Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
File:                     juyxGYDtEVNPQZL03gjRss25Fsg.mft (raw, json)
Hash identifier:          H1H9xxHXaERb+wduaaiYXz87z+rHixjwAuUz5a17MXE=
Subject key identifier:   26:CF:F7:5A:4E:89:72:FF:32:97:24:D6:D2:73:BA:84:FD:F8:A2:92
Authority key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8
Certificate issuer:       /CN=A9191DE0/serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
Manifest number:          85
Signing time:             Thu 10 Sep 2026 19:33:39 +0000
Manifest this update:     Thu 10 Sep 2026 19:33:38 +0000
Manifest next update:     Thu 17 Sep 2026 19:33:38 +0000
Files and hashes:         1: juyxGYDtEVNPQZL03gjRss25Fsg.crl (hash: A/Bcx3VQ58AcxwX1i4C9Mq59eD/nBvdX3L3D1iLM9Ro=)
                          2: A4C79C9AEC4611F0B45F05E8456F56BC.roa (hash: EVMXznE3JflMcjw9lwizAdWj6kleJyA1NEdHm23XCPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8
        Validity
            Not Before: Sep 10 19:33:38 2026 GMT
            Not After : Sep 17 19:33:38 2026 GMT
        Subject: CN=6aa30613-6715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:9b:29:5c:dd:81:a3:15:dd:19:2d:a0:36:
                    5c:86:53:ba:a3:d4:41:af:51:4b:11:06:94:6c:79:
                    97:a5:9c:b6:51:03:66:cb:2e:70:05:c6:2f:23:d6:
                    43:c6:70:ce:d4:bc:34:71:98:fe:1a:90:c5:71:e2:
                    a5:de:6f:9f:bc:c3:f3:0f:34:42:15:48:4f:98:0b:
                    90:d9:a7:e5:14:db:d4:ad:1c:7c:55:e3:3a:63:70:
                    fe:44:76:8b:da:44:e4:d9:36:8a:28:cb:2e:9e:3f:
                    2f:cd:1a:d0:a4:d8:d2:32:4d:f6:6b:b8:9e:4c:48:
                    72:30:75:97:85:f7:e6:3b:9c:d8:15:e3:46:4c:46:
                    e5:db:c8:e4:a0:ea:fc:6a:95:3a:a4:4d:11:d1:30:
                    da:03:f2:a4:4b:69:3c:f2:6b:c2:4f:51:40:89:32:
                    e3:1f:66:18:b1:00:da:f1:39:dd:4e:ba:f8:e0:e6:
                    d0:65:a8:f7:fb:9c:d0:83:0e:bc:78:69:31:7c:02:
                    8b:01:f4:6c:50:3b:92:66:05:e7:1f:11:28:40:0e:
                    96:ad:83:22:59:68:15:3d:49:79:f8:be:bf:14:be:
                    c8:a6:01:65:ee:d7:5e:a9:4c:28:c2:e1:c5:db:02:
                    79:5a:2d:cc:dd:9f:ae:77:ff:56:5b:bc:61:1a:3a:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CF:F7:5A:4E:89:72:FF:32:97:24:D6:D2:73:BA:84:FD:F8:A2:92
            X509v3 Authority Key Identifier:
                keyid:8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:30:82:df:27:ad:87:42:0c:65:f4:29:73:28:2d:8e:98:
         f4:be:4f:89:98:be:15:1c:31:f3:05:3a:25:9d:af:52:6b:3b:
         61:86:d6:90:ea:85:57:d1:1e:d8:27:86:0d:4f:54:87:9e:d6:
         02:14:eb:7e:6a:0b:1d:96:29:8d:0e:ee:15:49:83:b1:0c:6c:
         10:69:cf:da:13:c8:4a:36:c5:30:0a:10:b2:79:78:4f:c5:04:
         b0:42:14:22:a1:7b:38:b5:5f:e3:f6:73:f4:7a:41:a7:43:23:
         52:0d:68:f3:dd:85:64:0a:46:76:db:73:3d:13:da:02:57:7b:
         e0:35:2a:7f:29:06:59:82:1c:97:eb:c1:54:c4:01:fd:9e:60:
         c0:76:0d:0d:36:46:fb:90:20:ae:ae:6f:82:46:0a:25:b8:b2:
         8f:83:8a:f8:67:38:2a:62:23:4f:37:3a:54:ce:4d:5f:3a:c8:
         ab:fe:00:4f:db:6d:a7:14:62:05:56:39:27:e2:27:a9:f5:be:
         d3:2b:8e:70:2c:92:95:57:5e:f1:65:2d:da:3c:a0:16:06:af:
         39:70:c0:1b:c2:52:ac:f3:4c:c6:9f:f2:df:c2:0c:40:04:06:
         b8:c1:29:8e:50:8f:3c:e6:4c:20:bd:68:1e:f7:22:07:00:6b:
         87:f4:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:02:34 2026 by rpki-client