Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
File:                     JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json)
Hash identifier:          zH4mjOeJPNu+IYzB2AxYro/3s3mLWwosh00LZWTpz9E=
Subject key identifier:   8F:4C:C5:61:41:8B:4E:5D:20:64:BB:73:A5:7D:E6:DF:DA:09:B8:14
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Certificate issuer:       /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
Manifest number:          E1
Signing time:             Thu 27 Aug 2026 05:59:10 +0000
Manifest this update:     Thu 27 Aug 2026 05:59:10 +0000
Manifest next update:     Thu 03 Sep 2026 05:59:10 +0000
Files and hashes:         1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: chLo8xmqoyaYVeqYUcAzhdnIcDuPOq+ThD9GUpnWu1o=)
                          2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: Cd2qwheOZx/HlbYVbXM4iYSdKyaPgmnCfgXwff08PA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 05:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
        Validity
            Not Before: Aug 27 05:59:10 2026 GMT
            Not After : Sep  3 05:59:10 2026 GMT
        Subject: CN=6a8fd22e-97b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:f5:ba:88:3a:35:d1:64:af:dc:52:7b:4d:
                    f4:1a:21:5c:66:97:62:71:60:fe:a3:c2:a2:cd:c4:
                    bb:98:aa:51:01:ec:5b:99:29:84:bf:0c:e4:56:73:
                    a4:3f:16:88:3a:3c:8f:7e:3a:02:53:af:9e:16:f1:
                    31:f1:cd:1d:03:78:c8:a9:7a:a4:e1:3d:78:9e:08:
                    0d:ca:ca:17:63:46:66:b8:26:20:16:06:ce:af:ac:
                    fc:81:dc:3f:1f:5e:96:51:e4:b8:ef:99:4f:02:56:
                    c8:b8:c2:ce:23:b9:c3:e7:91:bf:be:75:b1:0b:ce:
                    b7:4b:93:53:c4:f3:33:b6:34:ad:95:e3:b2:25:a0:
                    50:85:b4:4e:fa:d1:95:db:56:71:41:91:5d:c5:ba:
                    4b:41:3a:ec:1b:fb:30:68:67:35:fd:d0:9a:02:94:
                    68:1b:50:69:67:d3:9d:36:e9:16:b8:5d:23:23:a5:
                    48:11:6d:01:90:5c:93:62:31:57:00:85:ef:4e:76:
                    d8:f8:cf:ad:09:f9:35:28:49:9e:aa:87:4b:2a:91:
                    21:a5:cd:ff:a1:d9:8b:b9:ec:b1:61:7e:2d:a1:74:
                    95:13:3f:4c:7a:6d:44:46:ae:9e:ae:d0:05:74:04:
                    91:10:16:40:34:10:5f:fc:9b:57:43:f2:c7:74:28:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:C5:61:41:8B:4E:5D:20:64:BB:73:A5:7D:E6:DF:DA:09:B8:14
            X509v3 Authority Key Identifier:
                keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:95:f1:95:3e:47:f0:92:4a:52:ec:2f:49:a9:89:b1:91:
         60:b5:d8:aa:da:6c:bb:76:82:12:07:5b:72:73:6c:48:fa:fb:
         43:1d:e2:fc:c3:96:0d:3d:64:5e:bc:fc:8d:58:f3:35:af:d9:
         85:04:30:e1:10:6c:31:20:0f:ae:66:28:f3:9e:1b:6c:a5:8b:
         39:55:19:57:f3:a8:b2:9d:59:90:c9:eb:72:8c:8a:b8:7f:16:
         8b:4b:3c:8d:c5:7f:8f:70:07:51:dd:02:ba:6f:ed:2e:7a:3c:
         7e:a6:69:0d:f8:00:94:d2:45:84:50:2a:fb:7c:29:37:e2:cc:
         d9:5b:97:83:11:b5:03:20:c9:d4:63:4a:6a:f0:2a:00:2d:ee:
         a0:3e:d5:9c:c8:e1:e1:88:79:ac:8a:82:18:2e:41:81:06:e6:
         90:85:31:cc:e5:b5:20:16:7b:ef:43:08:62:79:d8:c5:0c:24:
         39:63:09:01:f6:0c:85:f8:72:a0:4f:50:ae:33:28:9c:66:6d:
         0e:f9:e2:0d:f8:9d:a4:7c:b9:d2:1a:1d:42:f6:c6:80:84:c8:
         69:7f:0b:80:8d:13:41:58:33:59:1e:5b:69:68:64:cc:dd:63:
         e0:c2:e6:40:41:fe:fb:10:35:54:41:8f:ca:37:a2:f1:87:39:
         21:b6:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:46:39 2026 by rpki-client