Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
File:                     JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json)
Hash identifier:          qGY8Nj9r2oLgseDZRGtpPAV/EVk7UZZgs0GIEIZlzbw=
Subject key identifier:   EB:D9:46:AF:54:5A:78:05:B3:51:C2:5F:5B:82:F9:BA:65:75:7B:90
Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Certificate issuer:       /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
Manifest number:          02D7
Signing time:             Wed 07 Oct 2026 01:29:38 +0000
Manifest this update:     Wed 07 Oct 2026 01:29:37 +0000
Manifest next update:     Wed 14 Oct 2026 01:29:37 +0000
Files and hashes:         1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: N8mc7Hj37y3L2J3UwMb0OMstSkgvl6yy+r25roLXLng=)
                          2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: SrQLMleMB4YU3ZEQhfOBgMc2EpS7tNcL9YRSRP+wumw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl
                          rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44
        Validity
            Not Before: Oct  7 01:29:37 2026 GMT
            Not After : Oct 14 01:29:37 2026 GMT
        Subject: CN=6ac5a082-02b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:a0:7a:70:0f:46:45:26:16:77:be:3d:8e:
                    b5:9d:74:b2:c3:55:a2:fd:07:40:d8:bf:38:d7:99:
                    19:46:a9:e3:13:49:ce:56:6b:c2:8e:ac:16:d3:0a:
                    b9:d3:7d:76:36:aa:a8:c0:82:0e:78:9c:62:d1:47:
                    b9:91:c7:98:3d:2c:0b:7a:85:f2:b5:13:b6:f2:c0:
                    70:77:56:df:89:59:ab:d1:1d:cc:dc:e1:0e:9e:4a:
                    09:65:f9:82:0b:2b:85:cf:8d:96:58:6f:a3:a4:c2:
                    60:5a:f0:8e:e5:0d:89:00:4f:88:b9:41:62:29:72:
                    9c:cd:0d:20:2e:81:95:33:a5:0f:d7:7e:03:99:6e:
                    67:c7:cb:e3:ec:d5:b4:b5:50:db:98:73:fc:40:3d:
                    f2:f1:51:11:a5:4a:62:f1:1e:55:bb:8a:49:13:db:
                    72:a6:ab:9e:8d:90:cb:da:90:c7:b2:a2:72:fe:46:
                    85:66:bc:18:aa:ad:b3:0f:b5:43:dd:20:59:22:90:
                    75:65:e9:02:2f:8c:71:b3:15:9e:e2:6f:f7:f0:ed:
                    67:0f:0d:3c:51:a2:a6:01:6a:d5:6a:65:75:ae:58:
                    50:8a:b6:90:c5:05:7e:61:e0:ab:11:75:24:04:21:
                    29:69:4f:fb:f0:9d:31:09:b2:79:4f:1f:0a:41:ae:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D9:46:AF:54:5A:78:05:B3:51:C2:5F:5B:82:F9:BA:65:75:7B:90
            X509v3 Authority Key Identifier:
                keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:dc:11:25:c0:73:59:a9:d8:f7:c4:89:59:bf:2b:db:6a:
         fc:37:01:63:db:ab:4e:00:7f:9c:0b:78:d5:14:dc:65:a5:28:
         83:36:6c:e0:95:db:5a:5e:1f:d1:0e:fe:59:83:5b:ef:0b:38:
         21:62:e6:7c:4b:61:d2:32:05:13:3b:a9:b1:e1:ce:08:70:38:
         47:a6:00:69:3c:90:b3:7f:71:c5:b5:58:3b:a3:e7:2e:a2:53:
         b3:b1:af:00:ef:f5:fe:27:96:c3:7b:14:9b:5b:59:aa:45:7c:
         b4:e9:c0:e0:01:b8:32:13:d3:95:7e:a9:0e:f6:d2:96:fa:90:
         e4:cf:9d:13:4b:af:6f:13:66:70:ea:74:e7:0e:f0:76:7c:ce:
         35:9e:d5:ac:1a:8e:75:f1:f6:f8:8c:02:4b:4f:9d:c4:13:5e:
         ff:e4:de:ff:64:63:3a:e3:f1:2b:9a:f2:18:28:0f:7a:40:59:
         60:21:72:3f:17:df:a5:a9:d2:6d:37:6b:62:d0:87:eb:02:6c:
         5a:ec:78:60:ff:3f:07:bc:39:57:21:fa:77:9b:49:7a:cc:00:
         93:17:5b:55:0f:2c:ed:c7:39:c0:e0:2d:d0:d7:b1:42:72:08:
         d9:6e:91:cc:13:7b:fd:f4:2a:72:5a:20:b3:54:38:48:28:d7:
         2d:b8:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:24:57 2026 by rpki-client