f:ed:86:3d:ed:cc:57:d1:ac:ef:73:
                    3c:0e:16:2a:36:1b:69:18:69:55:6d:15:43:c5:c2:
                    ad:b7:bd:5e:88:0e:86:9d:18:9d:e0:d4:f3:23:da:
                    ac:e8:fe:6a:46:18:fc:85:be:1a:e8:ba:67:82:c8:
                    84:1e:51:71:9e:cb:1c:04:8c:5a:bd:bd:54:4a:7f:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:70:95:33:BD:17:EC:FD:A9:B7:FB:8B:79:12:62:70:2E:C0:76:7B
            X509v3 Authority Key Identifier:
                keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:6e:57:a9:e1:87:52:19:34:1d:96:61:d7:2e:2e:03:a7:
         52:29:1d:96:37:5e:b1:09:1e:2d:fd:b7:c0:58:33:f6:b2:9c:
         0c:8d:50:29:12:99:0d:bd:79:4e:b1:fa:cb:70:8a:fe:82:ea:
         0a:52:dc:65:df:23:56:4f:4f:35:99:44:30:8c:e8:ed:e3:2d:
         1a:23:77:c1:49:e9:f8:cd:20:24:0b:6e:03:92:e6:75:4d:6c:
         dc:ec:fc:9a:a0:49:bb:05:37:a1:45:57:56:af:cb:44:09:1a:
         f6:32:6f:1f:73:ff:e6:d4:57:30:aa:8b:3b:ca:06:19:99:fd:
         7a:2e:4e:99:fe:7f:db:1f:a6:e3:21:58:f9:c2:6f:7a:44:9b:
         13:d0:9c:8a:d8:f3:24:45:39:de:f7:e4:9e:76:c1:24:a7:17:
         4b:9c:0f:4e:b7:3b:27:0b:33:e4:c3:76:e6:96:ab:be:b0:5e:
         96:51:1d:27:30:ca:dc:ed:c8:0b:5a:26:83:8a:a3:ab:a0:44:
         f6:41:86:03:95:cd:ae:80:8e:0a:8f:33:3f:22:2f:f5:e7:64:
         b5:49:e0:21:e9:0a:17:41:24:f0:0d:31:b6:87:7d:85:ce:75:
         3f:32:7e:d0:49:fd:5b:80:21:77:e0:f8:dc:4a:1e:ba:1e:6b:
         80:a6:44:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF
RTAwNjI1NEIwHhcNMjYxMDE4MTkwMDIzWhcNMjYxMDI1MTkwMDIzWjAYMRYwFAYD
VQQDEw02YWQ1MTc0OC1lNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6KuEB9TK6ByZ17VAYVs30Cr7NOOsRmj8LoO0NB0hMS6UF5RGxjGgbk/+tVQJ
OZNAusbOieVW0Lxr3vm2BPzj/BxQC3KSRMNxz/1mKELnL5RU9eYo+HCgk4UvUmBm
M88NQWDcBI+OgW591cxXljTuFSCd99aRpozFjI0Q5Cx6l+0DANMq4JAYD6PKKksU
29cUutrjXoPMw9VIqHS2h2gsPvJTrjtSCIlDYiPC9WG3/L4hUI0c0DLMn+2GPe3M
V9Gs73M8DhYqNhtpGGlVbRVDxcKtt71eiA6GnRid4NTzI9qs6P5qRhj8hb4a6Lpn
gsiEHlFxnsscBIxavb1USn9hnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9wlTO9
F+z9qbf7i3kSYnAuwHZ7MB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0
ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi
Q1VqN0tWOE1wUV91QUdKVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgY5uV6nhh1IZNB2WYdcuLgOnUikdljdesQkeLf23wFgz9rKcDI1QKRKZDb15
TrH6y3CK/oLqClLcZd8jVk9PNZlEMIzo7eMtGiN3wUnp+M0gJAtuA5LmdU1s3Oz8
mqBJuwU3oUVXVq/LRAka9jJvH3P/5tRXMKqLO8oGGZn9ei5Omf5/2x+m4yFY+cJv
ekSbE9CcitjzJEU53vfknnbBJKcXS5wPTrc7Jwsz5MN25parvrBellEdJzDK3O3I
C1omg4qjq6BE9kGGA5XNroCOCo8zPyIv9edktUngIekKF0Ek8A0xtod9hc51PzJ+
0En9W4Ahd+D43Eoeuh5rgKZEDg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:43:50 2026 by rpki-client