Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File:                     jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier:          xe/n6Fh0H0Vsvr07vHDh/ayy3A8eaCv33/qVOM1BKqE=
Subject key identifier:   9B:D1:44:54:6F:08:3F:E6:8A:2A:35:AE:CC:96:69:31:A6:C8:43:38
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       35B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number:          359E
Signing time:             Thu 22 Oct 2026 14:38:08 +0000
Manifest this update:     Thu 22 Oct 2026 14:38:07 +0000
Manifest next update:     Thu 29 Oct 2026 14:38:07 +0000
Files and hashes:         1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: htnh5kx4XSBbkehNjbKo8PYXRFX2SGK9rLccXzkCo98=)
                          2: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=)
                          3: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=)
                          4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 14:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13753 (0x35b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Oct 22 14:38:07 2026 GMT
            Not After : Oct 29 14:38:07 2026 GMT
        Subject: CN=6ada1fd0-9a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:6b:65:09:f5:06:03:e5:7f:a3:82:5e:b1:
                    7f:ba:3a:58:f7:f1:49:54:62:71:e7:fc:eb:39:e7:
                    06:97:21:6a:9a:f9:55:cc:54:af:b5:00:2a:dd:21:
                    ca:d1:ca:99:79:a0:2a:2a:66:8c:87:3d:c5:00:fb:
                    02:f2:61:24:2b:90:a8:ee:ff:b0:23:59:6e:e8:cb:
                    ba:17:ad:5e:de:e5:b6:0e:01:aa:d2:e9:02:76:be:
                    13:a8:83:d4:b2:cf:77:16:5b:d5:58:77:11:ab:77:
                    0e:92:93:e5:d1:69:49:d2:a5:a6:6c:0f:6c:80:a7:
                    11:f1:8d:20:91:08:56:73:f8:98:ac:44:f8:c0:45:
                    a4:00:85:77:ca:c2:73:75:c5:45:fa:44:ec:5d:00:
                    63:b9:34:66:ef:b7:8a:c7:cf:60:f1:b4:d0:05:93:
                    94:e7:2b:80:eb:2c:5d:e9:a9:8c:8a:5b:c7:0c:f1:
                    d1:77:13:59:b3:e7:65:58:d5:0c:ed:33:f7:c4:92:
                    ae:2a:6e:f0:ce:5c:dd:cc:81:4c:56:3b:7e:fc:02:
                    77:5a:25:4b:1b:02:26:a1:d4:e3:6d:f8:1b:85:0a:
                    45:bd:a4:1e:f1:b8:62:1e:fc:2f:3d:20:2b:3b:7b:
                    f6:ef:8b:bf:8e:fe:1c:d6:f2:98:db:ee:50:f0:f5:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D1:44:54:6F:08:3F:E6:8A:2A:35:AE:CC:96:69:31:A6:C8:43:38
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d9:87:98:44:fb:86:78:b6:b4:a4:77:b2:37:58:35:fe:b4:
         ea:b0:81:2d:d1:58:74:98:30:96:3d:72:09:7b:ca:30:44:10:
         40:59:48:41:2a:31:c9:5d:91:5c:54:7b:39:46:59:3b:01:a4:
         81:67:63:26:10:d3:d5:b7:50:54:30:c4:23:03:92:1b:78:ff:
         bb:13:88:d1:f4:70:46:6e:f7:08:f3:ab:f1:8f:49:c1:5b:a4:
         cd:40:25:05:77:0b:a1:e3:9f:6a:6b:a0:71:ce:ed:4f:33:dc:
         9e:49:5f:17:29:c0:d6:fa:fe:dc:0c:08:6f:60:1e:58:1c:b2:
         72:91:84:3b:1b:24:a1:a6:7a:1f:3d:c0:20:f6:0a:c8:b1:02:
         ee:73:d4:a0:de:5a:53:28:b5:08:94:1c:6f:2d:a4:27:f1:b3:
         59:47:c2:19:18:b3:51:47:09:9e:f2:4b:f0:30:f9:60:40:b3:
         68:2b:d7:1f:f9:41:c5:30:62:e8:a9:d9:5f:f1:27:bc:64:39:
         d5:dd:cc:6e:0c:21:f3:e7:fe:d7:3e:2a:f2:dd:73:8c:3d:98:
         9d:fb:fe:8f:22:2a:63:99:cb:f4:9b:b5:c2:91:9a:6f:1c:6a:
         35:62:d5:87:22:c2:e4:70:32:e6:41:42:5d:27:98:d5:68:c0:
         c8:1e:57:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2
NTU4QjlEODkwHhcNMjYxMDIyMTQzODA3WhcNMjYxMDI5MTQzODA3WjAYMRYwFAYD
VQQDEw02YWRhMWZkMC05YTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4NrZQn1BgPlf6OCXrF/ujpY9/FJVGJx5/zrOecGlyFqmvlVzFSvtQAq3SHK
0cqZeaAqKmaMhz3FAPsC8mEkK5Co7v+wI1lu6Mu6F61e3uW2DgGq0ukCdr4TqIPU
ss93FlvVWHcRq3cOkpPl0WlJ0qWmbA9sgKcR8Y0gkQhWc/iYrET4wEWkAIV3ysJz
dcVF+kTsXQBjuTRm77eKx89g8bTQBZOU5yuA6yxd6amMilvHDPHRdxNZs+dlWNUM
7TP3xJKuKm7wzlzdzIFMVjt+/AJ3WiVLGwImodTjbfgbhQpFvaQe8bhiHvwvPSAr
O3v274u/jv4c1vKY2+5Q8PUHCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvRRFRv
CD/miio1rsyWaTGmyEM4MB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE
OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW
NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs9mHmET7hni2tKR3sjdYNf606rCBLdFYdJgwlj1yCXvKMEQQQFlIQSoxyV2R
XFR7OUZZOwGkgWdjJhDT1bdQVDDEIwOSG3j/uxOI0fRwRm73CPOr8Y9JwVukzUAl
BXcLoeOfamugcc7tTzPcnklfFynA1vr+3AwIb2AeWByycpGEOxskoaZ6Hz3AIPYK
yLEC7nPUoN5aUyi1CJQcby2kJ/GzWUfCGRizUUcJnvJL8DD5YECzaCvXH/lBxTBi
6KnZX/EnvGQ51d3Mbgwh8+f+1z4q8t1zjD2Ynfv+jyIqY5nL9Ju1wpGabxxqNWLV
hyLC5HAy5kFCXSeY1WjAyB5Xmw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:40:34 2026 by rpki-client