Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
File:                     jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json)
Hash identifier:          stPZe2d6tMPOatiRKQkG+aA1s7mJyl4/o0OjOHMxSOE=
Subject key identifier:   71:30:17:F4:3C:C1:90:A6:31:68:1A:28:99:9D:A4:9C:89:CB:9C:8C
Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
Certificate issuer:       /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
Manifest number:          01EB
Signing time:             Sun 11 Oct 2026 03:59:41 +0000
Manifest this update:     Sun 11 Oct 2026 03:59:40 +0000
Manifest next update:     Sun 18 Oct 2026 03:59:40 +0000
Files and hashes:         1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: 811Z4XuQH8o4e7Kb0moJtaXBtMZ5wKtKrioAP9nX6IE=)
                          2: 213ED5A8908011F1BBCA6C596411F970.roa (hash: z+795C17iubupDjJ2ThAB3QI0u1v/GOiDyj2UYfqZT4=)
                          3: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: Ai5vDwK8j+bPmD/vS73OlP9MaEpaSxs04+w/LkX/yQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
                          rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 03:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
        Validity
            Not Before: Oct 11 03:59:40 2026 GMT
            Not After : Oct 18 03:59:40 2026 GMT
        Subject: CN=6acb09ad-5fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:fd:fe:20:5c:20:66:bb:aa:ed:91:5d:e4:
                    5b:e7:f0:09:39:8e:a6:7c:f1:ce:86:e6:d9:90:1e:
                    ab:88:3b:83:bc:d2:87:68:5a:f6:1a:59:31:b9:9f:
                    4a:e5:7c:9b:da:28:89:bb:18:d4:39:39:77:e5:80:
                    d9:fd:bd:cc:09:c2:26:7b:6c:c0:99:d5:85:ce:9d:
                    7b:a1:58:72:c5:62:f0:d9:d4:a1:c5:64:61:13:ae:
                    39:fa:ed:9b:04:b3:9e:ab:73:90:e8:17:b1:10:39:
                    f7:61:4e:14:75:27:70:6d:55:a8:fc:fb:86:13:67:
                    69:aa:1e:7e:be:7f:de:2d:b7:7b:2f:b1:f4:36:74:
                    d7:bd:3f:b9:8f:30:63:2d:86:be:49:0d:b6:b1:9e:
                    db:6c:cf:a1:d6:95:60:c8:4f:a5:5b:26:8c:a0:45:
                    65:cd:4e:25:e5:f4:99:ad:17:1f:a5:99:0c:8d:51:
                    d7:80:58:78:a8:b3:aa:c4:c1:ca:30:d2:c1:2e:d7:
                    d9:85:45:52:be:ed:27:40:df:89:9a:3c:af:ab:f2:
                    59:7d:a9:b6:d6:71:21:5f:1b:1e:cb:ae:f4:d0:3e:
                    b6:82:5f:49:15:ad:32:7f:98:9f:b5:a2:d2:3b:e2:
                    48:78:d4:40:f0:ef:d9:26:9e:1b:06:01:65:54:28:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:17:F4:3C:C1:90:A6:31:68:1A:28:99:9D:A4:9C:89:CB:9C:8C
            X509v3 Authority Key Identifier:
                keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:99:81:67:77:8d:5a:94:6e:28:6b:46:1b:a9:25:1b:cb:
         cd:3d:43:7d:30:17:f6:b1:31:f6:26:36:f5:fd:c9:06:7a:55:
         a4:7f:e7:57:e9:d5:a8:ee:d3:98:fd:c0:32:eb:6f:6c:15:52:
         47:57:73:3b:3c:da:3f:65:e7:8b:65:56:ce:de:d8:36:8f:01:
         b9:1c:d0:84:c6:60:36:f5:d8:09:24:2d:1f:6e:e4:c4:fd:db:
         9f:82:02:d2:bc:4b:18:b0:16:1e:91:d9:5a:e1:89:85:82:66:
         03:05:5d:a8:24:33:ea:f0:b5:31:1e:15:d1:8f:90:17:54:c1:
         fb:2f:7e:03:84:0f:c4:c1:c1:ae:0f:b3:51:88:45:5e:4f:6b:
         75:56:08:5b:22:cf:01:36:22:76:8c:37:53:7b:14:4f:7d:f9:
         6e:41:5f:dc:8c:77:1b:b9:2f:87:67:51:7e:60:b9:7e:d9:00:
         c0:12:0b:84:4e:93:07:28:59:6b:13:f8:f6:7b:17:fb:03:95:
         fd:db:af:16:d5:b8:24:c7:6e:d8:13:a4:27:85:e0:dd:02:9d:
         9e:e9:14:2f:2d:ec:04:13:d5:c8:ab:22:6f:23:96:98:05:49:
         eb:f3:ca:79:9d:94:42:2b:fe:80:1f:64:47:61:ad:43:b1:72:
         41:7e:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:49:15 2026 by rpki-client