Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft
File:                     JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json)
Hash identifier:          tUYEUEb5RJza5BdTBGe33bef5tYdlUVp8tu9WpPZ36E=
Subject key identifier:   47:01:69:60:6E:31:0F:02:BF:74:BC:C5:57:85:1A:D2:E2:84:8D:8C
Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4
Certificate issuer:       /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4
Certificate serial:       17E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft
Manifest number:          17D6
Signing time:             Fri 04 Sep 2026 16:31:57 +0000
Manifest this update:     Fri 04 Sep 2026 16:31:57 +0000
Manifest next update:     Fri 11 Sep 2026 16:31:57 +0000
Files and hashes:         1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: KTXQ9Y1bRMHdzZiKV7NsALX9tHO/1052NrRPyP9IOQw=)
                          2: C96DCB80D00A11F0BC76FE15C4F9AE02.roa (hash: 6pZjTPqP9wPmYOVwUXBa4Swz4CDpYv/0dyLoKjy0QaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl
                          rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6120 (0x17e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4
        Validity
            Not Before: Sep  4 16:31:57 2026 GMT
            Not After : Sep 11 16:31:57 2026 GMT
        Subject: CN=6a9af27d-ffa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:c8:d8:21:25:f3:a8:e0:2a:5c:ab:c4:8d:
                    32:7f:43:01:f1:bc:d5:c5:d8:25:62:6b:3a:93:14:
                    21:31:ea:2e:ae:d9:ca:7b:86:af:24:8e:7a:80:45:
                    67:4a:94:2c:21:39:79:d3:a7:09:77:29:9b:69:30:
                    2c:94:ec:f8:8a:ae:4d:6f:d9:85:d6:f5:25:05:64:
                    e6:b0:26:73:fa:cb:83:42:2d:f3:10:0b:3e:8d:e9:
                    c6:ef:c2:35:41:93:52:b4:43:47:93:1b:9d:2e:1c:
                    48:af:3d:cb:db:d3:18:cf:e7:bf:37:77:47:a0:f4:
                    cf:8a:fd:22:02:4f:a1:8f:e9:69:2e:aa:a3:b4:e1:
                    41:83:2a:ca:2f:d7:ac:3c:b2:67:11:75:55:dc:4f:
                    56:ab:18:9b:5e:c7:16:c5:c0:10:b0:2d:8a:42:ba:
                    85:c5:00:4d:46:14:c6:d2:fb:72:2f:4e:bf:87:0a:
                    07:8e:73:21:0c:70:50:0d:b7:a4:c6:00:db:2d:10:
                    6e:a4:5b:bb:41:52:32:09:f2:c2:85:ee:1e:dc:f7:
                    1d:f9:c9:74:89:5b:be:39:2f:85:06:73:75:a0:08:
                    e9:a7:ee:bf:8e:07:38:b8:b3:15:92:df:03:45:6b:
                    e1:33:1e:2d:91:ad:8a:dd:e9:99:e1:51:8a:3e:70:
                    2b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:69:60:6E:31:0F:02:BF:74:BC:C5:57:85:1A:D2:E2:84:8D:8C
            X509v3 Authority Key Identifier:
                keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:98:2b:0d:24:19:73:f6:58:7d:ec:4f:ea:e1:9a:79:68:80:
         6f:2a:b1:30:7f:d8:67:1f:bb:d4:8a:df:1f:7d:60:17:a8:9f:
         d1:3a:4a:16:82:42:00:74:76:f7:6e:ce:da:51:e4:b6:00:1b:
         2b:bc:a0:dc:e8:41:4e:10:c3:1f:81:f1:94:53:20:d1:c3:e7:
         4b:d5:4e:ce:cb:5e:d0:cf:8f:f0:16:67:dd:21:37:84:ae:fd:
         73:44:01:5c:c1:1e:f9:29:ac:13:ae:df:fd:d7:e7:a7:f9:fd:
         5d:00:16:a6:c9:b3:c9:ba:2b:9d:d5:ed:32:35:40:22:29:0e:
         8f:03:1e:70:d8:5e:e4:df:1f:3f:f9:75:b5:bd:9f:39:55:bf:
         09:04:c7:d3:d2:5e:fa:db:5c:fb:77:89:48:54:ef:32:b7:79:
         36:d1:d7:8d:93:ea:21:ba:12:fc:4e:81:36:c7:0e:96:4c:4b:
         5d:a2:e1:91:f2:d3:22:6a:eb:01:8b:17:65:65:09:26:81:e3:
         85:95:dd:19:d0:a7:84:b0:86:17:33:1e:15:e6:f9:ad:37:90:
         62:8f:fa:a9:0c:1f:b1:91:77:20:5e:59:44:3d:7d:ee:61:95:
         8f:4b:8f:47:01:5d:1f:10:23:92:09:61:c3:3c:bb:2e:6e:b9:
         9f:1f:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:23:43 2026 by rpki-client