Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          A4A88kHb6SQISMNeeXt2seLAKQJHegIuJKt5oFjKOeo=
Subject key identifier:   F5:4E:BC:6A:61:52:37:FD:0C:D6:0B:5C:7D:EE:94:AF:29:5E:DE:C0
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          0245
Signing time:             Wed 09 Sep 2026 02:47:18 +0000
Manifest this update:     Wed 09 Sep 2026 02:47:18 +0000
Manifest next update:     Wed 16 Sep 2026 02:47:18 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: ubBQabPb7RTI++Z2j2ZumuH3yfLfSk9psSDSiCqZDiE=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: 2GxHjo4LAZa6xTK/E+JUdOOe1BBXua7ccz+Bu9RbDt0=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: HN5m9iiGmOPi7M0g3oqbmGw29tiEq8psLVzdLAeKejA=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: o9CJ5rmrT9hbqYWuYS8js+DGI0LN9I9OVqxViVX0Lyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 02:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Sep  9 02:47:18 2026 GMT
            Not After : Sep 16 02:47:18 2026 GMT
        Subject: CN=6aa0c8b6-a6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:a8:e0:2a:36:82:e9:2a:1a:3b:69:dd:c4:
                    11:7c:cc:2e:05:ce:6e:93:4e:e8:db:53:28:70:fc:
                    03:2a:d3:dc:91:11:7d:ea:98:46:94:db:4d:fc:52:
                    f3:9c:eb:ae:fb:e4:51:f6:2e:4d:06:c9:0d:98:70:
                    fb:8c:40:fc:40:db:f2:07:6e:6f:3e:7e:61:de:ca:
                    58:93:56:a9:e3:92:a0:a4:a6:91:4a:0b:0f:29:ee:
                    56:c6:1a:4b:47:ab:56:74:3e:4e:7f:5b:fd:2a:f7:
                    f0:d1:79:fa:ab:39:a6:dd:c7:1f:9a:60:a1:c0:71:
                    b9:f3:a5:ff:d5:4b:4a:7f:48:67:4b:cf:04:56:25:
                    56:da:b2:1d:b8:dd:cc:15:46:03:51:3c:3d:49:17:
                    c4:20:34:26:0a:06:3b:03:42:a5:b0:da:cc:82:57:
                    45:21:44:84:f2:a0:c3:98:f9:45:85:a4:9e:d4:55:
                    ef:15:b5:23:72:16:9c:a9:4e:00:6a:8b:44:ef:de:
                    c9:89:4c:a3:89:70:d3:e3:11:4d:8f:8f:92:33:45:
                    a1:33:dd:ba:80:e7:42:8a:20:65:b6:3e:ab:2c:19:
                    47:bc:d3:d0:9d:c1:48:5e:1e:86:ae:60:dd:78:ce:
                    4a:bf:65:0f:6e:ab:a4:00:2d:cb:4c:3a:f5:33:b6:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:BC:6A:61:52:37:FD:0C:D6:0B:5C:7D:EE:94:AF:29:5E:DE:C0
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:56:bf:3d:ea:ed:77:61:d3:eb:27:cb:f1:ea:37:fc:87:16:
         63:af:01:9c:a1:61:5b:fa:7a:c4:f3:8d:13:b2:1b:df:82:f5:
         8b:ad:ab:7c:db:6c:8f:a0:90:2d:4d:e8:b8:ba:61:3a:f5:51:
         46:46:90:10:bb:26:a7:85:4e:7f:38:d0:6d:1a:ba:d8:e7:87:
         81:27:f8:96:68:2d:e6:0d:dc:e5:dc:cf:40:69:6c:b6:87:4a:
         6d:ea:16:73:7c:23:d0:e0:e5:1d:c5:30:18:2e:8a:05:23:7c:
         e0:e6:70:6f:58:74:68:46:3c:e8:b7:ae:ec:e5:53:b1:7b:2d:
         70:db:31:09:6b:64:77:a3:59:af:69:b8:40:ae:ca:ee:f2:6d:
         0c:af:6f:13:12:0d:f8:4a:e0:91:6f:1e:92:6a:fe:c4:82:2a:
         f4:8d:1f:ff:8a:d1:3f:72:c3:4e:5c:ae:2f:50:8d:d4:7c:3e:
         a5:a7:7c:b4:8a:60:cc:ae:d5:17:bf:9c:69:43:10:6f:f5:97:
         7f:eb:99:ea:42:8c:56:a8:66:d6:d4:38:e5:1e:e0:8c:a6:30:
         5e:71:83:a4:3c:1d:7b:2a:fd:8b:16:17:58:b7:18:79:73:07:
         a5:4d:48:1f:b0:bf:be:29:c9:3d:77:ca:97:b9:09:35:3d:22:
         64:08:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:47:59 2026 by rpki-client