Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File:                     JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier:          LSGY6RCqTEPvVsiW7WQQPIjz39vsoZyBX//NFqYxvZk=
Subject key identifier:   75:C3:88:A3:A3:D7:F0:1A:31:8B:51:08:6F:4F:02:FE:89:A4:DF:BF
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer:       /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number:          0143
Signing time:             Mon 05 Oct 2026 05:46:36 +0000
Manifest this update:     Mon 05 Oct 2026 05:46:35 +0000
Manifest next update:     Mon 12 Oct 2026 05:46:35 +0000
Files and hashes:         1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: Jcd/khpWbOJHTtAJ/8IuKP78a60mt9C4MOYk7MydBhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
        Validity
            Not Before: Oct  5 05:46:35 2026 GMT
            Not After : Oct 12 05:46:35 2026 GMT
        Subject: CN=6ac339bb-5141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:2a:bd:6c:99:0f:85:fb:f5:c9:4a:3f:ea:
                    27:e2:24:82:1e:77:46:7e:b4:47:6a:69:ee:ea:36:
                    70:09:03:45:37:9a:9f:c9:f1:77:8a:5f:5e:cc:65:
                    47:de:d8:fc:03:ae:10:f7:9a:de:44:0d:a3:a8:a6:
                    02:9e:bc:0d:0b:1d:bf:51:35:ed:35:7a:da:2a:35:
                    ec:99:fc:f8:26:bf:91:e3:1f:bf:04:ed:94:92:94:
                    7b:69:c6:43:47:93:a3:ab:36:97:87:1f:c2:ba:87:
                    56:af:b3:ac:cf:d6:22:4f:18:f3:00:fe:0f:b0:d1:
                    c7:38:d9:f6:69:bf:c8:a1:9b:70:e9:53:6b:cb:bf:
                    3d:16:bd:2a:9e:61:ba:42:10:6e:89:30:9d:ef:f4:
                    f3:3b:a0:5b:d6:0e:8c:c0:69:9c:32:7a:c6:16:7b:
                    e2:0f:fe:dd:26:c6:26:8f:ad:d0:9f:d7:cc:f1:a6:
                    ef:12:d6:5a:65:d4:6d:22:5b:b9:40:b9:6f:1c:55:
                    44:21:4c:6a:50:22:c4:f4:a7:2e:45:e0:ec:d6:83:
                    99:a2:8d:b3:09:5c:d6:ed:cf:db:ec:d8:e3:22:63:
                    87:96:70:bf:c4:18:a8:8b:3f:0a:5e:7d:73:d5:52:
                    96:e7:47:b4:56:6d:aa:70:f5:db:e9:6f:77:ff:03:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C3:88:A3:A3:D7:F0:1A:31:8B:51:08:6F:4F:02:FE:89:A4:DF:BF
            X509v3 Authority Key Identifier:
                keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:85:f1:10:31:d4:a4:e3:54:e3:7a:99:8b:35:56:0c:55:ee:
         b7:ee:77:62:57:5d:87:89:62:56:b5:6c:95:76:3c:fb:95:54:
         67:8d:19:7a:e6:bd:c1:dd:25:09:5a:86:36:f4:c3:ea:5e:e7:
         eb:08:52:b5:f9:66:79:95:e3:23:41:bd:2f:0c:03:09:75:05:
         72:a9:2f:d0:e6:7b:64:29:b8:c5:42:b2:84:68:42:ff:36:25:
         8b:cb:9b:94:1f:cc:fb:04:e8:1f:0b:c5:5d:88:01:06:d9:a4:
         a6:02:ce:29:b6:e5:ff:ac:0b:75:91:fc:4b:c5:9d:d0:3b:5b:
         fd:3d:bc:a3:68:11:de:54:50:48:c8:b7:e5:70:36:ac:0d:ae:
         db:40:f8:2d:05:65:10:9e:43:66:65:14:7d:63:e6:20:85:55:
         44:2b:31:03:7c:99:59:fc:71:4e:c1:97:d3:21:d5:16:cd:05:
         0e:17:c4:3a:d5:d0:ae:96:07:5d:19:fd:12:ec:f9:1b:98:23:
         51:a7:6c:22:b6:d3:8f:99:2e:f0:9a:34:1c:44:a2:3d:ed:13:
         8f:da:1d:bf:13:90:3c:38:17:f8:25:15:26:53:ea:7d:47:6c:
         71:13:93:18:a2:b8:f0:66:02:04:0c:49:6c:94:d0:1f:7a:a0:
         d2:e7:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:06 2026 by rpki-client