Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft
File:                     JSBFeBemYmHoez5BhOhi2ka6nw0.mft (raw, json)
Hash identifier:          w9Agl3mwmH3q7gStDTqOYMBtBvuDUSo/y7twhV8/Kac=
Subject key identifier:   76:08:C0:0A:05:0F:16:08:3A:AF:51:DB:2C:C2:FE:88:54:2C:C1:63
Authority key identifier: 25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D
Certificate issuer:       /CN=A9151EB5/serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D
Certificate serial:       0767
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft
Manifest number:          0763
Signing time:             Sun 04 Oct 2026 21:44:40 +0000
Manifest this update:     Sun 04 Oct 2026 21:44:40 +0000
Manifest next update:     Sun 11 Oct 2026 21:44:40 +0000
Files and hashes:         1: JSBFeBemYmHoez5BhOhi2ka6nw0.crl (hash: YCbwd21x3OoDHcF88af4gzNBdfspoyLCos0jFW9vB7g=)
                          2: 81ACEA76E74711EFA8F61A3DC4F9AE02.roa (hash: kfS4iOZmAZy5oXv5dUoQWf5OndRU1jlnd3+B/6ccXOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl
                          rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151EB5, serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D
        Validity
            Not Before: Oct  4 21:44:40 2026 GMT
            Not After : Oct 11 21:44:40 2026 GMT
        Subject: CN=6ac2c8c8-3a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8e:b8:05:7d:18:64:71:3f:dc:38:dd:a0:1a:
                    3c:16:d1:94:dd:f8:36:97:e1:6e:c0:a4:50:9e:4a:
                    c7:e4:68:74:71:25:8d:1c:c7:1e:1e:8c:34:21:98:
                    d4:0a:ff:40:ea:9c:d4:0f:5b:04:fb:10:c7:60:cc:
                    95:2e:62:2c:6e:47:f4:28:ea:e3:0e:54:aa:90:40:
                    8f:72:0b:63:55:71:87:49:7c:5f:6a:3b:99:b6:55:
                    82:1c:58:4a:13:a1:7f:7d:56:6f:71:91:ae:db:c2:
                    05:13:c2:61:91:0b:c2:f4:5b:a3:6e:9a:7a:96:45:
                    eb:6a:42:12:fc:d6:6a:42:fc:92:0c:a2:42:c6:e3:
                    e9:02:61:e4:45:41:1d:f0:fe:00:94:de:a1:aa:e8:
                    31:20:95:a6:31:24:98:99:0c:06:e6:05:e6:67:7e:
                    04:28:d6:98:ed:dd:6f:0f:47:8d:52:b3:b4:37:d0:
                    6a:b5:58:88:7d:26:ec:d7:80:ff:ee:eb:0c:df:7a:
                    21:37:1d:e6:ab:5f:36:8e:7f:50:4b:6a:28:0f:42:
                    c3:81:22:6d:b6:42:49:e3:b4:e7:bc:44:9c:2f:5b:
                    d0:7a:dd:43:e7:f9:e8:8a:41:d7:24:67:65:d1:db:
                    86:e4:d5:fa:33:e6:d8:97:c3:89:32:60:f7:ef:75:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:C0:0A:05:0F:16:08:3A:AF:51:DB:2C:C2:FE:88:54:2C:C1:63
            X509v3 Authority Key Identifier:
                keyid:25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:66:e5:a3:cd:af:4c:06:28:69:52:96:de:3d:b3:40:9f:
         50:21:cf:d6:4f:7d:08:fe:aa:4f:82:d0:f6:0b:24:4c:0c:57:
         8b:e1:ee:61:5e:c2:ec:6d:de:33:c7:ec:cb:eb:67:83:ff:9a:
         0f:a3:30:e3:91:cd:4c:3a:42:eb:cb:32:9b:44:fe:00:37:02:
         81:33:06:f6:bf:c3:61:0e:1d:22:14:7f:70:01:68:ab:79:5f:
         be:dc:bd:a4:24:3e:97:44:55:58:19:1c:27:e9:a5:d7:bf:9e:
         29:83:12:27:f3:ed:03:d6:39:83:4b:d5:ed:b7:cd:ea:a9:4f:
         5b:91:58:06:aa:50:c3:49:24:d3:c0:2f:7a:88:1d:d4:39:91:
         0e:e7:1f:04:d1:f0:43:83:85:21:66:92:03:72:e9:a0:6b:a0:
         d4:97:ef:07:bd:b7:b0:03:2a:a9:30:a9:47:5c:99:d8:a4:a0:
         14:61:46:2a:df:6f:3e:74:37:e0:e9:8a:97:31:09:8d:eb:45:
         e0:d8:09:3c:d2:1a:c8:de:a2:c3:bf:76:3e:99:23:3f:1e:07:
         99:5c:1c:95:01:3f:1e:75:d2:de:27:24:12:46:ec:fd:a2:d5:
         81:45:45:6b:35:c0:93:95:8c:53:e8:d4:35:fc:05:64:5f:c9:
         f0:18:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:33:19 2026 by rpki-client