Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
File:                     JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json)
Hash identifier:          re06mrZjYZCrvuk3PJASUuQ+T36HgPJpLsgwk0+a7WE=
Subject key identifier:   39:78:44:01:6F:F5:04:AB:D5:50:EA:26:27:B7:9B:8C:63:BB:4A:39
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Certificate issuer:       /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial:       17E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
Manifest number:          17B8
Signing time:             Sat 24 Oct 2026 16:32:45 +0000
Manifest this update:     Sat 24 Oct 2026 16:32:45 +0000
Manifest next update:     Sat 31 Oct 2026 16:32:45 +0000
Files and hashes:         1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: Ja5D5rcNVTmNGvauyQoqXuil3IstA/34rwamOUAh8ss=)
                          2: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM=)
                          3: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=)
                          4: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6116 (0x17e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
        Validity
            Not Before: Oct 24 16:32:45 2026 GMT
            Not After : Oct 31 16:32:45 2026 GMT
        Subject: CN=6adcddad-3bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:0d:9d:17:29:3c:f6:53:6a:41:45:e0:b4:
                    88:ce:24:79:9d:42:09:2a:5e:e3:6b:28:1a:68:75:
                    a2:7e:d0:01:00:92:e8:cd:d0:48:d9:15:6a:b1:5a:
                    d5:4c:41:19:b8:54:75:fa:70:08:73:bb:b4:ff:68:
                    51:76:68:53:30:d0:16:7e:02:c1:94:d0:b1:63:e9:
                    cf:97:b0:04:4f:b3:73:42:df:83:d7:5a:22:31:00:
                    0f:1f:8e:59:cc:8b:5e:52:2c:34:30:3f:99:bb:01:
                    da:7c:33:ef:4b:17:d9:78:ac:78:15:36:a1:9e:56:
                    7e:02:43:8f:9c:bd:cf:4d:2d:37:ac:64:50:c1:4f:
                    d6:6a:79:8c:b6:9e:87:37:84:6c:02:f6:3f:78:8c:
                    c7:df:14:a5:9f:2a:05:74:75:c1:c5:be:52:41:6f:
                    d2:d6:8c:01:37:8e:52:8c:79:e1:68:1f:55:20:88:
                    ab:8f:64:64:e6:09:9e:82:7e:ae:92:98:d7:82:c8:
                    d4:57:ff:a5:c4:ef:f8:7e:83:6f:e7:fc:8b:40:71:
                    14:b9:a4:8c:65:17:c8:09:15:54:b8:c7:f3:d8:45:
                    ea:9b:a6:c7:69:4a:23:fa:f5:54:21:0b:c1:6e:50:
                    4a:4f:d3:48:8e:42:b5:1b:00:fe:0b:7a:1e:91:e7:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:78:44:01:6F:F5:04:AB:D5:50:EA:26:27:B7:9B:8C:63:BB:4A:39
            X509v3 Authority Key Identifier:
                keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:42:1b:85:6a:7b:5f:be:7b:d4:7e:b3:04:1e:4c:88:b1:90:
         c7:88:6c:b5:18:e6:ee:41:e1:77:2d:3a:96:45:c5:0e:85:80:
         d6:21:02:0a:01:51:38:a6:e8:64:74:5e:c0:ef:57:33:43:e8:
         2f:24:3b:11:21:d7:bc:18:a5:5c:e4:db:94:42:bf:50:78:80:
         51:f6:b0:e3:ed:1c:83:98:2c:ef:fe:9d:fa:ac:9a:17:26:03:
         70:6d:35:1c:26:05:fe:dd:10:4b:31:29:d6:61:0a:80:df:ef:
         0b:d0:0b:2e:6a:93:63:22:c8:16:a7:1b:5f:3a:44:59:ae:24:
         bc:6a:ef:f6:40:52:38:bf:82:da:98:77:80:0d:2f:1e:c2:a7:
         e4:07:f2:96:e8:1c:66:05:05:da:61:fb:f3:15:ac:36:60:24:
         17:3a:f0:e1:23:03:e7:f7:2a:24:d2:6f:bd:e4:f6:ba:a5:cf:
         ba:c9:59:98:44:79:3e:13:c5:a5:dd:b4:e4:4e:b5:f7:45:0b:
         ad:c3:fe:51:b4:7f:5b:41:c0:22:03:de:1d:d5:6a:60:4c:85:
         25:5b:5e:eb:61:dd:34:51:ad:b7:da:bf:63:1a:20:3f:4b:1b:
         0c:cb:02:d4:ff:ac:10:25:a0:f5:02:7d:9c:d4:33:b5:40:f5:
         e0:f2:76:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey
Mzc2ODhERjIwHhcNMjYxMDI0MTYzMjQ1WhcNMjYxMDMxMTYzMjQ1WjAYMRYwFAYD
VQQDEw02YWRjZGRhZC0zYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApGINnRcpPPZTakFF4LSIziR5nUIJKl7jaygaaHWiftABAJLozdBI2RVqsVrV
TEEZuFR1+nAIc7u0/2hRdmhTMNAWfgLBlNCxY+nPl7AET7NzQt+D11oiMQAPH45Z
zIteUiw0MD+ZuwHafDPvSxfZeKx4FTahnlZ+AkOPnL3PTS03rGRQwU/WanmMtp6H
N4RsAvY/eIzH3xSlnyoFdHXBxb5SQW/S1owBN45SjHnhaB9VIIirj2Rk5gmegn6u
kpjXgsjUV/+lxO/4foNv5/yLQHEUuaSMZRfICRVUuMfz2EXqm6bHaUoj+vVUIQvB
blBKT9NIjkK1GwD+C3oekefFzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDl4RAFv
9QSr1VDqJie3m4xju0o5MB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw
Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL
R2JKQXdKTnBlY29qZG9qZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF0IbhWp7X7571H6zBB5MiLGQx4hstRjm7kHhdy06lkXFDoWA1iECCgFROKbo
ZHRewO9XM0PoLyQ7ESHXvBilXOTblEK/UHiAUfaw4+0cg5gs7/6d+qyaFyYDcG01
HCYF/t0QSzEp1mEKgN/vC9ALLmqTYyLIFqcbXzpEWa4kvGrv9kBSOL+C2ph3gA0v
HsKn5AfylugcZgUF2mH78xWsNmAkFzrw4SMD5/cqJNJvveT2uqXPuslZmER5PhPF
pd205E6190ULrcP+UbR/W0HAIgPeHdVqYEyFJVte62HdNFGtt9q/YxogP0sbDMsC
1P+sECWg9QJ9nNQztUD14PJ2Rg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 15:03:31 2026 by rpki-client