Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
File:                     jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json)
Hash identifier:          hSXfIOEffsOqYAW5aEhPSL7om0fkyWFQwjD14f3wr14=
Subject key identifier:   EF:B5:64:99:05:30:16:4E:B4:31:22:84:90:2E:69:F7:6E:57:22:38
Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
Certificate issuer:       /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
Manifest number:          01A1
Signing time:             Wed 07 Oct 2026 04:41:30 +0000
Manifest this update:     Wed 07 Oct 2026 04:41:30 +0000
Manifest next update:     Wed 14 Oct 2026 04:41:30 +0000
Files and hashes:         1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: SJOVzg/dpDTBwA98pG1R9UtGrH5hll0Zygyd7zC5nhU=)
                          2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 9bbDY8F7VTJe7fWMHNRwEy390EAPlvg4QCMeRuahlMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
                          rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
        Validity
            Not Before: Oct  7 04:41:30 2026 GMT
            Not After : Oct 14 04:41:30 2026 GMT
        Subject: CN=6ac5cd7a-9523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:98:f6:a7:b0:56:91:e4:02:8c:b4:86:57:
                    de:8a:a2:75:d9:5f:f2:05:9e:bc:11:1a:85:14:36:
                    c5:bc:77:cf:24:30:8e:d8:85:68:fa:73:a1:51:fa:
                    af:12:d7:34:60:13:cb:56:c0:d1:d6:f9:45:e1:ff:
                    fe:7c:ac:82:54:df:1b:c6:7f:78:4f:6f:6d:ad:39:
                    c0:d1:a6:f1:76:52:0d:46:d2:d9:bf:20:df:d4:1e:
                    bd:1e:65:28:d1:fb:13:44:52:f4:2e:98:bf:82:4c:
                    e3:88:75:2b:32:c1:5a:a4:ea:fd:a8:43:d2:a6:69:
                    da:42:39:51:a0:b3:1b:e0:b9:88:d5:1f:0f:38:aa:
                    07:d2:0b:33:14:b1:9f:9b:22:45:8a:d7:7b:b1:29:
                    b3:9a:e9:40:9d:65:d4:c0:e3:a7:3b:29:02:b6:30:
                    7a:4d:37:41:22:9a:47:19:fb:de:ed:22:04:f3:79:
                    35:0c:c6:2c:4c:f7:ae:89:cd:f7:1f:9c:25:eb:8f:
                    00:fe:33:f9:c1:e4:d4:ef:da:f7:2e:2e:16:5e:57:
                    bb:d8:9b:57:66:e4:39:c5:73:99:e4:10:3d:e7:c4:
                    a4:82:14:ec:5d:5e:79:00:ac:74:44:80:69:fb:20:
                    c6:4d:ff:3e:c9:1e:95:40:68:65:5e:d4:d3:3a:ae:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B5:64:99:05:30:16:4E:B4:31:22:84:90:2E:69:F7:6E:57:22:38
            X509v3 Authority Key Identifier:
                keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:52:36:19:ca:6f:41:82:cc:61:8e:f2:aa:16:13:cf:c6:cb:
         6b:4f:a6:05:13:1c:15:ab:f3:52:2d:d9:85:bd:e5:61:02:3d:
         c3:6e:11:77:fe:2e:36:61:23:e0:6d:64:b3:fa:77:e9:4d:ad:
         43:6e:34:fa:55:1d:b3:95:91:82:5c:27:35:e0:c3:f7:f4:b2:
         aa:05:c6:57:08:b9:10:18:4c:87:4c:a0:2d:30:76:d6:9c:49:
         97:08:34:0a:ba:23:b7:1d:55:de:83:7d:11:12:90:2c:41:90:
         da:f9:87:62:fd:e3:e3:c3:13:ae:f4:40:2e:44:9d:cc:43:9e:
         06:1b:bd:c8:f3:cb:0a:fe:63:fa:47:7c:01:34:2b:99:8b:fe:
         f4:f4:a1:da:51:15:27:ba:ab:d2:36:6c:38:a5:c9:ed:fe:cb:
         c0:b9:fb:a4:bd:81:1a:9b:1e:e9:70:c3:0e:ac:39:89:0c:67:
         7f:40:dd:09:8f:86:69:0c:b2:05:df:cc:a3:f3:a5:d6:b2:e3:
         84:33:4f:af:9d:a9:87:26:d0:d8:4b:17:d7:42:46:e3:a4:64:
         b0:8b:ac:92:b3:4a:05:63:ef:4b:b6:a0:81:02:64:ed:7a:87:
         f4:6f:f7:97:40:1c:5f:9c:1f:f2:fe:3a:38:8b:7d:02:39:8b:
         2d:d1:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:19:00 2026 by rpki-client