Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
File:                     JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json)
Hash identifier:          o1mJbgx7ZlCM/X2Rjpt9gIT+SZVJ5db8WRBpf/DBelE=
Subject key identifier:   B6:A7:67:53:33:D4:06:D3:36:0E:34:E0:C8:07:0B:21:89:1E:53:92
Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28
Certificate issuer:       /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28
Certificate serial:       2AD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
Manifest number:          2ACA
Signing time:             Fri 02 Oct 2026 15:39:50 +0000
Manifest this update:     Fri 02 Oct 2026 15:39:49 +0000
Manifest next update:     Fri 09 Oct 2026 15:39:49 +0000
Files and hashes:         1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: 9HLRLQO7cXsKZtBe/FS9ce9hS5INpuFi1972NfgN35w=)
                          2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: hriHnwahZFQ690sRLwz6iRs8F4NGV9dzWdCEbvzLxNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl
                          rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10966 (0x2ad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28
        Validity
            Not Before: Oct  2 15:39:49 2026 GMT
            Not After : Oct  9 15:39:49 2026 GMT
        Subject: CN=6abfd045-41fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:33:e2:26:3d:a6:39:8d:e8:0c:ea:ee:92:
                    85:15:7a:8d:fc:dc:de:67:81:44:de:ba:52:0f:0d:
                    e5:f9:ef:3e:14:d5:34:1b:d0:5b:1e:73:9e:86:64:
                    5a:d4:70:cc:6a:30:0c:4d:a5:41:30:40:68:7a:4f:
                    41:3e:f0:a1:d1:4c:1b:d7:09:7d:80:32:15:f3:e6:
                    4b:30:dd:98:33:ae:bb:9a:fc:f0:06:ad:cf:62:10:
                    be:60:0e:87:9c:17:e9:1c:ab:06:e7:4e:73:cc:09:
                    dd:a0:2e:b0:e5:99:69:c7:7c:5a:e0:9e:27:ef:03:
                    42:3b:43:96:07:33:87:00:9b:0d:07:48:e5:db:c8:
                    14:0f:6a:95:cc:89:ff:6f:3e:ba:35:fc:83:06:9e:
                    f9:62:41:be:fe:a5:ce:79:73:50:a1:6d:fa:94:a0:
                    63:e0:c6:a0:db:76:8d:c8:6b:00:1c:37:d8:27:f0:
                    2a:89:73:73:87:dc:7d:b8:00:a4:3d:c1:4f:26:9b:
                    dc:fa:8b:5d:c4:a0:93:3a:dd:92:03:d4:ca:da:07:
                    7b:5c:c9:51:f2:39:2a:d0:b8:8d:21:14:ff:3c:23:
                    dd:05:4a:7a:58:a6:d4:bd:16:56:82:9e:fa:89:26:
                    45:00:ce:b3:7f:0c:42:d2:c8:06:85:2c:f2:02:25:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:67:53:33:D4:06:D3:36:0E:34:E0:C8:07:0B:21:89:1E:53:92
            X509v3 Authority Key Identifier:
                keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:09:62:74:5e:c8:c1:b4:f7:fc:77:2a:1f:cb:27:fc:be:50:
         a6:82:5e:aa:70:7b:36:3a:ae:fe:2c:91:fe:c3:cb:cf:5e:53:
         ff:08:ec:ba:c1:68:ec:75:c3:f8:8a:33:14:4a:2c:88:b0:07:
         26:9f:3d:ce:ba:24:7a:ec:38:4a:cf:ef:d1:f9:ad:6f:ca:7e:
         8e:20:63:be:87:d6:19:02:6c:07:ab:c8:89:e7:6b:00:96:91:
         ed:e0:94:87:76:f1:ab:d1:5a:83:4c:e6:0a:67:83:74:79:9d:
         dd:f8:90:28:35:68:86:e6:f6:92:e2:d7:41:c9:e4:58:1e:5f:
         99:34:9e:ae:98:6a:10:79:44:23:e4:f2:58:b9:53:42:90:b7:
         d5:0e:2f:90:2d:9e:a3:2b:b6:26:09:fc:36:76:96:0e:b1:17:
         9a:5e:d5:4b:46:6a:b4:e8:52:16:92:dc:3a:fe:ed:dc:94:49:
         ba:8d:37:90:e9:d6:0e:44:bb:c6:ac:0c:e9:97:db:25:17:dc:
         cd:8e:83:98:ea:51:74:29:61:82:15:c1:a9:a0:33:53:b1:4b:
         f3:77:1f:78:10:9e:13:2a:79:c8:8c:d6:17:7c:7c:03:98:dd:
         89:5a:e8:d7:bf:ea:7a:88:74:78:cd:11:36:f2:7b:4b:c9:f9:
         44:55:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:07:59 2026 by rpki-client