Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File:                     jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier:          KF2l92Iz79NS6DEKXAXubRU/3Qvrw4Ppar9LXitHgq8=
Subject key identifier:   3A:6D:0C:59:A4:FF:DD:72:1C:A3:7F:38:84:FC:9E:EB:0C:9E:C4:C6
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer:       /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial:       35D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number:          35AD
Signing time:             Thu 08 Oct 2026 15:16:46 +0000
Manifest this update:     Thu 08 Oct 2026 15:16:46 +0000
Manifest next update:     Thu 15 Oct 2026 15:16:46 +0000
Files and hashes:         1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: 9FIfPavdIV6Nw6JPBcwZ5AOwrkr0XOyZ1pa4ZGDZQXg=)
                          2: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
                          3: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
                          rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13783 (0x35d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
        Validity
            Not Before: Oct  8 15:16:46 2026 GMT
            Not After : Oct 15 15:16:46 2026 GMT
        Subject: CN=6ac7b3de-62f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:6a:f4:1d:5e:77:bb:c5:df:29:3e:91:ee:
                    6c:68:28:e2:62:29:09:58:85:7e:c3:52:5f:6c:43:
                    91:74:e0:0a:fa:eb:ee:b0:44:5f:fd:df:a1:a5:21:
                    05:cf:84:65:81:1e:23:79:f8:74:67:a4:31:42:57:
                    c0:38:1f:2e:02:0c:1b:5b:2d:83:c9:8b:af:0c:e3:
                    d2:98:a0:20:db:97:36:be:b3:60:fc:d5:b0:83:09:
                    d7:86:5e:03:24:c1:8a:31:57:7a:70:ed:ec:75:4e:
                    6a:93:fd:17:b5:49:65:0f:20:83:0d:c9:26:84:a1:
                    b4:96:0c:de:e6:00:e6:f2:d5:de:dd:50:53:eb:bf:
                    92:36:54:e3:25:53:95:a5:3d:97:b9:f4:46:78:89:
                    7a:a0:22:78:06:fd:69:cd:f8:66:13:81:4f:73:88:
                    27:c5:a2:14:f6:04:a2:ba:30:70:86:74:c3:c1:d2:
                    36:df:e4:7f:2b:41:de:ee:40:c6:2d:1f:36:14:28:
                    b3:8a:f5:54:7c:6f:33:56:35:91:5d:05:76:b7:00:
                    88:5f:b8:d0:59:a7:78:f3:14:51:31:f4:eb:ef:e3:
                    fb:54:7e:b2:4a:83:a2:ad:ee:da:e9:f4:36:92:6d:
                    43:60:7d:b0:51:c9:95:df:62:8d:70:e5:e6:77:73:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6D:0C:59:A4:FF:DD:72:1C:A3:7F:38:84:FC:9E:EB:0C:9E:C4:C6
            X509v3 Authority Key Identifier:
                keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6f:80:e4:ea:5a:51:f2:ad:e8:21:ce:a4:2c:c2:54:70:b4:
         1f:be:21:fa:6f:c2:8e:05:a5:3d:3b:6b:f0:d4:16:1a:b8:4a:
         cd:3a:d1:78:6a:b0:f0:83:43:af:eb:35:b7:a8:2a:9c:7e:fe:
         0f:a1:17:74:ac:f2:5f:ae:1c:65:5e:c1:19:59:4b:aa:77:9c:
         30:38:73:9e:6d:48:0b:52:7d:2f:11:66:95:66:9e:69:81:80:
         00:10:dc:cd:fd:ee:dd:da:ab:85:4a:9b:6b:c8:da:cb:a6:1b:
         ab:e2:c5:7f:e4:d8:a4:a9:a8:2a:cb:54:e8:79:69:a6:f5:0c:
         88:c5:5e:45:cf:e1:88:54:01:0e:53:58:bc:95:db:70:90:a7:
         73:77:7b:70:e1:af:40:6e:e4:b4:9f:e2:2e:08:b6:97:6d:cb:
         e4:62:81:ab:02:6f:1f:54:b3:ec:5f:cc:ad:15:be:e1:7c:b5:
         e7:14:b1:ba:d2:df:dc:a7:73:51:31:dd:e7:06:46:56:5b:59:
         f6:27:b7:ef:c7:cb:a6:cf:0c:6b:7f:15:98:53:3c:1f:a5:18:
         08:03:bd:e0:0a:b8:80:d0:1b:81:37:87:f1:91:ae:ad:75:65:
         12:d5:1d:c8:59:a3:82:24:7e:63:b1:53:b0:48:9b:78:bd:9b:
         4e:75:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:37:57 2026 by rpki-client