Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
File:                     JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json)
Hash identifier:          n0LVOiQJ9svczNC4NuAdCREPQqcxVUjLncQvLW05jIs=
Subject key identifier:   C9:07:B9:97:7D:05:72:D1:BF:9F:F8:02:B6:AC:05:93:72:6D:E2:1D
Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1
Certificate issuer:       /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
Certificate serial:       0599
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
Manifest number:          0592
Signing time:             Sun 04 Oct 2026 23:15:25 +0000
Manifest this update:     Sun 04 Oct 2026 23:15:24 +0000
Manifest next update:     Sun 11 Oct 2026 23:15:24 +0000
Files and hashes:         1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: GZmhI0PIlz9zuK5Jsnfk6PBuZ2uDnJ7md0BlaWPP2Yg=)
                          2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: Vr1eNxMxq3kBIr4VsMma4n31cxZGK6v41pYKsYQ6e3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl
                          rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
        Validity
            Not Before: Oct  4 23:15:24 2026 GMT
            Not After : Oct 11 23:15:24 2026 GMT
        Subject: CN=6ac2de0c-c806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:64:63:0b:d1:63:fd:5f:93:a5:99:a3:3f:
                    e4:f1:8c:cc:c5:33:70:30:c5:ca:69:6c:94:cd:ab:
                    18:e0:82:d3:ce:fd:fc:04:ef:1f:9d:ae:a4:17:97:
                    93:1f:b1:a0:b8:18:4d:a9:fa:59:56:a2:09:a3:67:
                    39:63:a0:c0:46:b9:28:1f:a3:a6:9a:b1:81:dd:26:
                    81:38:b9:2a:16:ad:08:0a:79:ae:19:5c:1b:12:12:
                    fe:5b:7d:a9:ae:4e:72:cf:33:f5:b9:ea:b8:fe:22:
                    98:eb:7e:ec:2c:02:1b:ba:60:29:eb:a6:bc:b6:ef:
                    62:70:94:e8:57:9a:2e:37:43:44:bc:b0:d5:ce:a3:
                    60:e5:a8:9c:04:10:a7:97:9c:f2:78:57:3c:58:08:
                    0f:c8:50:22:24:d5:3f:34:cc:de:75:48:03:93:54:
                    2a:99:a0:75:48:bd:71:a8:d2:3c:ae:92:7b:ff:2a:
                    bd:5c:5b:22:56:99:a6:a1:69:f9:c1:e7:ef:1a:e5:
                    6b:8c:a7:e5:fd:56:94:81:f8:cd:24:d6:ce:39:3d:
                    f2:16:ed:77:1b:0a:54:a3:eb:09:e5:dc:17:74:15:
                    db:20:ca:16:54:8c:2f:ca:5f:ca:da:63:65:49:a7:
                    95:76:b0:a1:5f:13:f0:72:85:60:5e:32:56:92:1c:
                    d1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:07:B9:97:7D:05:72:D1:BF:9F:F8:02:B6:AC:05:93:72:6D:E2:1D
            X509v3 Authority Key Identifier:
                keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ed:a4:d9:7f:aa:42:37:53:a1:94:e7:df:de:ba:29:32:16:
         6d:51:64:9d:fb:73:36:9e:3b:f6:39:9a:12:2d:12:1b:de:a7:
         29:09:5e:aa:bc:ad:3f:85:15:47:bb:ca:b4:68:e6:b3:4d:53:
         7e:31:b2:d1:ab:0c:89:9b:a4:b1:a0:57:34:34:e9:58:a1:fa:
         34:59:0b:80:b0:fc:a4:8d:43:5c:49:66:ce:b2:70:47:fa:34:
         1a:58:b1:8f:c2:b2:7e:5e:9c:c8:27:eb:6c:50:48:5b:79:fd:
         39:92:fb:38:3a:05:3a:96:2c:9b:2b:2a:2c:ba:02:b1:d8:b6:
         0a:4c:c5:f8:e6:0a:72:66:36:95:e9:a7:33:b4:71:43:fa:45:
         96:dd:15:56:9e:51:74:34:6c:11:6b:d3:79:8c:7a:25:ba:1d:
         9d:18:a1:18:4e:97:9c:d5:81:41:65:3b:14:73:db:71:70:07:
         23:14:8b:68:23:17:45:b3:b2:be:21:bc:a5:30:57:4e:c5:cf:
         7e:cd:c4:4a:74:d4:98:90:ad:00:f9:29:01:d3:c2:18:df:39:
         eb:04:0b:3c:21:c6:38:db:0a:88:7e:48:eb:f4:6f:95:b9:7a:
         93:77:c3:c7:26:7b:4f:9a:1b:f6:02:79:9d:09:9c:1b:f5:8c:
         75:f3:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:41:26 2026 by rpki-client