Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
File:                     j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json)
Hash identifier:          FpBrobp1Qom7uSyZXUAYA935F4yB50Fr7bVM7qnFXOc=
Subject key identifier:   AE:28:91:EE:89:09:30:D3:32:55:70:C7:99:8E:34:7D:FA:5B:F9:48
Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
Certificate issuer:       /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Certificate serial:       03A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
Manifest number:          0399
Signing time:             Mon 05 Oct 2026 00:41:52 +0000
Manifest this update:     Mon 05 Oct 2026 00:41:51 +0000
Manifest next update:     Mon 12 Oct 2026 00:41:51 +0000
Files and hashes:         1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: emKC1P45h9zoC1HRx6GvfZ+I6tSt596QuaIvkbczkNI=)
                          2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: IaCEDFgWsu0fOu5wbRu+aiuKfmRdek8u7/fO0bD+YLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
                          rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
        Validity
            Not Before: Oct  5 00:41:51 2026 GMT
            Not After : Oct 12 00:41:51 2026 GMT
        Subject: CN=6ac2f250-52ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:b2:6c:ca:7f:e1:1b:35:a2:37:9c:43:85:
                    ec:6e:9c:52:02:c9:f1:ef:68:49:96:3f:79:d2:77:
                    b6:61:1d:e3:32:3d:b7:05:33:da:21:26:e5:1d:c5:
                    52:e6:bb:41:82:81:4e:62:9a:8d:e3:29:ae:c8:11:
                    d4:35:52:48:b2:ee:1c:d3:19:61:e8:87:a5:12:3f:
                    be:fc:9b:8a:2c:77:78:ac:c8:c7:48:47:b4:aa:36:
                    6a:82:e7:ff:2f:79:e1:43:9d:e8:5f:1d:64:82:39:
                    50:5a:24:1d:30:11:56:17:63:bf:54:45:0e:bc:92:
                    30:cd:4f:2d:60:67:0d:fc:95:32:7f:9f:61:95:7a:
                    04:a6:de:d4:d5:45:2b:c5:33:bf:10:f7:8e:3a:f4:
                    2a:9b:a7:46:b8:d9:c0:44:01:16:b2:84:f0:4f:ad:
                    6a:03:2d:29:3a:d8:23:22:f4:52:97:d9:64:ee:20:
                    e6:b4:91:a7:46:b0:76:41:60:b0:cd:64:42:aa:fb:
                    0e:14:0e:33:47:9a:85:fd:a1:85:b5:d9:b7:f1:61:
                    98:68:8d:3d:c7:cc:30:d2:a4:96:8d:41:3b:fd:6e:
                    f4:c0:20:b9:b9:04:74:5c:fb:76:3a:ec:c0:44:62:
                    57:ff:21:ea:ab:42:d3:4d:bb:d9:0e:95:46:b1:d2:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:28:91:EE:89:09:30:D3:32:55:70:C7:99:8E:34:7D:FA:5B:F9:48
            X509v3 Authority Key Identifier:
                keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:44:18:c8:4b:3c:42:7c:d2:de:10:96:6c:ed:80:c1:08:2a:
         0e:3c:6d:56:c9:80:d0:19:4c:92:19:0a:e6:3a:ca:8d:f4:3c:
         81:bb:5b:e9:33:99:92:3e:02:86:d2:21:ff:ea:5d:7e:49:ad:
         38:a5:d9:61:68:ba:c0:45:43:f0:ad:0b:c5:41:de:2e:8d:fa:
         c8:86:be:b2:23:78:b5:8e:1d:37:dd:21:e2:6d:62:06:02:a8:
         09:5c:0d:24:35:c5:0c:7b:67:d2:79:5e:9a:c4:94:0a:2b:df:
         fa:44:62:86:41:42:6b:3d:99:e3:3d:ce:3a:f5:58:69:8a:3a:
         26:ee:bc:bc:43:29:0e:87:18:84:1a:54:96:14:9a:13:70:aa:
         75:81:fd:e3:df:1c:60:14:86:99:fd:4f:61:8d:54:37:c9:e2:
         dc:75:71:fd:f8:8e:08:c0:24:30:8c:ec:61:36:af:b1:ed:e2:
         ac:67:ff:9d:48:a2:17:c7:a3:57:6c:bc:b4:df:57:22:6c:34:
         0a:91:5b:2f:72:32:2c:42:35:3d:b9:47:32:28:2c:7c:ee:f9:
         27:71:cd:ce:32:5a:13:55:6d:f2:a1:71:21:ea:5a:e6:23:c1:
         c2:85:49:e7:38:5f:57:f5:41:78:9f:a0:ed:3a:c7:a9:1d:40:
         f4:e2:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:31:52 2026 by rpki-client