Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File:                     jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier:          UOYyURYL09dK0lN7dDMF3O2l81ljMW7Pch5cJUaTo+8=
Subject key identifier:   9D:EC:8D:A7:0E:8A:82:13:2E:C9:8D:37:58:75:C0:7F:FE:DF:07:54
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer:       /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial:       0B49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number:          0B39
Signing time:             Sat 24 Oct 2026 19:15:30 +0000
Manifest this update:     Sat 24 Oct 2026 19:15:29 +0000
Manifest next update:     Sat 31 Oct 2026 19:15:29 +0000
Files and hashes:         1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: XCE/UFWyFVfE/6FZCHoxZTjBc5oeD+20WEF+dH2nxZg=)
                          2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: QI3TTTsJntpzM6Jwiamem8N1Qiw1xr173Za9wXlnaQk=)
                          3: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: Hl3Xyx26gpFtLsuBQgWv+ANMc2eZUQOg0WhN0n2+tFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 19:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2889 (0xb49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
        Validity
            Not Before: Oct 24 19:15:29 2026 GMT
            Not After : Oct 31 19:15:29 2026 GMT
        Subject: CN=6add03d1-a30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:55:92:31:22:73:4b:ea:73:d2:80:3c:b7:
                    19:c1:b2:f4:d8:96:4b:60:cb:34:72:17:18:bb:cd:
                    ad:2c:9b:d0:af:1f:ef:81:33:b2:29:81:90:25:ef:
                    8a:c6:8a:03:cd:88:24:c1:cb:02:79:9f:4c:bb:6b:
                    c7:e5:0e:01:84:00:76:6a:88:bc:c6:94:88:d6:f4:
                    70:fc:07:9f:47:5a:4b:7e:43:00:48:9a:64:b4:ff:
                    02:fe:11:a0:42:02:3c:a0:38:06:a6:d9:77:ff:63:
                    79:cd:45:9e:02:fa:f0:cf:62:b2:63:ec:55:fa:77:
                    c1:b8:ce:31:69:ea:27:e7:a4:c7:84:16:7b:20:c8:
                    53:76:f8:20:ef:89:1f:a0:cf:43:8c:23:bc:e2:35:
                    6e:47:ca:f4:1c:1e:a1:76:f9:d4:33:0e:ff:f5:09:
                    5c:db:91:10:58:b1:b2:a6:c4:ac:0e:ab:14:99:f3:
                    c8:d7:e5:9c:b0:e4:7e:a4:55:cb:34:9a:39:5c:f6:
                    50:16:1c:97:cf:e5:7d:9c:5b:a0:d5:e4:c9:e4:fa:
                    61:37:cd:92:28:f5:3e:06:4d:0f:9e:5c:c9:83:60:
                    52:02:e2:2b:b4:70:fd:73:c6:e4:a6:d1:38:27:45:
                    58:a8:7f:75:c9:03:5a:66:0e:51:49:7a:29:df:a2:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:8D:A7:0E:8A:82:13:2E:C9:8D:37:58:75:C0:7F:FE:DF:07:54
            X509v3 Authority Key Identifier:
                keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:eb:84:e2:0b:64:08:6b:70:0e:f5:b8:2d:9a:04:88:2c:
         66:f6:e3:da:46:9a:3a:14:4c:d1:11:d8:22:e6:0f:95:e2:89:
         95:51:f2:c7:84:15:91:c8:b9:f3:da:c3:91:05:50:07:07:2f:
         b1:fd:99:79:99:32:8a:c6:d2:f9:64:f0:ba:17:28:11:da:46:
         a2:5b:b7:b6:db:9a:15:b6:50:bc:38:bd:9e:0a:b3:a5:47:b9:
         ab:f7:4b:21:91:f5:0a:66:46:c2:9d:3f:bc:de:2a:55:9b:f5:
         fb:5d:3b:9c:6a:c5:32:73:6e:d9:bd:4c:0c:d0:24:cc:5b:69:
         80:46:ac:eb:f6:95:63:78:11:70:85:ec:b2:fa:46:f2:1b:84:
         3a:14:44:de:ec:1a:8e:06:a3:ba:c5:bc:bf:7c:b9:1b:8b:d4:
         8b:bc:54:14:63:6f:f2:64:5d:1c:cb:2c:8b:ea:e3:c1:ef:58:
         07:4b:b6:d7:b8:66:52:71:aa:f2:1c:04:4c:1f:9b:97:6c:14:
         f3:a2:28:f8:85:59:6f:42:ff:82:28:2e:b4:70:26:8f:5e:1d:
         dc:c8:9e:9c:88:e2:cd:3f:21:3f:d4:3f:de:5c:cb:e4:b2:63:
         ae:73:1c:75:5a:0b:f9:64:e7:1a:16:11:52:8c:f9:46:8b:5d:
         18:a6:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 00:59:44 2026 by rpki-client