Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
File:                     Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json)
Hash identifier:          AVoj3V/mOseUeRNX4+Y49bSJHfFcKeQD3vyhnhKehGo=
Subject key identifier:   1F:0B:DD:F8:CB:2A:BE:DD:3F:A6:C3:12:92:5D:69:3D:59:FC:4B:86
Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0
Certificate issuer:       /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
Manifest number:          013D
Signing time:             Thu 29 Oct 2026 06:13:08 +0000
Manifest this update:     Thu 29 Oct 2026 06:13:07 +0000
Manifest next update:     Thu 05 Nov 2026 06:13:07 +0000
Files and hashes:         1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: tUzcwCHuY8nfNphqI86EC9F5YSD/iCdWJ5BNjQyiXSc=)
                          2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: DGkul+ozckWHPUCME/QWLmgNY4q/l+teYlrEvBr8aK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl
                          rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 06:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155FAB, serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
        Validity
            Not Before: Oct 29 06:13:07 2026 GMT
            Not After : Nov  5 06:13:07 2026 GMT
        Subject: CN=6ae2e3f4-2ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:67:7f:68:b4:85:0f:cb:27:5a:a9:d3:04:
                    10:b2:79:50:2e:b9:d7:c2:29:5f:fe:06:81:cb:2f:
                    69:4f:0c:8c:e9:65:cf:b8:d6:07:98:6d:b4:69:75:
                    44:4d:b2:29:05:3a:d6:66:68:1c:52:9d:93:cb:db:
                    ba:70:20:bf:36:dd:7e:10:53:9b:1b:bf:3e:1c:92:
                    09:5c:82:72:2f:23:aa:31:79:3a:3a:1f:c6:2d:e2:
                    fb:63:97:d6:dc:19:af:31:cf:13:f5:8f:b0:58:bf:
                    eb:f8:2f:85:f8:93:c7:d0:b2:10:1e:a2:7c:ff:bd:
                    9b:79:85:bc:1f:16:8a:0f:37:f8:56:8a:44:5f:7a:
                    74:01:65:18:3b:5f:3b:bb:bd:e6:16:ec:eb:97:a6:
                    80:9d:c6:53:9a:22:63:fb:aa:02:13:d6:3b:19:23:
                    a4:49:d0:c5:9b:4a:7c:12:5e:26:50:76:11:5a:a4:
                    c3:c7:3a:ca:0c:a1:aa:67:67:14:64:f6:26:ca:cc:
                    4e:44:7c:a8:8d:05:93:c0:c4:25:9b:18:fb:4c:5a:
                    33:d2:6d:2e:aa:88:eb:07:13:ab:3e:5f:33:9c:5e:
                    00:a4:be:5a:b6:7e:98:0c:3a:49:23:c7:9d:d9:82:
                    2d:ec:62:95:f4:6e:df:a8:68:66:19:95:3e:af:d3:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0B:DD:F8:CB:2A:BE:DD:3F:A6:C3:12:92:5D:69:3D:59:FC:4B:86
            X509v3 Authority Key Identifier:
                keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:30:f3:bf:fb:bc:9c:cc:f0:c9:07:2c:d5:a7:35:a8:07:
         98:59:eb:3a:5d:6a:e7:c6:37:33:83:b9:14:33:a0:87:7f:7a:
         77:52:ad:49:39:c9:92:82:25:4f:95:c1:89:74:45:fb:48:9e:
         1d:d2:09:97:cd:db:76:30:a6:80:82:84:23:de:93:2a:d1:93:
         fe:e2:5a:82:81:9e:22:b9:86:d1:2a:87:5c:be:61:44:36:16:
         c8:09:47:13:51:ea:08:db:6d:69:66:f9:e8:16:d8:8a:3d:de:
         3c:93:2f:61:78:42:0e:66:3a:49:e4:ca:c8:ed:c4:7d:4d:db:
         f3:09:09:d7:b5:de:03:91:85:41:35:85:0f:17:4c:0b:dc:0e:
         11:66:9f:15:e4:e5:5e:b5:29:f5:ef:89:64:50:90:a0:41:ae:
         88:38:ea:f8:f7:fc:69:e3:87:ba:4f:c2:4a:ea:96:58:3f:ba:
         bd:4e:b5:fe:c7:d1:60:d6:5f:30:67:eb:b7:73:a3:3b:ca:0d:
         5a:00:e8:81:8e:8f:a4:08:48:5b:7b:b2:69:17:e5:9b:4a:19:
         fc:d0:15:96:3b:1a:68:77:22:fa:a1:93:de:4d:76:68:67:9e:
         c3:d3:ef:33:3c:5d:b1:48:14:68:29:38:80:c8:a2:e0:70:4b:
         97:a3:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:17 2026 by rpki-client