Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File:                     JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier:          AZjnSMwo7kETdjnAfOAc+2Cksw9csdNCcR9Z5+4LJLA=
Subject key identifier:   1C:23:EC:C1:14:24:42:D7:0E:81:66:A9:BB:92:E0:00:A1:FF:6F:E3
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer:       /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number:          01D1
Signing time:             Sat 05 Sep 2026 03:33:39 +0000
Manifest this update:     Sat 05 Sep 2026 03:33:38 +0000
Manifest next update:     Sat 12 Sep 2026 03:33:38 +0000
Files and hashes:         1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: K7/TfuOBPJPGC6EvcEte7gAIhKxce6fki/WzlyFtXgw=)
                          2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: HMdh5qQbMBugOBpZmqbwDLsg01Y9XQwAxnZyu8Z1p8o=)
                          3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: Y/Om0EuE4DxLCw/qgrFqWJHVkuUt8pRbj21WLvoBDpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
                          rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 03:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
        Validity
            Not Before: Sep  5 03:33:38 2026 GMT
            Not After : Sep 12 03:33:38 2026 GMT
        Subject: CN=6a9b8d92-0484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:57:d0:d7:2f:c0:01:d5:1c:e9:bb:b7:e8:
                    5d:c2:f5:bf:0f:67:ba:ba:9f:55:da:e6:dc:3b:e6:
                    2d:34:be:5d:bc:a5:8d:d0:68:42:9d:f4:63:17:21:
                    be:b0:3d:36:cb:cf:5b:64:bf:63:59:59:45:97:91:
                    e8:b0:94:34:2d:12:03:35:97:16:3c:a7:32:91:e6:
                    62:3f:c3:38:60:11:0a:9a:55:74:20:f2:45:6f:9f:
                    53:ce:41:bf:ad:1d:25:f4:4d:4f:1e:5f:3d:82:53:
                    df:65:1e:17:e6:86:97:d2:a8:e8:f1:ed:34:c1:d8:
                    fe:1b:c1:9c:0f:9e:c3:be:44:f4:2d:15:de:6f:8a:
                    c3:a9:11:d8:13:1f:7b:b9:92:7e:9c:bd:18:df:cf:
                    39:b3:ea:da:8c:68:48:d2:36:fe:1a:4f:7d:2b:07:
                    ef:75:f9:fa:b0:14:95:e2:e9:c4:c4:c6:ca:74:e4:
                    cc:80:51:0f:18:a0:aa:12:0b:a7:cb:42:35:53:b4:
                    09:84:3d:06:c3:15:59:c5:a0:89:36:f9:d9:96:3e:
                    78:62:37:e9:ac:9a:d1:03:38:de:aa:3b:db:3c:6d:
                    d9:d9:2a:0c:3f:ea:1a:42:08:23:55:6f:21:85:52:
                    5c:f9:49:db:19:be:e6:4f:a9:aa:d0:81:7f:61:91:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:23:EC:C1:14:24:42:D7:0E:81:66:A9:BB:92:E0:00:A1:FF:6F:E3
            X509v3 Authority Key Identifier:
                keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:8e:e2:ae:97:38:7c:df:3d:fd:36:5b:dd:67:ce:ad:6f:
         3c:37:d7:df:6f:c1:6b:5b:df:20:e4:18:06:68:64:d9:1c:a9:
         7a:70:13:8c:ef:79:cb:3c:90:d4:72:7c:2c:99:01:71:53:fc:
         95:22:72:bc:5e:64:94:16:23:00:fb:99:f0:6c:c7:c0:39:51:
         2a:7f:03:9a:32:ac:3a:70:4b:2b:35:19:01:33:c7:9b:9e:06:
         ee:1e:ac:52:2c:3c:4e:cb:11:f5:a5:71:b6:e9:5e:6c:48:00:
         4d:02:37:34:59:59:bd:61:51:57:d2:78:59:0a:69:07:26:b5:
         dc:14:3d:b9:a5:43:6e:7c:ee:10:bc:31:2e:da:1d:ad:83:8c:
         42:d0:6c:63:83:c6:55:c4:b4:25:ba:d5:5c:32:ab:fe:9a:8d:
         8d:a0:fb:fd:af:c6:2f:ea:cb:3c:45:7d:7c:49:ba:20:56:2c:
         ea:e7:51:c5:c6:da:05:b6:0e:26:e6:cf:76:e7:c8:b0:21:e3:
         73:66:a9:30:15:6b:53:be:c6:2c:bd:cc:76:88:1c:0e:12:3c:
         2a:1a:18:19:03:61:fd:b5:c6:2f:73:52:c8:16:c7:49:f0:c5:
         3d:3e:6d:1b:a7:af:ce:c8:93:c7:10:c7:8e:61:f8:c9:d3:f0:
         47:bf:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:35:50 2026 by rpki-client