Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
File:                     JgCH2u-Rng2r-KLILwGF1RyYfFE.mft (raw, json)
Hash identifier:          r+/nBzJJW0iOvQ8TxgaYYrulq3uyXAujdTjj+rVlOHE=
Subject key identifier:   3B:5E:60:93:76:0F:E2:E5:25:B8:43:06:7B:1F:C6:D0:F2:C3:06:63
Authority key identifier: 26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51
Certificate issuer:       /CN=A91B8782/serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
Manifest number:          1F
Signing time:             Wed 07 Oct 2026 09:31:48 +0000
Manifest this update:     Wed 07 Oct 2026 09:31:47 +0000
Manifest next update:     Wed 14 Oct 2026 09:31:47 +0000
Files and hashes:         1: JgCH2u-Rng2r-KLILwGF1RyYfFE.crl (hash: 7mSPBLug/AwJzYF6M7+UEOZkq4I1PK7LPVcF4ri0jmw=)
                          2: F88E2564955211F19EAEED7D6411F970.roa (hash: pKiZMTH93sR7vU9mFLBYmtO9yBYDCzaSyoBxrPbbRDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl
                          rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8782, serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
        Validity
            Not Before: Oct  7 09:31:47 2026 GMT
            Not After : Oct 14 09:31:47 2026 GMT
        Subject: CN=6ac61184-7c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bc:63:ec:79:af:19:38:71:01:74:e7:82:96:
                    01:cb:c5:48:69:ed:73:95:d0:63:fa:9b:c9:ae:d9:
                    2f:e7:f5:7b:e7:f2:19:7d:b7:a6:5a:71:36:57:63:
                    03:78:1d:35:ff:29:0b:e1:f8:dc:1a:b3:e6:06:88:
                    c2:42:05:3b:89:8c:95:9c:ac:54:80:01:fd:64:97:
                    67:93:d3:dc:a8:47:d1:f7:06:f8:39:11:75:95:bc:
                    81:f8:d6:42:ea:62:10:67:c7:e3:aa:ec:9b:d0:7c:
                    06:1b:8a:e6:61:45:e3:41:1f:e7:71:fe:39:e0:41:
                    ef:ac:62:e3:8f:9d:aa:02:d4:96:75:52:be:48:fe:
                    86:35:fb:02:56:83:5e:f5:4b:18:8f:d6:be:e0:c9:
                    31:74:c9:c5:89:42:1a:c7:ef:36:62:80:90:c2:15:
                    4e:03:00:ab:e6:94:10:b7:ad:96:8c:92:77:d3:6b:
                    6b:f4:71:01:73:f2:72:0e:1b:8c:6f:2f:07:32:20:
                    ed:b7:1f:eb:52:28:1b:9e:d2:e7:0e:51:56:0b:d8:
                    28:9d:bc:34:2b:c1:0a:71:df:65:05:27:1a:57:76:
                    42:4f:01:ba:36:9e:02:dc:ca:04:6a:81:9d:16:35:
                    98:54:dc:70:71:56:1d:96:0a:67:e5:36:10:7f:6e:
                    ff:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5E:60:93:76:0F:E2:E5:25:B8:43:06:7B:1F:C6:D0:F2:C3:06:63
            X509v3 Authority Key Identifier:
                keyid:26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:37:69:b6:35:a4:06:6e:d3:4e:52:f5:58:da:2c:9f:d8:
         4f:48:00:40:06:a6:23:4f:0e:b5:fd:af:8f:1f:05:6f:e2:ac:
         ef:58:51:26:93:a2:f8:51:2f:64:c0:ec:3d:71:27:b4:7f:bf:
         c5:1e:f0:0e:d5:d1:1d:b5:cd:83:5d:47:96:5c:40:e6:2b:d6:
         a3:99:0b:8d:dc:9d:a9:7d:73:13:6b:29:a3:ff:95:23:67:f4:
         a4:cb:20:75:00:ce:52:04:ce:b3:95:2b:f3:10:ac:df:28:db:
         30:bc:3a:0f:a7:1f:b7:03:b7:42:03:6b:0d:4c:4c:6d:4f:d3:
         70:7d:f0:2c:8b:1b:8e:6a:06:d6:f4:b4:56:d8:cc:f7:3b:28:
         c6:4e:a1:55:41:a5:8b:2a:eb:cd:74:1b:62:35:35:d0:cd:34:
         c1:b8:11:ce:4f:7c:00:bf:bb:cd:2d:94:cf:71:bb:d0:74:9b:
         e2:04:43:42:77:bb:4c:5a:d8:5f:be:46:f3:12:ef:d9:8d:65:
         1c:91:1d:0d:15:65:33:66:9e:c4:8f:b3:98:ea:90:2f:13:4c:
         8b:c6:cc:b1:e3:5b:54:13:a5:c4:9f:62:e0:6f:d2:5c:3f:62:
         50:b9:03:14:40:9d:42:6b:ef:7b:1b:12:d7:a7:cb:af:e3:47:
         18:d4:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:14 2026 by rpki-client