Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
File:                     jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json)
Hash identifier:          IW0WxpfNbveR90Un22rx3gwBQBCfbHW2xVP0/UFXhYU=
Subject key identifier:   A5:85:2F:C0:92:20:D1:83:72:A9:A5:E5:5A:D1:3F:7C:78:0A:B9:A2
Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
Certificate issuer:       /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Certificate serial:       05F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
Manifest number:          05EC
Signing time:             Thu 10 Sep 2026 22:51:54 +0000
Manifest this update:     Thu 10 Sep 2026 22:51:53 +0000
Manifest next update:     Thu 17 Sep 2026 22:51:53 +0000
Files and hashes:         1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: Gvu8EgIu8T+n9oPalUUXaK+aWZzGqP42MSaujt1XEes=)
                          2: Zv6-Gs71k5T3vqSTf-GFXFsjHso.asa (hash: qdUdfVKFKCwpSZEMGOdInFNY6oPsIKiGwNC/nSnObLI=)
                          3: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: Cr23RBREtuT54zLAvnFw/R9xfkhI60wXk3xodOfPdEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
                          rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
        Validity
            Not Before: Sep 10 22:51:53 2026 GMT
            Not After : Sep 17 22:51:53 2026 GMT
        Subject: CN=6aa3348a-8a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:29:79:25:f7:7e:0c:57:f6:1b:3f:f0:12:
                    c3:50:8f:d9:3d:56:8c:55:a6:97:37:d6:bf:dc:b5:
                    71:d4:6b:0c:9f:30:20:e2:87:bf:05:9f:a6:15:b0:
                    b6:9f:d4:3a:b4:1d:db:a0:26:d2:a3:24:a4:de:2a:
                    ec:0d:30:26:56:e9:a1:14:42:2f:48:9c:c1:92:4b:
                    39:bc:28:87:a2:76:3c:e9:3b:9e:08:d1:94:4f:aa:
                    a1:54:9d:b7:00:93:ba:41:e4:d6:3a:9a:5e:22:8d:
                    d8:18:ff:5e:b2:ff:a1:26:81:0e:92:fb:6a:b2:ed:
                    c7:9e:ff:a9:14:34:a0:60:9a:2f:60:4b:be:5c:f5:
                    46:f4:f9:b8:19:7b:43:ee:f8:42:ff:a3:80:a9:b7:
                    49:c1:a0:48:0a:cd:35:bb:19:e9:df:1b:c7:76:0f:
                    f4:6b:35:35:b6:c5:ac:ea:1f:1c:2b:aa:05:d9:20:
                    d8:33:b8:5b:e1:0c:0b:78:45:72:d3:0e:af:7a:87:
                    8d:82:79:a2:bb:d9:ed:3f:b2:09:45:df:de:8c:5a:
                    84:85:4c:84:ce:77:a4:5e:24:d5:58:5b:8a:03:7a:
                    18:c3:6d:94:9d:fe:1b:91:84:57:b9:e7:d3:c9:b7:
                    a3:b7:e9:d8:c4:93:38:30:84:87:b4:ef:ee:1b:d1:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:85:2F:C0:92:20:D1:83:72:A9:A5:E5:5A:D1:3F:7C:78:0A:B9:A2
            X509v3 Authority Key Identifier:
                keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:b6:10:5e:d5:c2:d5:14:95:45:9e:81:14:8a:3c:96:c2:
         c8:9a:06:b4:c0:7d:7f:bd:45:9e:2e:b9:be:95:81:4a:05:17:
         e5:9c:26:dd:90:61:d2:cf:e8:88:4c:f6:44:5e:1e:4d:56:22:
         4e:de:59:72:f9:b0:50:c7:30:93:ea:42:e6:26:5f:cb:16:f7:
         6d:ad:d4:25:6b:0b:99:36:23:72:ae:b0:97:3b:71:26:47:96:
         f8:86:c2:e8:7c:3d:29:13:a3:0e:cc:b9:bd:dd:43:98:97:d0:
         89:c3:b0:7e:4b:b7:61:44:c9:c2:87:2d:1f:f1:0f:99:ce:28:
         9d:7e:58:c5:47:51:90:cf:67:d3:21:3b:33:9e:66:f3:fa:7f:
         20:99:a8:c9:33:5c:71:7e:d9:f4:aa:20:b3:2d:cd:d9:a4:cd:
         27:c1:ce:ef:56:6c:56:ea:cf:59:87:9d:dd:8f:37:ea:47:c8:
         eb:b1:c2:ad:ae:b7:0b:d7:b5:96:b6:ee:29:75:a4:39:40:a4:
         16:b4:8a:23:62:04:d6:89:46:52:dd:07:9c:83:85:29:58:40:
         e7:97:e4:01:1c:78:d4:35:9e:47:97:c5:58:ea:9b:eb:e2:36:
         53:59:ef:d1:1e:3e:af:fd:61:30:43:6e:c0:e5:88:cf:d0:04:
         a9:61:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:49 2026 by rpki-client