Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File:                     jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier:          dA8STMXWIKfhdwomWjeyqBXbQagHdX+/pWghAY0nBGE=
Subject key identifier:   DD:62:F0:14:C9:31:FE:50:36:CF:31:7F:A6:DB:59:F5:50:02:0B:96
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       02E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number:          02D4
Signing time:             Sat 15 Aug 2026 01:16:24 +0000
Manifest this update:     Sat 15 Aug 2026 01:16:23 +0000
Manifest next update:     Sat 22 Aug 2026 01:16:23 +0000
Files and hashes:         1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: VIWtrxtyovuNWjQrx1NLIXLiVL07gruf5OGcHC4FSW4=)
                          2: 5E73EF1028B411F0A1AE5A68C4F9AE02.roa (hash: Vebt9O/IkdXmftIw76IOG9N8DrlxVAK/4Vf1+tpsbVE=)
                          3: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (hash: SHGrRXj8iL8y62i+lXT9bwWoMs/o/3OL7e7V5YLO+Uk=)
                          4: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (hash: ItDB42YA4akVh7SOSm7en+1Za7DGiN8sAhKI1UhXvfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 01:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: Aug 15 01:16:23 2026 GMT
            Not After : Aug 22 01:16:23 2026 GMT
        Subject: CN=6a7fbde7-faf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:c2:0c:e9:78:af:b6:ba:a5:3f:6b:7a:7c:
                    60:13:23:eb:15:e4:3a:65:b5:06:4d:34:dc:b4:c0:
                    9e:50:1d:19:4b:4e:93:ad:98:30:bb:46:94:9d:33:
                    b9:0d:75:69:34:52:a2:a3:ed:72:ee:08:19:71:b5:
                    60:aa:7f:2b:a3:06:c2:16:ee:b5:19:1c:4b:1f:f5:
                    e5:52:55:b4:09:49:6f:b8:73:f7:6a:3c:99:6b:63:
                    b3:43:61:73:50:db:87:c7:6b:1d:24:63:c3:3c:5a:
                    4d:de:a5:bb:54:67:8c:07:ae:cb:8a:a9:f5:79:e4:
                    0a:04:03:6c:74:d7:dd:15:69:a6:0b:c2:76:55:ec:
                    4d:7a:6d:27:c9:22:e6:90:c5:3b:de:46:ec:0f:de:
                    f8:d7:84:78:56:eb:9d:82:10:00:16:1a:0b:e0:52:
                    8b:ae:b7:29:6f:ec:35:6d:e4:75:18:56:1d:5b:95:
                    21:b5:46:65:70:dd:84:e0:fd:ee:4e:bd:e3:92:b5:
                    c5:f2:1b:44:1a:87:85:00:17:30:30:2c:67:bd:a3:
                    09:30:25:5f:2c:f5:fd:9d:59:3a:fc:70:fd:17:de:
                    ea:06:9c:f6:2a:dc:f3:7e:48:68:43:3b:cd:40:01:
                    e2:20:6b:02:91:17:dc:87:d2:63:5a:5e:de:c9:84:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:F0:14:C9:31:FE:50:36:CF:31:7F:A6:DB:59:F5:50:02:0B:96
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:42:cd:fa:6c:a0:d5:5d:9a:79:90:a0:b7:a1:c9:9f:ea:89:
         21:5f:7f:e0:dc:a0:e3:1c:03:0c:34:96:75:ef:91:4b:cd:98:
         ce:f5:7f:ee:d2:82:29:c4:21:4d:52:a4:bf:87:81:86:1e:19:
         27:76:e1:9a:b4:06:cd:34:30:b5:68:d4:82:76:51:63:5e:4f:
         e9:85:3f:60:c1:28:3c:fb:e2:5e:fb:e1:df:86:f0:d8:7c:84:
         73:f5:be:bb:ed:b4:9d:57:82:09:8f:77:24:e0:c4:eb:82:f1:
         b7:88:40:55:af:cc:cf:be:dd:29:33:f0:6f:e2:bc:cd:66:9b:
         0d:7c:95:2f:45:09:a4:49:de:69:51:87:cf:84:c0:1e:2a:61:
         7e:d9:76:59:7d:bc:f6:de:e1:61:94:37:56:5e:2b:38:09:c2:
         c2:12:c2:8d:cf:d8:48:79:22:70:66:04:74:02:7b:11:dc:32:
         26:a4:09:09:53:be:0b:4b:e7:7e:2e:97:7c:22:60:8f:40:ca:
         e3:6c:fa:a1:b1:47:be:f2:d0:f4:e9:6d:69:1a:97:2b:25:59:
         3c:2c:a3:80:9f:0a:b6:71:3a:31:34:88:c5:42:81:58:67:cc:
         03:87:86:03:e1:b6:95:74:3d:c4:ac:d4:4b:24:9c:55:d6:4b:
         54:82:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:05:05 2026 by rpki-client