Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File:                     mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier:          13xbIHp5NjqxJFUJEhIpLgkOjoLMsmXmq8B35evkTas=
Subject key identifier:   E6:CA:2C:A8:FB:A9:12:E7:59:88:54:6E:42:EC:19:6F:1B:A2:F3:B9
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number:          0114
Signing time:             Wed 21 Oct 2026 07:42:45 +0000
Manifest this update:     Wed 21 Oct 2026 07:42:44 +0000
Manifest next update:     Wed 28 Oct 2026 07:42:44 +0000
Files and hashes:         1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: I0lwZV1THcGy3QU6vN8bwSzpETcfS7TIBB7AWYyzCY8=)
                          2: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (hash: AgB/Lpuse8T/z5cV67IzFShDTNVxyKAZ8KwUvRhawFQ=)
                          3: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: S9XUSJnxKvgsBDvTpONrUcHMGtxkSO4X3tK4EZVr99k=)
                          4: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: d71K3UhmJpGSIPnHwtXjuIVmSy3U1s/D91e+1fG5beE=)
                          5: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: k/R5dEj2eRfr7v4Cwra7e+lRrjtz7qmR7/pXUFo+/fk=)
                          6: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: 3N14qaLKIE8BN0vWJd2KtmivGDsUthfcKYgKyJWVe3U=)
                          7: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: tyQ+cSqsH2Qv0ddD7XoDmKPDoTkmyW/CRBZ+upSwUfo=)
                          8: 86DAE3A04A8C11F188553DBDAC833773.roa (hash: /cmAtIFJsaYzPWu1xv/Moo/JrJ9wB/SowewT12UuOCc=)
                          9: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: DHpdbRF2Zso6P1hxGHzUsRdlrbKQ33Y/CNHuuhJjb5g=)
                          10: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: /+8j5V7Q4inRuiyHFTWZNWPR7MOmulWdNP3/6QLql64=)
                          11: 5451EB2EB00111F1814C468CA8EE528E.roa (hash: g0sZlR+Tugyl8w9T0bWQ9BfweqjnWE4JTngq+dx3Sow=)
                          12: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: hVwh2ep8Iw7o7hX3MNdhNDewDGbex1WLUmhHf+4i9PI=)
                          13: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: sY76HWNe2DtCJtYS74CJx7prfOKVaNPpOF+PUbbT4H0=)
                          14: A87058D8445111F196638493CB833773.roa (hash: hjmeDeK8OqpXBY0QHMz/cAiPa+eSBTe6PN1y5++7MO8=)
                          15: 0CAE2A9E71F411F1A5B2C1D970A30FBC.roa (hash: j2o7HFeQBvDDdrHwgxtNfcrR9qiEC6LQMHtTe952lYc=)
                          16: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: BXcg8YArXJ5CmD6evpZM4dq8jMTCCVwQHO6BvkW3b7g=)
                          17: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: 0VVItxzYCnLY7VVLaBWnlI0vZxeP2nLbz57Thl0Luhg=)
                          18: B2815168C92411F0B6E88126C4F9AE02.roa (hash: CKGad+jxEPQI1Q563YDVR4xdQQ2X4PcTAVEPopEqkPg=)
                          19: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: C7uwuCI7TqrSFDaQH8Zzgy3OnejNXfnU7UwlS3rMRx4=)
                          20: 9440915CC15B11F1BA64C0B55511F970.roa (hash: Vh8Mp/8VykYpC0m6IyWHli9CPvWDBpb/b2lkNumHvm4=)
                          21: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: +Aqpgsv63vqmtQkR3ggdxV7iptUt9Fzgpnq420IOOtc=)
                          22: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: 18KHmFviCpW+1MpSyrjZy2QFKZiIGjy/6kV7DRcX0Y8=)
