Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
File:                     jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json)
Hash identifier:          7/LIV11A+nl97nh9FEDAV59X+uGUsgmlmVInrRXMw7E=
Subject key identifier:   E3:9A:93:45:F5:50:A4:E6:77:D6:58:71:4A:A7:1D:3F:AF:20:82:B8
Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
Certificate issuer:       /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Certificate serial:       1D19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
Manifest number:          1CFE
Signing time:             Sat 10 Oct 2026 16:08:39 +0000
Manifest this update:     Sat 10 Oct 2026 16:08:39 +0000
Manifest next update:     Sat 17 Oct 2026 16:08:39 +0000
Files and hashes:         1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: j00QIfpFwFk5hArAADj+0RsrGG2yyY49z0/EmymvbsM=)
                          2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: WL85dPtJ+Rmno9CWdZLXpdoXzpJ7FKS7hpAe8UEzwn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl
                          rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 16:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7449 (0x1d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
        Validity
            Not Before: Oct 10 16:08:39 2026 GMT
            Not After : Oct 17 16:08:39 2026 GMT
        Subject: CN=6aca6307-544a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cf:19:27:a4:19:8a:fd:20:43:ce:ed:27:14:
                    0d:06:d7:ee:e8:70:e9:92:43:17:e7:1a:40:e6:bd:
                    de:66:9c:ec:c0:1c:4b:f1:87:25:26:2d:f0:d2:2c:
                    55:fe:bf:f8:2e:43:21:7c:0e:3a:e2:5d:f8:d9:af:
                    a7:c7:80:c5:d4:79:46:22:0c:28:04:d5:63:5a:33:
                    99:53:ce:b5:bd:ee:1b:e1:47:83:9c:96:7c:11:ff:
                    e5:a9:4e:89:d4:2a:c8:1e:85:78:73:78:12:20:b0:
                    bb:f7:5f:d4:06:34:c2:08:f6:57:2b:60:87:9d:2c:
                    60:96:2b:b2:9e:37:63:d1:e2:d6:9a:eb:a4:b6:5a:
                    be:e6:7b:04:6c:35:ca:8e:ff:bd:27:0b:67:d9:ec:
                    8d:e3:e4:c5:bb:0e:49:ac:65:ff:0e:2c:f6:99:fd:
                    77:35:21:1d:5f:7f:a8:c6:aa:cb:47:bc:b0:e9:d2:
                    e0:71:01:46:d0:56:56:89:2d:59:a6:5d:84:c3:2d:
                    bb:33:28:92:76:a6:8a:55:7d:18:34:7a:a0:ba:6a:
                    1c:a9:88:5a:55:75:70:28:d7:91:fc:46:16:1a:c5:
                    9e:70:fc:29:3a:44:f1:00:5f:1c:44:e0:f1:eb:06:
                    66:2a:3e:ef:17:ae:07:c0:32:77:d0:ca:14:96:09:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9A:93:45:F5:50:A4:E6:77:D6:58:71:4A:A7:1D:3F:AF:20:82:B8
            X509v3 Authority Key Identifier:
                keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2c:a2:49:7b:b9:aa:9e:4c:4e:09:6d:9e:b2:2a:1b:18:4d:
         61:f5:2a:31:36:df:58:7d:c5:fe:b0:b3:54:24:2f:94:64:77:
         9e:d4:41:96:6a:c0:f9:83:b9:c6:b8:a9:18:49:00:e6:25:e8:
         81:be:95:db:f3:56:65:e4:40:91:e0:21:67:ae:a0:be:2f:b8:
         b6:74:ed:24:ee:e4:c2:46:b3:af:d3:d7:3b:53:a1:97:d6:83:
         3e:77:68:19:55:19:24:fc:bd:b1:78:0a:c7:54:6a:08:9f:7d:
         31:e0:84:7a:dc:eb:dc:f2:12:3e:20:34:8b:d8:f3:9d:2f:a3:
         0f:c2:4d:ad:96:48:37:f0:e3:7c:6a:ef:48:bd:83:bb:d9:99:
         05:2b:9f:7e:69:77:2e:bc:50:be:bb:6e:ed:19:32:99:4c:28:
         75:86:2b:4a:7a:12:04:09:9d:82:e3:6e:e0:19:d3:44:93:fb:
         5e:fa:55:f6:f2:8c:2d:fa:ff:5f:ba:49:2b:66:66:6a:78:2a:
         98:6b:44:d2:75:29:e3:a5:f9:3c:ad:62:df:b6:ed:09:1b:d0:
         3e:7a:fd:74:9e:d4:89:bd:ef:e5:41:17:7d:58:3f:98:f0:16:
         82:fa:9f:8a:bc:d6:a8:2e:4e:9b:31:a1:8a:8b:01:48:28:55:
         e2:ec:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:21:40 2026 by rpki-client