Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
File:                     JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json)
Hash identifier:          b7Gh0ht0HdAMQSajpIEw3ilh8tNqBet2TQn8O5Fno5Q=
Subject key identifier:   77:12:61:F4:97:08:ED:AD:10:14:1C:26:0C:77:D6:87:BC:98:59:85
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Certificate issuer:       /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial:       0440
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
Manifest number:          040B
Signing time:             Tue 27 Oct 2026 00:18:36 +0000
Manifest this update:     Tue 27 Oct 2026 00:18:35 +0000
Manifest next update:     Tue 03 Nov 2026 00:18:35 +0000
Files and hashes:         1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: XTvgKCBCb0CtT3oFZhWLTI6ztHJ8Ze+iCpudWn4Bo0I=)
                          2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: Zqbu2gM/p3JYhF6RtHC7pKoD7WRxqkmXieIo4G2MPsk=)
                          3: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: dm8mDFnd4sCdbaaWXZW8U1YjOybI/gS2GoTG/04b7RU=)
                          4: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: to9oWLtUCPR2IV81QwsKxDWKhq1Sm4j3pB/lwtY1Upg=)
                          5: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: VpW/GGNQZtOaPEiTSAjONhHFcZtykmd+bhy/dKuCDgU=)
                          6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: /6u2hpGyEghKewxxLTUeu3WPPeW2saAns4fvfdrjrvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
                          rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 00:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
        Validity
            Not Before: Oct 27 00:18:35 2026 GMT
            Not After : Nov  3 00:18:35 2026 GMT
        Subject: CN=6adfeddb-6129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:3b:81:0b:02:73:21:24:c9:f1:ce:97:34:
                    cd:78:8b:bc:a9:f1:37:ee:51:d8:6c:2c:a7:1e:12:
                    41:ef:8e:1f:2d:3f:53:8d:b3:81:46:eb:08:04:57:
                    0a:dd:63:01:f3:81:32:3f:4e:36:4a:67:c0:70:3b:
                    8b:5a:03:15:1d:f1:31:1b:c8:f4:61:03:1d:eb:cc:
                    75:d0:9d:84:c7:db:bd:0f:2a:28:a1:f7:b0:d0:7a:
                    58:0e:f2:2e:98:61:a1:19:49:16:c9:f5:99:84:90:
                    a7:68:bf:44:1b:15:ed:39:d2:f4:02:22:cc:f6:39:
                    85:cf:5f:39:22:0a:b1:03:df:26:b4:e1:3d:ea:1f:
                    11:3a:b5:81:8e:c1:4f:dd:35:19:a6:ff:a0:40:47:
                    0c:62:83:14:82:4f:30:bc:28:d9:dd:b2:41:58:45:
                    e8:a8:7d:81:9f:ad:28:d1:7d:9d:83:21:26:70:00:
                    0a:08:7a:99:97:55:af:62:d2:46:c1:9a:13:02:5e:
                    04:18:ed:bd:c9:35:e8:f6:ab:6e:66:64:e7:6e:de:
                    0f:22:4f:0c:dd:8c:87:b6:0a:80:35:da:38:26:10:
                    b4:d2:ef:df:3a:16:d8:b7:cf:48:43:37:07:36:6c:
                    94:a2:8f:ae:1f:46:01:e8:8a:cc:d3:22:20:72:23:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:12:61:F4:97:08:ED:AD:10:14:1C:26:0C:77:D6:87:BC:98:59:85
            X509v3 Authority Key Identifier:
                keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:53:be:6c:c0:8e:28:d6:04:51:3b:8a:ac:c9:e5:dd:d1:47:
         2e:80:7b:9a:1b:2a:86:75:86:cf:5b:db:84:1f:6f:22:97:aa:
         99:e1:e4:d7:8c:81:c1:35:e0:3f:fe:9c:1b:71:77:2d:d1:5f:
         c5:9a:ca:70:d3:d8:79:e8:c8:5a:1d:18:c8:fd:12:70:22:22:
         3e:89:ee:ea:a6:b5:45:3b:f8:8c:ab:6c:0a:01:00:38:34:bf:
         4d:a7:52:0b:b3:9e:44:88:ef:b2:5e:04:0f:fe:e6:4e:83:a5:
         ce:a2:41:bc:80:aa:8c:2b:d2:e3:a2:15:32:47:94:c0:1d:a5:
         77:0b:39:1a:18:4f:bd:4e:6b:47:fe:ea:40:42:2f:75:cd:3c:
         f3:2c:da:3c:78:9e:0a:5c:fa:ba:37:2c:d4:2c:50:53:ce:6f:
         69:62:9b:65:0d:91:2f:96:6f:73:9e:bd:8a:f7:fb:55:36:09:
         1a:f8:c2:c1:bb:8e:90:e5:11:d1:61:d6:5a:8a:5f:f9:48:4c:
         10:34:01:4c:e3:aa:3a:0e:62:dc:10:dc:51:42:94:9d:83:89:
         06:d9:ad:f8:5d:31:ef:c0:c9:b7:f4:1c:88:7e:aa:84:50:de:
         b8:ae:28:21:61:e2:40:88:b9:c6:4a:85:53:87:af:f0:08:e0:
         c1:7a:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:21:51 2026 by rpki-client