                          23: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: 5dwmeSZ0SRVIGYAiO2cL5WhMdIRKKwW4wqbG2GaMUhM=)
                          24: D0295F98B99311F1BA708A566F11F970.roa (hash: LVsIBNxMrTdFUP1Gu+lgBHWUOjv+fMxb0WuoxXD4U8o=)
                          25: B4B21A80C92411F099228126C4F9AE02.roa (hash: rjpeXMm4lHb5Ck0Ms0tdS2iF+f13HUBBUzVVJWV4PPM=)
                          26: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: yEb+i+mak4WjK+zJpb4ckWnaPd4JzdPaxKZm8fn0XYU=)
                          27: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (hash: ZW6jL59jikFz0FLaafnNnq4L3V9q7AF9K/n1i2MST+s=)
                          28: 1C2DE6A6D4A311F08D323E54C4F9AE02.roa (hash: tfqU0yp7k06G8a+YLVOyxW/4efWaKePEWJ7Jmic77aU=)
                          29: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: BGmFZ9dRfD8EZt0V672OP6EF10Q8PY5YgUnIZ7TDMZ4=)
                          30: B1E31BF6C92411F087908126C4F9AE02.roa (hash: GQFH/AinoWYWy/+S33nOX1sOOYYuDreBoZl3vsEFu7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Oct 21 07:42:44 2026 GMT
            Not After : Oct 28 07:42:44 2026 GMT
        Subject: CN=6ad86cf5-1782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:6a:74:e1:1e:0b:e0:0d:1a:36:6b:d4:4e:
                    11:e7:49:22:13:20:2a:4a:87:ef:96:72:fd:40:ac:
                    41:8a:79:74:dc:9f:6a:9b:f5:8d:a2:89:9c:3e:7c:
                    f2:f8:bd:74:2e:0e:5a:64:12:f9:3c:7c:cf:e1:8f:
                    be:9e:a2:42:f3:27:7b:17:40:21:b0:04:e4:e2:91:
                    a2:d5:88:f7:d1:df:d5:e0:30:07:f4:47:83:00:47:
                    d0:1e:84:24:60:e3:e4:10:9f:03:87:53:20:f0:f4:
                    a2:91:78:03:6c:63:45:73:24:7e:76:0c:82:65:30:
                    37:3c:28:7d:0b:66:03:2e:cf:c9:99:e1:3e:7c:52:
                    aa:52:e2:fa:68:66:b1:65:65:78:4a:55:5a:e8:e7:
                    4b:5d:13:01:3b:f9:2b:87:31:58:bd:c4:e8:bb:ec:
                    f6:1e:12:21:57:bd:a5:2c:86:b0:df:d3:33:c7:27:
                    27:3b:8c:64:be:68:7c:38:c1:46:ca:e7:b4:21:ed:
                    15:77:f0:50:c3:73:25:44:68:51:45:47:6d:2c:9f:
                    66:eb:3f:eb:09:41:45:aa:54:55:22:71:09:1a:c1:
                    0f:fc:66:cf:db:0b:e3:5d:06:f3:19:22:ed:98:f9:
                    ac:9b:ed:38:d6:e5:fc:b5:91:2d:74:51:bd:fd:6f:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:2C:A8:FB:A9:12:E7:59:88:54:6E:42:EC:19:6F:1B:A2:F3:B9
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8a:09:27:1b:5e:f2:73:a3:f0:d4:4f:d6:ee:1e:08:a2:7a:
         14:0b:8a:68:74:d6:80:1e:5c:3d:42:9e:6c:80:28:6c:6e:68:
         af:c8:9d:4a:d9:62:a9:fa:3b:e1:af:64:56:4d:8e:cb:2e:69:
         b5:04:90:7c:12:0f:9f:54:3b:c3:4f:1d:27:56:e4:1f:c3:02:
         48:5b:11:db:7d:f3:93:4c:83:29:e2:90:57:bf:79:33:cd:d8:
         11:5d:02:11:cb:b4:ed:ca:ac:5c:39:53:fb:c9:58:55:5e:8b:
         0a:60:f5:65:49:1b:bb:0a:e1:ab:54:04:4c:ec:f8:fb:e1:07:
         55:32:e7:60:fe:05:79:92:b8:ec:cb:b7:71:77:94:e5:67:e4:
         b5:57:e3:6e:c1:8a:1e:40:b8:98:c1:d0:ee:4d:6e:06:b6:2f:
         21:67:2b:77:72:bc:27:f4:3f:8e:52:fc:78:9b:89:52:3a:d2:
         82:e9:da:17:1e:a0:d8:30:de:99:b1:b2:9f:ae:8b:d3:3c:0a:
         cb:53:17:de:d2:e8:94:e1:e8:35:b8:6f:25:bc:93:86:cd:94:
         f8:2d:e0:ec:f4:64:fd:e4:9e:82:60:20:ac:48:a4:87:b9:5e:
         0b:97:d9:4d:b2:11:ae:a8:d9:f5:6c:59:2c:24:ce:35:ef:3c:
         83:d1:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:21:24 2026 by rpki-client