Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
File:                     jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json)
Hash identifier:          8/JApQU5KsNnvxXM6i2zQ1nfkPG1mDB/cyMW9+1fvtQ=
Subject key identifier:   AC:CE:EE:CA:95:61:29:09:88:1F:74:B5:29:74:10:DB:C6:51:8E:C6
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0BBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
Manifest number:          0B41
Signing time:             Tue 08 Sep 2026 19:26:05 +0000
Manifest this update:     Tue 08 Sep 2026 19:26:05 +0000
Manifest next update:     Tue 15 Sep 2026 19:26:05 +0000
Files and hashes:         1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: zFPoVCAgPb61kCk/qzWmvdaAbu7FqeYBgYxfSUMmeyA=)
                          2: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 4BaT2JTA9bjMqnRuq+BaRHn7mTeNRu7GRwmCLX+HA9c=)
                          3: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: EarqUx/FVYltAoSVNdODoWwpte23NdNnn8UmCsSABy8=)
                          4: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: vPNos8o7nCd81fJVDTNku57N+twICdY7sKM6khknmNA=)
                          5: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: 38HlV63ukODwZeoxTjKexJBxpd4PyRdah8ox3k9K/uk=)
                          6: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: ATI8E4LKt1tDeuSmmOcUtMfprMiPriQnS5NikBuK6Ww=)
                          7: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: 4BxNlRQfG7e9eIyKUxoLWMzCNpqeIW8fRNXSiyA6bk4=)
                          8: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: c+jS9T730vF+5SWP52gID7wtIHfEyjgTtK22kEU0TtI=)
                          9: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: UJCsM9MnWfLvg3cxfJWjQ8JzrYtLh4erweU5OsVwFn8=)
                          10: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: UuQlPTQUqEWbhmqpHgNnEn3hybDrTYbpE8O6YzTBu68=)
                          11: F4FCC41E648311EC88370386C4F9AE02.roa (hash: XxusVMnGcxcxLwh5Mc9S65cgk/ejfkxjnK++VGWj67c=)
                          12: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: swLkF62W36YEhpiZJn5J+9WNnQAfcHEZNTTTGF43b+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 19:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Sep  8 19:26:05 2026 GMT
            Not After : Sep 15 19:26:05 2026 GMT
        Subject: CN=6aa0614d-7d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:87:f8:7b:55:44:a5:f3:87:69:b3:90:b0:
                    dc:60:d0:79:4e:b2:e1:ac:79:45:2b:55:78:b2:42:
                    64:c5:75:65:ef:1f:8e:7e:21:a1:dc:e1:e2:05:1a:
                    64:8f:a0:b6:39:17:15:08:a0:6e:60:9a:42:67:57:
                    48:26:3b:1b:9f:dd:56:4a:84:d4:bd:c3:0a:c3:a5:
                    ab:d8:f9:72:30:8a:75:a2:80:ac:b0:34:7f:a1:ae:
                    9f:ea:e6:2c:9a:e2:c8:d7:2d:46:f4:b4:3c:d7:10:
                    5f:e7:4f:21:83:4d:58:bc:dd:b8:6a:4c:e1:01:92:
                    e2:ed:f4:34:9d:02:4e:24:9e:5a:c1:90:ab:29:1d:
                    59:ef:41:54:bb:7c:38:eb:ca:fb:db:00:d7:2a:93:
                    45:fa:34:6f:93:5c:57:26:de:f0:a8:f5:fb:8b:d0:
                    5d:61:dd:8c:a7:a1:a7:3b:a0:eb:cf:55:cd:6a:73:
                    db:4b:07:f1:bc:59:04:25:5e:d7:80:ea:44:e6:db:
                    45:f9:02:ee:f8:3e:12:bb:e3:6a:b1:0b:5b:81:4d:
                    79:6b:a0:09:cb:13:24:f7:34:68:1b:81:0b:8a:1a:
                    29:92:2f:21:3a:1a:21:81:b9:dd:18:c6:b7:a5:2f:
                    03:c0:c0:e8:b8:d9:40:16:d1:4a:66:c3:64:67:47:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CE:EE:CA:95:61:29:09:88:1F:74:B5:29:74:10:DB:C6:51:8E:C6
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f5:08:e5:6b:18:06:e0:b7:6f:f6:e9:a4:3a:53:23:7a:54:
         e9:bd:31:c9:39:1b:7a:6f:0a:c6:27:39:89:d1:02:a2:b6:ee:
         3f:a2:81:5f:74:dc:c9:15:d5:42:66:d0:df:4f:5f:25:b7:42:
         c7:45:2d:ee:00:d1:47:37:14:13:51:2b:1d:5c:a9:b7:b7:db:
         6b:af:20:db:4c:d9:ac:7b:a1:06:4f:f1:ae:c9:6a:9f:17:1f:
         c5:de:76:af:f1:08:3f:fe:93:1c:8e:ea:38:b8:f3:be:82:e3:
         c9:a7:33:e1:5c:d1:c3:5d:6a:80:98:03:a1:c4:c0:9c:3c:36:
         49:ad:bd:05:a7:30:d3:f5:e9:63:f2:82:98:b2:3c:08:e1:0b:
         33:25:1b:f8:a7:93:c0:2b:dd:33:f7:a2:fc:26:b5:da:dd:90:
         4e:c8:43:dc:15:b8:dd:a5:ba:c6:ad:df:e4:a7:42:a2:fc:e3:
         b6:25:b3:8c:0d:fd:14:6c:fb:60:d6:24:bd:97:be:2a:30:25:
         4f:50:01:b3:06:e2:57:06:0c:d2:73:97:01:dd:5e:f4:4b:26:
         45:79:2c:fb:e1:f6:de:30:f2:08:3f:89:21:81:3b:1e:23:07:
         5f:7f:ef:07:6f:49:7c:e3:37:6b:2b:61:e2:74:79:39:0f:fb:
         b9:6c:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:39:58 2026 by rpki-client