Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
File:                     J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json)
Hash identifier:          v723m1vJQSQWFl6+opOQT2fozPiNzsMCGy00WZkc1fQ=
Subject key identifier:   13:84:9A:30:7F:1F:86:B8:8E:3C:71:8E:E4:E3:AA:2B:D6:5B:C4:F7
Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
Certificate issuer:       /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Certificate serial:       1E9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
Manifest number:          1E8E
Signing time:             Wed 28 Oct 2026 16:05:37 +0000
Manifest this update:     Wed 28 Oct 2026 16:05:37 +0000
Manifest next update:     Wed 04 Nov 2026 16:05:37 +0000
Files and hashes:         1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: 3ziGCxeAIPnpNVSXcL9Jerr4LOTu0lIFjaaIsVMxJi0=)
                          2: C78E4E640BC111F19AB158B3293D8C67.roa (hash: UHpdeBy1a2ejJJBR1Oum4bKcILEQ59Ie3ax0oFfhz0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
                          rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 16:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7836 (0x1e9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
        Validity
            Not Before: Oct 28 16:05:37 2026 GMT
            Not After : Nov  4 16:05:37 2026 GMT
        Subject: CN=6ae21d51-43ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:41:94:d7:f1:28:86:83:c4:a7:e0:58:d0:
                    f2:d9:a8:18:79:cf:08:74:57:d7:d8:53:49:67:f3:
                    88:14:9b:36:e7:6a:16:28:25:b7:23:46:90:2a:53:
                    6d:44:16:94:20:26:32:3e:9c:2b:15:af:b8:ce:e2:
                    0a:74:5b:15:b4:d2:c1:00:5b:36:55:9b:97:ed:18:
                    94:3c:73:ba:29:22:8e:4c:31:f3:ea:a2:1a:64:c0:
                    c6:b2:2d:cf:14:f4:66:e3:6e:02:19:31:fa:5e:31:
                    ae:23:17:96:3d:82:b4:30:f3:a9:70:6e:5f:37:21:
                    02:b9:c4:22:93:9a:66:c1:af:28:45:e1:e5:88:77:
                    53:ce:e6:a6:e9:ae:4d:a7:3e:79:8a:6a:f4:b1:b1:
                    14:99:dc:57:14:b8:80:60:ec:c7:08:ee:7f:28:92:
                    9d:ff:48:9c:5e:77:f8:37:a4:80:7a:8a:57:af:4e:
                    16:a5:04:44:c2:0b:56:61:f8:0c:f7:34:47:09:db:
                    03:5a:05:c6:ad:4d:d7:c7:06:ae:3b:fa:8e:8d:a7:
                    48:5c:91:cf:79:b8:e3:7b:80:24:dd:d4:38:3c:b5:
                    60:45:df:6f:2d:9c:c7:05:5e:5f:46:7e:ed:e7:52:
                    b3:cd:08:0b:40:95:dd:e4:39:9d:4a:b1:59:b1:c1:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:84:9A:30:7F:1F:86:B8:8E:3C:71:8E:E4:E3:AA:2B:D6:5B:C4:F7
            X509v3 Authority Key Identifier:
                keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d0:4c:61:bd:57:70:40:2b:9b:c0:b9:65:d8:3c:4b:9c:cb:
         c4:5e:e4:76:3d:77:40:fa:73:1e:a9:78:91:5a:29:78:4c:28:
         72:c1:ee:4c:81:31:2e:ca:3c:6d:47:f1:f0:fc:75:a3:58:bc:
         4d:27:65:6e:9d:28:67:a8:82:e6:44:bc:e1:31:34:31:05:6f:
         f9:00:b4:ce:48:5f:9b:c5:0e:1d:72:c9:ec:d0:e3:9c:f8:b5:
         ae:dd:88:06:ab:aa:b8:8d:f9:1e:f5:5f:04:5f:29:2b:bf:fe:
         ff:df:0c:3e:aa:c3:c7:87:01:6e:44:5d:9d:9e:15:21:33:f3:
         cc:65:6e:ab:10:6e:8a:dd:8f:c1:9e:e9:58:66:2c:74:db:6d:
         c3:a8:ec:f8:71:a5:25:f7:f2:41:ca:45:29:c8:53:6b:b0:ba:
         fc:b5:2f:16:bf:af:8f:67:88:82:72:12:19:05:9e:87:95:20:
         7a:1c:92:40:c6:b4:e9:12:84:2f:09:11:19:f5:1c:aa:10:fb:
         3f:23:68:5b:6f:f7:a3:c0:ac:3b:cc:45:7c:18:41:4f:f1:d6:
         ee:5a:80:5d:69:b6:f8:cd:79:2f:5b:b7:40:de:41:5a:53:48:
         06:c1:ea:ff:bc:4d:02:d3:df:f3:ea:3f:13:02:2a:48:3c:8e:
         3d:14:df:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:53:23 2026 by rpki-client