Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
File:                     JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json)
Hash identifier:          SZEWH7pT694J7Nu0ECbIEEkEK6r/sWe2rLzlSnit51I=
Subject key identifier:   22:A7:02:05:16:80:E4:9E:2B:84:F3:07:B1:E2:87:29:89:A8:30:5D
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
Manifest number:          080F
Signing time:             Fri 04 Sep 2026 21:06:09 +0000
Manifest this update:     Fri 04 Sep 2026 21:06:08 +0000
Manifest next update:     Fri 11 Sep 2026 21:06:08 +0000
Files and hashes:         1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: ztFl8dQrx7ibrO5nDc8DfJZLErFDCBJQhaGCrQlG23Q=)
                          2: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: MGgDBuK2ozCNY4Vjvqi7F7BY4x+uvNZ9GpBczQ7FuCg=)
                          3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: 3VO026Z1Sl5k+dt0+oenlD8Lk6M27d1xuB0vo/m4844=)
                          4: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: cFqGeqvAp4+H9D3Go8EW1NlfA3DNb+FcP3oMJfoNMaY=)
                          5: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: mfLPXcvsn2GPwPl0nmYTUbj8MnwQ+nd3JJseLaE/iN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Sep  4 21:06:08 2026 GMT
            Not After : Sep 11 21:06:08 2026 GMT
        Subject: CN=6a9b32c0-4ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:42:63:e1:d0:33:eb:e8:ab:d1:74:cd:32:00:
                    76:7f:31:a6:e1:1a:5d:7e:c0:08:1e:b4:dc:85:c9:
                    61:f2:5e:4b:4e:a3:3e:40:44:b0:4f:2d:12:c7:47:
                    5d:6e:8b:8b:61:bf:6b:5d:e3:a2:98:96:80:73:5e:
                    27:37:8e:9d:f4:b7:6d:2b:d6:bc:cb:a0:a2:dd:6b:
                    1f:3d:9d:6f:99:0a:a4:b5:ec:fe:1d:6e:07:0b:49:
                    d1:43:cd:66:03:2f:b0:f5:8e:06:b0:a0:11:d7:e1:
                    17:64:40:c4:f3:5d:72:9c:84:d8:a1:3a:0b:da:a0:
                    b8:02:6b:fa:ee:cc:00:f0:0b:41:08:55:a2:3d:0d:
                    32:57:21:6e:51:56:7b:20:ad:d4:d2:26:18:f3:94:
                    0e:7d:1d:df:e2:a1:c0:06:bc:74:c6:f4:30:0d:69:
                    6d:d4:14:9c:5b:0c:93:dd:aa:be:03:31:14:87:15:
                    5a:43:b1:ff:56:fd:04:6c:53:d6:f4:23:c9:96:a3:
                    6b:81:dc:14:5f:2e:f5:09:5e:f3:e6:1c:20:3d:ef:
                    1f:d2:22:27:08:b7:f6:92:8e:42:ec:cd:c5:59:81:
                    3b:07:ae:81:fd:17:c0:aa:5f:79:94:20:97:c4:df:
                    44:54:76:c4:ed:25:18:59:0c:1b:88:1f:df:20:df:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A7:02:05:16:80:E4:9E:2B:84:F3:07:B1:E2:87:29:89:A8:30:5D
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:8d:d7:1e:de:68:48:e5:a0:33:69:c4:37:4b:f8:60:ae:
         d8:fc:ee:76:ca:88:d8:6a:c9:e5:dc:8e:3a:11:6b:c9:99:06:
         c2:9f:f6:94:21:17:0b:65:d3:6e:e6:47:7f:eb:54:02:02:f6:
         f3:10:1b:fd:16:21:89:18:a8:49:e8:b3:99:16:07:2e:1f:f4:
         6d:5b:13:fe:7d:47:86:46:42:83:6d:37:e6:eb:e7:e5:27:9a:
         c1:c4:31:d3:44:2c:b5:cd:f3:ab:e6:2a:54:18:a4:65:3f:6b:
         49:bc:3a:50:62:11:c9:29:d9:e3:97:c5:d5:5a:0a:ec:b7:68:
         c1:d7:a3:8a:8a:d6:82:ee:29:09:96:bb:ae:3f:29:ed:70:62:
         b0:60:53:08:c8:23:ae:a3:16:b2:a7:70:0c:5c:01:a9:ce:2a:
         e5:95:c3:88:32:9f:89:9b:75:bc:c6:f6:7e:ee:85:4b:ac:dc:
         2c:0c:42:f9:b4:d9:af:16:41:3a:61:72:d7:f2:8b:3f:ae:75:
         09:aa:95:ec:fb:14:0c:66:ad:19:7c:c3:a6:11:37:82:4f:9a:
         26:27:d7:a6:c6:d4:96:6e:9c:29:6f:8d:96:c1:16:0d:2a:ba:
         23:1f:ea:29:d1:c0:84:2f:80:34:c9:42:1c:dc:2e:10:3c:86:
         9b:f3:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:47:30 2026 by rpki-client