Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
File:                     JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json)
Hash identifier:          QBR6oYRZskh8aIZ+Rov93IWw2YArDzc5CzGZlyxGXkk=
Subject key identifier:   BA:5E:34:7E:56:0A:D8:12:61:C5:DB:7D:1E:CF:1F:D0:6F:54:E6:79
Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
Certificate issuer:       /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
Manifest number:          0203
Signing time:             Mon 05 Oct 2026 03:26:04 +0000
Manifest this update:     Mon 05 Oct 2026 03:26:04 +0000
Manifest next update:     Mon 12 Oct 2026 03:26:04 +0000
Files and hashes:         1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: QFSiL095O5QFygcWwuh9lU1E+YMtxL2HlqKzEufih18=)
                          2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: 8g6DGym5X06XbbSD/tbM94k9PEbw+g3fC0hmurAHwv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl
                          rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB
        Validity
            Not Before: Oct  5 03:26:04 2026 GMT
            Not After : Oct 12 03:26:04 2026 GMT
        Subject: CN=6ac318cc-bc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:30:45:4b:a5:b3:43:63:1b:7c:c9:05:f5:f7:
                    3c:bc:e9:93:42:72:07:f7:54:1a:e0:d3:04:d4:5e:
                    78:8a:54:57:bb:c6:c1:d7:bf:fb:c8:92:18:b4:43:
                    8a:52:39:70:de:14:68:8e:1e:f4:88:a8:73:46:1f:
                    4d:b3:30:f0:91:c6:b7:2c:24:af:6f:6e:96:5a:fa:
                    3b:1c:7d:3e:41:a6:0b:44:c4:1e:a5:72:c9:d6:39:
                    b3:02:eb:59:a2:47:bf:30:17:7f:a8:d2:cd:e3:19:
                    66:a8:62:2f:d6:b4:02:47:e9:11:41:0a:4f:4f:bb:
                    79:f3:8e:08:31:3b:70:cc:4d:66:0e:e1:d8:85:c9:
                    eb:a7:30:a8:83:f2:fc:c3:43:66:09:e3:72:e4:4c:
                    ef:e0:05:5d:93:43:20:18:48:05:f9:50:87:ff:41:
                    31:c7:e6:f0:40:b5:2c:ab:c9:82:30:f3:79:de:53:
                    30:af:8f:43:26:26:5f:9b:3f:b5:36:dc:0d:8f:d3:
                    65:5f:00:cf:95:bd:a9:35:8f:81:04:db:ef:40:4a:
                    9d:6f:7c:0d:41:2f:2c:a9:67:26:54:fe:32:77:40:
                    4f:c8:3c:a1:79:63:ee:d7:07:05:4d:17:a2:a0:2b:
                    b5:9d:a9:53:da:ee:4d:e7:b2:ee:35:40:62:97:1e:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:34:7E:56:0A:D8:12:61:C5:DB:7D:1E:CF:1F:D0:6F:54:E6:79
            X509v3 Authority Key Identifier:
                keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ec:b6:f8:54:ab:0b:c3:95:f4:4d:15:f5:ce:1b:3f:4c:bd:
         26:c6:e4:7c:1e:0c:54:e3:7d:bf:b6:ca:ed:c3:01:67:39:35:
         29:82:79:ba:02:3b:62:28:40:de:19:d4:5c:3b:8e:24:10:54:
         33:bc:46:48:12:8f:71:8c:c0:a5:80:d9:f8:81:45:e1:78:d7:
         18:6a:b9:d7:b5:6d:83:1e:49:0a:6e:b8:6a:ad:df:a5:70:fc:
         c3:16:83:f4:22:9e:a6:ca:27:1a:5a:3d:ee:a0:2e:6d:b3:93:
         58:88:63:73:df:5f:ae:3c:23:e5:6c:7c:a4:9f:a1:42:f3:20:
         88:84:e2:eb:07:bf:27:7d:86:da:3c:e9:83:40:55:fb:9c:c3:
         48:bb:a4:de:d1:d9:dd:fb:80:76:a3:d1:fe:51:27:a9:1d:6d:
         7d:28:ec:2d:4d:f9:d1:ea:a4:0d:76:ad:1d:9e:f2:14:5d:89:
         48:57:39:09:b2:fb:bd:95:a7:80:f7:b3:d9:3e:ee:51:de:56:
         74:84:97:34:f1:f5:fc:82:39:70:32:d9:f0:ba:43:3e:42:f2:
         b4:74:a8:f5:3a:ed:f3:d5:47:6c:1e:1f:b0:96:79:62:a5:3f:
         fe:40:3e:bd:c9:cf:9d:81:61:2d:53:97:a6:af:c7:a6:2c:f3:
         c1:8d:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:57:40 2026 by rpki-client