Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
File:                     mjx3F7MXcbj9SW70NsRcXAXxN0w.mft (raw, json)
Hash identifier:          NJpFZAr5ApKSxzFuQ01XR966lMWXzvyF5fai/1nJ+jg=
Subject key identifier:   4F:F2:9F:5A:68:52:A0:1A:04:6B:64:74:5E:98:76:29:D5:55:15:AA
Authority key identifier: 9A:3C:77:17:B3:17:71:B8:FD:49:6E:F4:36:C4:5C:5C:05:F1:37:4C
Certificate issuer:       /CN=A911AA05/serialNumber=9A3C7717B31771B8FD496EF436C45C5C05F1374C
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
Manifest number:          0120
Signing time:             Mon 05 Oct 2026 06:24:12 +0000
Manifest this update:     Mon 05 Oct 2026 06:24:11 +0000
Manifest next update:     Mon 12 Oct 2026 06:24:11 +0000
Files and hashes:         1: mjx3F7MXcbj9SW70NsRcXAXxN0w.crl (hash: t/NwnZy3+3lhDcyIVWbA6SN7wmdnYajSmfXlsfOBgLo=)
                          2: 5047DAFCACDC11F1AC905F28B2EE528E.roa (hash: FS54yN/i/7kq4bVcWcoEs3xvL36ntbwzBWFR7NsFhMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.crl
                          rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AA05, serialNumber=9A3C7717B31771B8FD496EF436C45C5C05F1374C
        Validity
            Not Before: Oct  5 06:24:11 2026 GMT
            Not After : Oct 12 06:24:11 2026 GMT
        Subject: CN=6ac3428c-74ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:5c:13:eb:0a:a7:80:12:5e:97:45:9f:fc:
                    d3:c6:29:ef:16:38:44:cf:ea:49:b1:53:cd:cb:b2:
                    5c:5e:48:ae:fe:39:62:bc:91:86:a5:f9:b4:c2:53:
                    9f:7b:94:e3:3f:d0:f0:27:a0:7e:ff:ad:3f:35:80:
                    5f:99:a2:1d:87:87:d7:36:44:c0:57:82:b3:73:b0:
                    b6:5e:5c:32:c9:b3:bf:81:16:d5:dd:af:f8:c6:88:
                    38:96:a6:4c:60:f0:71:11:07:1f:8d:7d:f9:24:7d:
                    84:2e:c5:d5:1f:86:ad:0c:97:04:0d:a8:6a:18:61:
                    30:24:4e:f3:c8:69:7c:ce:b8:0c:7b:9e:3f:c2:03:
                    ad:8f:fc:28:c6:13:f4:7b:3c:bb:33:c6:7a:b7:69:
                    5b:d2:97:47:84:2d:4c:8b:42:70:ee:c3:53:97:c8:
                    a7:64:5b:27:67:62:94:a0:56:e2:0e:bf:a6:12:e2:
                    1e:4e:8f:03:3f:19:85:0b:77:de:ee:c9:93:18:ab:
                    f5:0a:9d:b7:c8:eb:58:2a:2b:b4:08:91:7c:69:a1:
                    de:a0:44:df:ce:b5:3a:29:da:c0:e8:8f:f2:f6:92:
                    6a:d5:9c:a8:80:76:cd:28:ff:45:55:ff:8c:74:c3:
                    36:27:f5:8a:fe:df:82:ab:dd:68:4f:14:fb:6a:c3:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F2:9F:5A:68:52:A0:1A:04:6B:64:74:5E:98:76:29:D5:55:15:AA
            X509v3 Authority Key Identifier:
                keyid:9A:3C:77:17:B3:17:71:B8:FD:49:6E:F4:36:C4:5C:5C:05:F1:37:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjx3F7MXcbj9SW70NsRcXAXxN0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/mjx3F7MXcbj9SW70NsRcXAXxN0w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4d:2a:07:75:04:77:3d:61:c0:b5:f3:b1:7c:29:ce:a8:73:
         2f:05:33:cd:8d:9e:a1:bf:08:9c:0e:eb:6a:bd:e8:24:8e:c3:
         23:6b:9d:25:98:23:4e:e3:3d:79:8c:0a:03:5f:e1:e6:c0:6c:
         c6:9a:ed:61:5b:e9:06:1d:d0:15:1b:1c:26:ea:72:f2:4f:f8:
         ab:59:25:7e:c9:d1:25:3d:8f:7f:50:7c:ec:25:59:45:ec:e3:
         9c:7c:8f:f0:dc:4f:4d:8e:eb:69:8d:7e:76:cc:5e:32:54:6d:
         43:13:25:6a:57:86:b8:ad:86:48:42:ed:2d:f0:6c:aa:0f:bc:
         24:0f:65:cd:75:85:07:5c:71:46:1a:d1:a1:84:2f:fa:35:ab:
         37:0d:b2:b1:43:a8:97:98:44:e1:95:fd:a1:37:8e:89:22:20:
         36:30:eb:d5:52:d0:dd:57:60:e2:97:a7:3f:fe:56:aa:50:dc:
         e6:63:28:aa:fd:ad:ca:73:d9:49:1b:03:e5:a2:79:22:c0:78:
         e6:ed:a6:89:97:29:28:47:27:29:28:e0:e0:41:1c:aa:2d:24:
         d0:cc:c8:f8:4b:57:23:d9:d8:b9:26:99:33:76:ce:62:fc:06:
         2a:a7:4b:c9:c4:51:1e:3c:06:6f:51:1f:71:c3:ff:0c:e5:5d:
         3c:67:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:26 2026 by rpki-client