Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
File:                     jpwcZNAr9AP0GtScU0AD52h3NPw.mft (raw, json)
Hash identifier:          A4ohoHHkU+SAi6QbtNvzhUpY1/feu/XACCAIn2zgErk=
Subject key identifier:   28:64:B0:D5:33:42:AF:94:D9:20:3A:5C:7F:AD:92:13:1D:77:39:FD
Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Certificate issuer:       /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
Manifest number:          7C
Signing time:             Sun 25 Oct 2026 08:09:56 +0000
Manifest this update:     Sun 25 Oct 2026 08:09:56 +0000
Manifest next update:     Sun 01 Nov 2026 08:09:56 +0000
Files and hashes:         1: jpwcZNAr9AP0GtScU0AD52h3NPw.crl (hash: 8CckhqzKby/3QSuvaZta3DVWyOTPXXUt0OOvdAa1fw4=)
                          2: 2804E38A1C9C11F1AD8EA332233D8C67.roa (hash: u2OsXEMfPPTe3z4VuZjxhuv1MslPKuUs4ik5meu7/sw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
        Validity
            Not Before: Oct 25 08:09:56 2026 GMT
            Not After : Nov  1 08:09:56 2026 GMT
        Subject: CN=6addb954-7a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:63:70:9c:9f:fd:ee:bc:d9:47:f9:36:ac:
                    61:e6:85:94:b5:35:68:c3:a9:c4:c7:29:7c:a2:81:
                    7b:c8:11:9a:85:07:68:35:21:ec:97:1a:01:f7:79:
                    08:ad:4e:30:83:88:4a:2b:03:19:6f:47:e8:7b:c7:
                    bc:31:af:f4:a5:03:44:1d:3b:d4:2d:0c:5f:c8:c9:
                    f1:58:01:f4:7c:5d:51:d5:29:b9:f4:ce:3c:14:90:
                    54:62:62:ea:aa:53:9a:c8:a4:ce:f0:95:11:7f:99:
                    a8:6b:e3:43:0b:32:ce:db:43:d9:ab:a9:bf:48:5c:
                    38:5e:87:8b:a1:a9:49:65:2a:fd:b5:39:33:dd:58:
                    cd:14:24:d7:09:71:24:f9:9a:06:1e:1e:4c:2c:16:
                    6c:ff:bb:c0:4d:0b:8b:98:dd:6d:3d:89:cc:5e:b6:
                    73:51:45:6b:7c:8e:ea:3f:5d:fc:46:4d:bb:a5:54:
                    17:4a:d1:cd:d3:a1:c9:d3:d7:ab:a9:df:a7:bc:d9:
                    ae:92:db:84:a2:fd:82:4c:c3:80:3c:1f:6f:d1:4d:
                    0b:30:f4:cb:08:10:6d:97:ce:f8:d9:cd:4c:c3:32:
                    20:db:b1:fb:6a:c0:6f:fd:85:f0:1e:a7:d8:7f:41:
                    e5:3b:54:8e:3f:b1:22:ca:db:ff:2f:ba:01:8a:01:
                    a9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:B0:D5:33:42:AF:94:D9:20:3A:5C:7F:AD:92:13:1D:77:39:FD
            X509v3 Authority Key Identifier:
                keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7d:95:9b:54:68:b5:3f:47:d2:0a:b0:96:25:67:54:58:b8:
         fb:38:d6:63:7e:9e:a1:b4:50:83:61:f1:d0:7d:43:53:7a:0f:
         b3:09:89:3b:88:e1:08:ed:4e:a4:a1:1b:a1:b6:87:c1:97:5c:
         7e:31:9c:2f:b9:b3:83:8d:f4:4e:d0:70:aa:d6:44:09:dd:75:
         87:b7:d2:06:b5:7d:8b:40:2c:05:c5:c9:4f:55:c3:f6:f0:13:
         97:cf:7e:42:c6:df:be:61:2d:c2:00:dc:5f:2e:75:23:af:aa:
         77:1d:83:10:60:97:0b:af:85:83:c9:7f:d3:61:61:5c:4a:00:
         f6:2a:e6:45:b2:c0:fe:a7:1a:c3:a7:25:bb:c0:28:44:35:34:
         39:2d:62:f5:13:65:f4:93:5e:95:7e:39:f6:cb:5d:1e:07:9c:
         71:3f:13:96:27:1c:da:55:e0:b2:49:fe:09:0a:be:ce:b6:ee:
         df:c0:6f:0c:12:35:7c:ad:62:28:fa:6e:ad:16:fa:ad:74:1c:
         bc:31:0a:c3:52:40:86:31:a4:1a:52:7a:38:33:f8:9c:35:13:
         58:35:e2:24:66:0b:a8:4e:1f:53:f6:6e:ae:44:5a:be:7e:38:
         67:46:3e:39:c1:19:2d:09:aa:31:55:28:e3:1e:ef:e4:02:ff:
         02:57:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:04 2026 by rpki-client