Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
File:                     JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json)
Hash identifier:          aHv4AFWdiS959AIAWs3vJx+s5vIbub+SLtTJg0B6z94=
Subject key identifier:   41:3E:49:AA:81:5B:74:38:ED:0B:B2:57:F8:D6:B6:8E:D0:2E:0F:96
Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
Certificate issuer:       /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Certificate serial:       047B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
Manifest number:          0472
Signing time:             Tue 03 Nov 2026 00:19:21 +0000
Manifest this update:     Tue 03 Nov 2026 00:19:21 +0000
Manifest next update:     Tue 10 Nov 2026 00:19:21 +0000
Files and hashes:         1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: OmQHUaZ7Rnp2iH3jXm3wxZ85TlHF6xovc+9NQVqKmSg=)
                          2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: Vn5R0Fkkp6JPp7t+dL5VQGyHwQj8Ys2Tdwt2VL1O/Ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl
                          rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 00:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
        Validity
            Not Before: Nov  3 00:19:21 2026 GMT
            Not After : Nov 10 00:19:21 2026 GMT
        Subject: CN=6ae92889-f1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:0b:29:96:79:a9:14:11:d6:42:7e:a1:8e:
                    5b:aa:e2:d4:8b:94:9d:04:be:46:19:fe:f4:ab:10:
                    72:52:2c:5c:69:2b:d4:64:c5:69:9d:20:28:da:86:
                    ea:ee:41:0d:f6:f6:78:a7:23:23:62:21:aa:4a:9e:
                    6a:dc:61:d8:ae:54:1e:ec:a9:9a:90:32:9e:46:23:
                    cb:fb:f2:00:01:a9:13:3b:88:78:ad:2a:0e:7f:6f:
                    36:ab:33:88:ec:fb:06:fe:b6:10:54:24:bd:12:95:
                    f7:38:41:3e:1f:6a:d4:21:f0:27:ba:74:46:08:1c:
                    7b:0a:bd:e3:0b:6e:96:0b:49:38:cc:ff:f2:c9:d6:
                    11:bb:50:c3:dd:4c:ff:80:00:3b:03:4d:c5:e6:b3:
                    43:b0:c7:97:6d:98:b0:51:77:b3:2e:06:a4:fe:c5:
                    26:af:bd:fc:99:b0:2c:2e:ee:99:7d:c1:e0:74:ef:
                    5c:bf:5c:80:a6:1d:83:cd:45:16:ea:21:df:6f:23:
                    b9:62:65:c6:04:75:67:1c:ff:28:3c:d8:f6:ec:89:
                    2f:05:71:0d:50:ab:c7:35:62:0c:65:6f:23:3e:7c:
                    df:7c:71:20:68:44:a5:a8:8d:05:25:a1:ce:99:17:
                    2a:5a:96:f9:8c:9f:8c:a3:b7:4f:be:af:34:01:91:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:49:AA:81:5B:74:38:ED:0B:B2:57:F8:D6:B6:8E:D0:2E:0F:96
            X509v3 Authority Key Identifier:
                keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:29:86:7e:f8:09:27:63:ad:aa:4d:74:a2:7d:94:93:98:be:
         2b:37:52:ce:f3:00:aa:c8:16:5a:27:68:4d:29:49:94:6d:b7:
         ac:9f:da:63:18:54:d7:8c:db:38:c5:90:ee:2b:bd:d9:17:9c:
         1b:52:dd:d3:84:1b:c6:5e:0a:54:03:3a:36:b4:ae:c6:a4:11:
         90:8b:c3:40:7e:18:0d:97:28:fa:8d:0d:05:64:9c:58:f4:c7:
         4f:3f:95:16:f4:b4:80:ea:b0:7b:1f:b3:ce:01:38:92:6d:40:
         90:1b:f9:ef:e5:37:4a:cf:b5:66:6d:85:af:12:e9:db:7c:30:
         6d:3d:13:ea:5c:16:35:c9:d5:4c:72:c7:cf:31:5a:19:a5:e1:
         04:48:61:40:79:29:5c:64:f2:0d:88:e5:55:06:27:e2:13:90:
         ea:68:99:5b:08:31:46:4e:af:3d:01:68:da:87:ef:0a:4c:ca:
         6e:9b:5e:79:e5:7b:1f:e2:5f:da:a7:14:3a:8f:a9:23:bd:67:
         53:0a:84:4f:be:e6:b4:75:db:a0:4d:8e:d0:de:2e:5a:5c:d4:
         9f:5d:b6:d1:58:8f:e5:c9:45:02:68:0b:c6:eb:d4:e7:db:e1:
         1e:bb:61:d5:21:4a:3e:8e:34:a8:df:eb:27:ba:0e:20:ba:b9:
         ca:e9:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:40:25 2026 by rpki-client