Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
File:                     Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json)
Hash identifier:          jmYIHgLsNVLRw83OGTbvL4VW1rRdi1NmKCNSvGfYODY=
Subject key identifier:   35:30:86:C2:4C:95:DA:83:83:F7:3F:B9:A8:69:8C:5D:0F:73:71:47
Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0
Certificate issuer:       /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
Manifest number:          0122
Signing time:             Sat 05 Sep 2026 05:36:42 +0000
Manifest this update:     Sat 05 Sep 2026 05:36:41 +0000
Manifest next update:     Sat 12 Sep 2026 05:36:41 +0000
Files and hashes:         1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: a+KHL16QoP1F1lQfceTSH6W7utjuJecMqXvO2iP4P0w=)
                          2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: DGkul+ozckWHPUCME/QWLmgNY4q/l+teYlrEvBr8aK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl
                          rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 05:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155FAB, serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
        Validity
            Not Before: Sep  5 05:36:41 2026 GMT
            Not After : Sep 12 05:36:41 2026 GMT
        Subject: CN=6a9baa6a-8460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:b0:82:32:99:f2:f2:19:78:42:cb:b9:6d:
                    65:58:c3:c8:2b:4e:f5:47:45:2d:24:67:29:91:e3:
                    bc:c0:c6:b6:d2:9f:ac:21:bd:ce:c4:7e:fe:d2:5f:
                    84:cb:42:9c:b9:cc:1c:0b:94:5a:48:00:c0:eb:45:
                    85:da:5c:d7:b1:a8:8f:fb:8a:c9:2c:9a:e5:45:6c:
                    61:74:25:39:78:fa:86:81:60:33:ff:02:c3:69:34:
                    dd:81:07:85:f4:1f:0a:ae:01:3f:28:ec:31:dd:7f:
                    ed:3f:85:25:e1:49:ca:2a:55:4e:1e:e8:1a:7c:32:
                    20:f2:80:a8:b0:12:f7:7e:b1:0d:3e:3b:fb:6c:a6:
                    53:48:3e:18:f1:72:02:e7:ab:37:05:8c:94:57:3a:
                    02:ce:a5:49:47:b8:9b:38:8f:b2:e9:94:b3:64:45:
                    40:9f:81:0b:48:fa:b2:41:74:e7:3b:c4:1f:1b:f5:
                    71:98:62:91:aa:81:9d:ef:a1:1a:bd:89:3c:3e:c4:
                    3c:3e:ce:34:5c:46:76:1e:63:d6:c0:46:c9:1b:02:
                    34:a8:6b:fe:b3:b3:6d:1c:13:f7:7f:72:a1:b6:ee:
                    cb:f3:6c:eb:d1:e3:19:4c:ad:ba:58:44:ca:33:7d:
                    54:76:44:5f:64:95:8e:eb:a3:f2:5b:f8:f4:1f:94:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:30:86:C2:4C:95:DA:83:83:F7:3F:B9:A8:69:8C:5D:0F:73:71:47
            X509v3 Authority Key Identifier:
                keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:05:9d:ed:d0:5b:37:f9:d3:ea:25:41:f0:12:5d:0e:22:b9:
         fa:e2:0f:61:cd:7c:e0:b6:b9:35:13:54:5b:3d:38:32:d7:6c:
         61:f5:dd:54:65:fd:69:92:5b:a6:0e:fe:9e:fe:e7:51:f4:ea:
         23:24:b4:64:63:3a:f0:47:bd:a8:b0:b0:1a:bc:57:03:b7:dc:
         a4:b1:cc:c1:91:20:b0:8e:9f:ef:3d:70:fb:a9:0a:0f:58:b2:
         cb:40:f9:97:89:97:4d:b8:43:75:61:49:db:d0:cd:20:bd:14:
         11:6e:b7:7d:ff:7b:0d:9a:a9:fc:ab:02:81:0b:5a:d7:9d:e4:
         cc:47:b8:9b:b8:40:53:84:8e:43:7d:26:e0:db:48:fe:d3:06:
         6b:27:7b:c6:8b:b4:b2:de:b1:4e:ad:50:ec:38:a5:39:8c:67:
         d1:3b:a8:a6:06:f4:6e:c0:44:2a:e8:f1:06:b3:0d:5d:a8:c9:
         da:0b:bd:e9:fa:5f:44:71:68:62:20:ac:c2:ed:3c:75:ac:4d:
         1d:fc:78:37:b8:5e:c3:f0:2a:1c:01:f6:ec:3f:af:54:b6:56:
         04:c6:b6:52:19:75:c4:bd:5b:41:62:8e:a1:5e:75:53:71:79:
         61:e2:76:ef:af:75:39:0f:b0:bf:ae:84:23:e5:f7:c7:d0:5d:
         cf:76:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:51:33 2026 by rpki-client