Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File:                     JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier:          RLi1HXTBK9zH5bxr/t3Jux3+f+InTZvgV7YO5HAMmk0=
Subject key identifier:   F2:91:42:04:71:2B:88:AC:05:80:BF:3D:B9:FA:CB:FE:26:8D:B8:73
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer:       /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial:       02C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number:          02BA
Signing time:             Thu 05 Nov 2026 02:03:25 +0000
Manifest this update:     Thu 05 Nov 2026 02:03:24 +0000
Manifest next update:     Thu 12 Nov 2026 02:03:24 +0000
Files and hashes:         1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: v5Vz/70VjZdDKc8zn4wV4fPF5fRi6hIdCAa/TpLwjqc=)
                          2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: QTF3ES2D2Qx8q3gy7vrfGGN+D9+IJxfQn8XNpdqSONA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
                          rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 01:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
        Validity
            Not Before: Nov  5 02:03:24 2026 GMT
            Not After : Nov 12 02:03:24 2026 GMT
        Subject: CN=6aebe3ed-d5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:3a:bb:62:f2:aa:62:a2:89:f9:58:15:01:
                    21:37:02:be:01:8f:9d:da:1a:40:7f:08:c8:2e:72:
                    4d:d7:8e:ce:95:16:ac:27:09:03:fe:f7:23:3b:d9:
                    fe:15:16:2b:a6:c1:b7:b0:3f:be:1e:32:75:82:2c:
                    08:fd:ab:5d:94:e4:ce:bc:a2:4b:4d:c3:8a:e5:9f:
                    23:84:86:6e:4a:aa:ab:cc:08:3b:b8:63:c3:84:1b:
                    53:b3:21:45:26:51:65:88:0b:b6:4d:7f:71:5e:66:
                    c8:e3:79:ee:94:db:a7:6d:38:7e:b0:ad:b5:3e:56:
                    b8:c0:c0:74:fd:8d:f0:66:f1:32:60:39:63:38:6d:
                    dd:2b:0a:9a:8f:87:66:83:ec:b7:a8:77:e3:f3:11:
                    e5:18:74:06:af:3b:dd:0d:4d:66:84:52:eb:73:c4:
                    aa:07:a1:52:45:07:aa:3f:ca:0c:b4:da:15:65:4b:
                    1d:08:78:c8:a6:54:a4:f4:e3:a6:e4:b5:60:0b:81:
                    0e:2d:e2:a1:08:56:30:74:61:aa:cd:c9:1a:a2:8d:
                    09:7a:d9:13:32:3e:af:da:5e:3f:b5:11:ac:dd:ab:
                    22:bc:c4:e8:8a:31:13:a9:d5:19:08:30:eb:e4:2e:
                    ce:89:72:e7:b9:50:bf:5d:10:fd:3e:30:d3:38:24:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:42:04:71:2B:88:AC:05:80:BF:3D:B9:FA:CB:FE:26:8D:B8:73
            X509v3 Authority Key Identifier:
                keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:84:b5:46:09:a1:3e:fc:27:55:72:66:50:5e:79:bc:ab:
         b8:ed:ac:06:51:d1:53:84:a5:b4:31:77:12:03:0b:80:5f:37:
         3f:a4:96:f0:75:0a:57:50:61:30:2e:14:c5:41:b2:bd:76:a8:
         db:d2:e4:3a:61:fd:d1:23:2e:db:ce:f3:d3:73:16:15:07:06:
         2a:1a:f0:92:e1:ef:1a:ef:33:ed:bd:c7:4e:8b:03:92:a2:4b:
         0d:83:b9:3f:99:90:5e:ba:bb:4d:76:ee:af:38:1f:bc:7e:da:
         1f:27:c3:52:ed:4e:82:a6:73:08:70:7a:5d:a4:b3:18:0f:ac:
         25:1f:5b:7b:32:21:a2:1f:8a:9c:ef:6d:e2:01:4b:79:2b:b9:
         22:0c:58:72:e5:6c:55:bd:0c:d2:22:4f:9b:14:4e:fd:07:2c:
         77:1f:87:c2:57:92:10:7b:fc:ce:55:aa:4e:20:6a:5d:72:7b:
         57:ff:3d:e9:d2:fb:e9:43:96:75:e5:b9:14:a5:12:b4:5b:ec:
         6b:70:0a:6d:9e:3f:9e:3f:75:c5:03:7d:98:65:13:85:88:b2:
         6e:82:c1:da:41:10:e5:6c:a8:9b:62:fc:88:5a:2e:94:34:cd:
         6a:bc:45:88:d5:77:d1:a5:e6:02:03:4d:79:df:40:5b:a9:a4:
         08:8a:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:21:08 2026 by rpki-client