Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File:                     JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier:          NMXcr4I8MQehSUQ1aOglR63KoW5VfaJ0sghEZkbmCj8=
Subject key identifier:   D9:4D:94:CC:CF:F5:80:04:F2:03:A2:18:02:7C:0F:2B:72:6A:37:3C
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer:       /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial:       25F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number:          25DE
Signing time:             Fri 02 Oct 2026 15:49:43 +0000
Manifest this update:     Fri 02 Oct 2026 15:49:42 +0000
Manifest next update:     Fri 09 Oct 2026 15:49:42 +0000
Files and hashes:         1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: K6E+y3A74R5SHwBVjiUR58xUEXTw2EZhACjzH1bU02A=)
                          2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: 0hrvh4D9EDd6MqNbEXtgkqXuTp28uKtsLouLemWrWd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9719 (0x25f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
        Validity
            Not Before: Oct  2 15:49:42 2026 GMT
            Not After : Oct  9 15:49:42 2026 GMT
        Subject: CN=6abfd296-c4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:67:c1:06:dc:e2:30:cb:2c:72:76:72:51:
                    87:55:26:5a:a7:f0:71:03:33:99:e1:fa:6c:92:1f:
                    e1:a5:2b:57:68:52:9e:03:2c:c1:52:4c:f9:86:df:
                    3b:54:bb:69:1e:d1:fb:e8:22:98:07:44:1b:47:04:
                    04:76:0d:83:4f:74:24:2d:f5:75:6b:19:06:4b:5e:
                    b4:71:4d:32:2e:8a:05:bc:8e:b8:d0:aa:13:39:9d:
                    e2:9f:99:67:bb:b3:dc:02:10:d2:45:2e:6f:72:5d:
                    3c:db:60:36:db:7a:25:23:7e:0b:c2:00:94:63:53:
                    d7:16:3c:6c:c1:26:7c:bc:a9:b7:c8:cb:27:dc:92:
                    59:6d:29:a1:f2:3b:38:5d:cc:7c:12:86:49:d0:88:
                    6c:23:11:81:7f:ed:4e:c8:d6:98:80:18:71:95:3e:
                    4c:64:51:06:62:35:be:6a:e9:c4:12:33:a8:73:64:
                    b1:cd:36:b8:00:51:f1:e5:3a:21:43:97:48:9e:c2:
                    26:43:f6:8d:2a:1b:0b:9c:36:93:3c:37:d5:6f:68:
                    45:eb:84:f2:5b:7d:18:57:44:9f:eb:33:2e:dc:3b:
                    30:a0:f0:60:b1:f1:43:76:ed:a5:ee:85:c4:f7:05:
                    27:cb:32:f8:10:dc:87:96:20:fa:ae:9f:4e:97:f2:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:94:CC:CF:F5:80:04:F2:03:A2:18:02:7C:0F:2B:72:6A:37:3C
            X509v3 Authority Key Identifier:
                keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8c:fd:6a:39:cf:e9:db:9b:8b:08:62:77:9b:f3:30:e6:ab:
         c5:4b:e0:dc:fb:25:af:ca:9d:6a:7a:9f:82:03:88:10:f3:78:
         51:f6:1a:61:92:2e:b0:6e:e9:9b:72:4b:d7:37:34:1d:ec:95:
         1f:38:27:1f:20:ef:84:23:e6:2d:c1:fd:d6:43:7a:bc:36:4b:
         08:35:d0:d6:03:a2:a7:7c:71:aa:3e:6e:09:ed:e6:43:0e:2a:
         aa:a0:f9:9f:45:3e:24:64:33:69:7d:34:17:d8:2d:b8:06:ce:
         47:ad:1b:e2:6d:66:5b:0f:af:ce:51:a0:1c:94:04:93:7f:fc:
         06:41:98:3c:25:f6:83:87:81:74:87:89:6e:68:cf:94:c8:43:
         86:7e:65:2f:0c:9b:43:2d:52:cf:27:34:fb:5a:bb:bd:d3:54:
         a2:55:47:2f:0c:40:b5:0b:bb:28:6c:a5:b0:99:9a:37:9e:0b:
         1a:bf:a5:72:fb:fb:66:d7:43:75:e4:cc:66:00:bc:e3:5f:9f:
         0d:9e:b3:a9:2b:78:6b:78:b7:db:b4:52:1e:52:66:ca:94:6b:
         ae:ea:01:30:a1:9a:47:81:e1:1d:46:ab:2e:ee:4c:a6:e0:9a:
         0c:29:2d:8f:60:9a:df:ea:20:99:0c:97:62:62:de:de:44:13:
         4e:41:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:42:49 2026 by rpki-client