Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File:                     JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier:          EH0PIuvXj6uJyxPHhVHuCmeZHjx7ev+ooN38etBR8S8=
Subject key identifier:   19:90:23:73:64:1F:A8:AE:5E:46:E3:95:AD:B9:5D:C2:13:5E:BA:78
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer:       /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial:       072A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number:          0711
Signing time:             Fri 04 Sep 2026 21:57:02 +0000
Manifest this update:     Fri 04 Sep 2026 21:57:01 +0000
Manifest next update:     Fri 11 Sep 2026 21:57:01 +0000
Files and hashes:         1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: LQK7zbPM1w2VbjS1+ADPU8OrPCvbhWZzYU4z+KueEUk=)
                          2: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: oxRH/FtaAdPMYWN/lkzxOotTfl395O31d3r/LMbHvxs=)
                          3: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: qu6jbzeI2M4KZM805xmZbJ8ZA02mORrGdIlgFsX0p6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
                          rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
        Validity
            Not Before: Sep  4 21:57:01 2026 GMT
            Not After : Sep 11 21:57:01 2026 GMT
        Subject: CN=6a9b3ead-f395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:fb:bd:1f:47:79:c6:7f:6c:2a:d5:27:65:
                    11:c7:62:1e:ec:cf:ff:50:b2:e7:8e:67:67:37:84:
                    f4:fb:d9:2b:85:7e:9f:11:74:b1:69:4c:ea:8c:6c:
                    f7:1e:9e:d4:5b:40:8d:c8:ea:2e:a4:94:98:ee:99:
                    a7:dd:8f:69:b1:e8:99:c2:ec:b5:43:1d:ea:17:b7:
                    e8:fd:df:1d:c8:9f:07:12:50:d5:0f:6f:bf:c8:09:
                    f6:4e:98:0d:bc:41:7a:91:54:ee:d7:4e:f2:e1:8e:
                    2c:b2:f0:95:3e:38:1c:df:23:d9:65:9a:40:8d:12:
                    41:a7:c4:67:b8:c9:4a:96:1f:ea:0b:0f:2b:c9:74:
                    f0:9e:42:7d:00:9e:c8:6d:6e:87:99:06:71:62:c0:
                    ca:9f:8c:40:b7:57:38:92:69:c1:d7:ff:66:7e:6d:
                    1d:4d:ff:64:48:9f:5f:84:f9:9f:bb:9d:9c:94:92:
                    f2:e3:f9:13:62:d0:b1:3c:5b:3f:92:fc:bf:4e:0e:
                    a3:b3:ac:4a:db:fb:19:0c:cf:eb:38:5c:14:92:c3:
                    85:01:6d:55:bc:eb:f1:10:1a:1d:20:dd:21:c6:cf:
                    d0:c2:b3:05:4a:82:87:dd:d7:b4:cf:9b:a9:ae:35:
                    48:4d:a2:2d:22:42:c2:77:a8:df:69:8f:17:a2:94:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:90:23:73:64:1F:A8:AE:5E:46:E3:95:AD:B9:5D:C2:13:5E:BA:78
            X509v3 Authority Key Identifier:
                keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:40:e0:9d:88:b9:0c:34:00:44:ba:93:33:f4:24:d7:c3:00:
         f3:65:5a:7b:f3:b7:d8:b1:79:f7:d5:bd:5b:ca:f8:22:23:e8:
         a7:5d:60:a1:37:6d:57:57:18:61:4d:b2:de:f2:20:d1:58:d6:
         94:de:79:de:2b:7e:35:80:32:61:d7:63:c9:6d:0c:fe:5d:ad:
         48:8e:91:ac:8b:38:05:2c:99:f2:60:0b:6a:8a:3a:a3:b7:2d:
         69:17:ed:ca:b2:09:c8:a0:bc:1e:00:de:18:37:ca:2b:b2:09:
         ae:d6:a6:d5:74:54:20:be:d6:54:08:9d:b5:bb:59:69:50:91:
         ac:95:aa:e2:c8:1e:d4:9e:61:e0:19:f0:df:d2:28:80:2d:a9:
         b8:f9:79:8f:40:33:be:8e:ad:66:9f:2c:09:e5:17:bd:d9:ea:
         df:cb:58:e3:88:5c:d3:38:78:89:45:50:b1:32:e2:f5:8b:e5:
         26:ee:33:a5:da:f9:35:64:f0:47:47:ad:db:75:c2:99:91:b6:
         19:ae:f8:18:b7:bc:24:98:46:cf:7c:4d:53:18:14:c2:1c:c2:
         59:6e:a0:30:24:b2:2b:6a:5c:3f:a8:e9:e5:fa:81:6c:df:f1:
         90:65:e7:fc:62:27:fb:c2:c3:60:d4:04:34:8b:f1:d4:88:eb:
         4f:31:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:50:18 2026 by rpki-client