Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft
File:                     JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json)
Hash identifier:          jsjNq/I0iJF1oa53KVBonRXqRuCHfwgBifoCoQU41s8=
Subject key identifier:   E3:69:B6:FD:08:AD:C0:B4:89:61:81:F8:CF:22:53:1C:F8:05:87:3C
Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66
Certificate issuer:       /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466
Certificate serial:       0944
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft
Manifest number:          092E
Signing time:             Tue 06 Oct 2026 20:20:06 +0000
Manifest this update:     Tue 06 Oct 2026 20:20:06 +0000
Manifest next update:     Tue 13 Oct 2026 20:20:06 +0000
Files and hashes:         1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: lRnl3qxDpnYT50vq3YBxVsRVE7ixg+mYGD4DzOs5qH0=)
                          2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: R9VZPmnH58tfNqZqKQPswISeOvXhiF0XOkBwsgMhZbU=)
                          3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: JIARhEibOKG+hTmPalueLjtwAHjRt0AI7B/r+GOVfk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl
                          rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2372 (0x944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D3E8, serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466
        Validity
            Not Before: Oct  6 20:20:06 2026 GMT
            Not After : Oct 13 20:20:06 2026 GMT
        Subject: CN=6ac557f6-d7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:65:6f:24:5c:19:12:2e:5a:55:86:3c:2c:
                    af:52:e0:f3:6f:05:8e:13:08:17:a1:96:d6:8e:9c:
                    49:90:65:2e:4b:8c:c2:c3:37:4f:4e:22:48:36:a0:
                    20:c9:bc:7c:2a:59:ed:1e:a3:e8:52:48:61:12:75:
                    f0:58:65:68:37:33:13:bb:1d:06:2a:45:9b:84:45:
                    08:ea:0e:76:eb:89:e0:c7:52:02:81:31:e0:44:b3:
                    cd:3c:d8:d4:aa:8a:e7:d4:ac:b6:2c:9e:80:45:5b:
                    09:6b:ea:f0:84:cc:fd:45:56:38:42:83:ca:c2:1d:
                    ed:81:62:fd:56:54:22:e5:12:1a:cd:11:6d:ff:df:
                    58:cb:b0:51:7f:d4:85:7a:47:40:ad:0a:16:5c:cd:
                    c8:e2:d3:9f:3f:c3:82:48:c9:3b:12:91:23:b1:97:
                    96:bf:9b:89:de:7a:45:85:97:a7:f4:61:51:36:ae:
                    87:a2:ea:33:d8:72:04:92:ee:87:24:e4:fa:8e:f5:
                    f4:58:f0:be:f9:7c:8d:c3:22:a3:fa:b4:93:8b:f6:
                    76:47:7c:e4:ef:ed:44:c0:46:35:1a:f9:7d:02:0c:
                    9a:bc:6a:30:08:04:97:8d:67:27:eb:7e:75:3b:e5:
                    a3:bf:29:ce:fa:9e:69:93:01:53:b4:94:cb:86:58:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:69:B6:FD:08:AD:C0:B4:89:61:81:F8:CF:22:53:1C:F8:05:87:3C
            X509v3 Authority Key Identifier:
                keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5c:f1:21:ed:83:3c:8a:b7:72:22:16:b5:1d:72:7f:96:bf:
         20:25:64:99:16:fa:94:2e:61:1c:fc:19:9b:3b:41:fd:10:9a:
         7c:59:7d:99:9b:d9:78:c7:d7:3f:3b:58:78:7e:c2:d0:e6:20:
         27:f4:b7:e5:13:c1:7f:e2:f6:76:6a:87:bd:52:b9:67:24:f8:
         94:41:40:6c:01:c7:d8:35:bb:09:7b:ae:8f:73:68:d3:f8:5b:
         eb:01:b5:88:94:47:74:fd:64:a3:9a:ae:e1:bb:8e:76:c3:b4:
         11:8a:1c:a4:7e:06:d6:69:61:d1:10:c9:9b:3c:c6:b3:ce:3a:
         ea:63:05:ed:28:1e:6e:2a:72:89:71:e3:62:b2:86:bb:7f:cc:
         08:78:fb:43:b6:69:b9:cc:2e:cc:27:16:6d:cc:f0:f2:fe:2a:
         12:52:2d:26:18:c3:44:6c:9b:6e:bc:ed:e5:9f:0c:36:ee:a7:
         8b:50:eb:a9:79:26:2f:11:48:09:eb:59:96:6c:04:6d:8d:d6:
         0f:f7:cc:6f:d8:3c:7b:63:8f:08:3f:56:d4:35:8e:d2:c1:6e:
         1d:48:00:09:1b:dc:2c:6a:05:1a:35:db:6f:dd:87:e3:85:21:
         7a:2e:1c:d2:b5:12:39:c9:87:12:32:29:29:06:ef:da:91:f2:
         09:29:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:58:26 2026 by rpki-client