Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
File:                     JRiNYKv1gleStK_K1bK06Xj6rjA.mft (raw, json)
Hash identifier:          8zJhqi/pwbfF0cpv9xyw+EklEdV6eJKMfR9iyoV3h8Y=
Subject key identifier:   9A:80:29:C9:65:AD:82:E4:EA:D7:CE:AB:F9:F8:69:6D:BB:10:61:FE
Authority key identifier: 25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30
Certificate issuer:       /CN=A91C61F3/serialNumber=25188D60ABF5825792B4AFCAD5B2B4E978FAAE30
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
Manifest number:          6A
Signing time:             Mon 05 Oct 2026 08:25:03 +0000
Manifest this update:     Mon 05 Oct 2026 08:25:02 +0000
Manifest next update:     Mon 12 Oct 2026 08:25:02 +0000
Files and hashes:         1: JRiNYKv1gleStK_K1bK06Xj6rjA.crl (hash: Add9lNubmYj5/WpIIQX1Bcn5WyEqbFoF6gLVbCqtBQw=)
                          2: C22533B2219611F1B6D5F32F0F3D8C67.roa (hash: 4UAt/A7u+Xy7hjXH2/I4xiR7V4OxXKb6guGiV6s2IaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.crl
                          rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C61F3, serialNumber=25188D60ABF5825792B4AFCAD5B2B4E978FAAE30
        Validity
            Not Before: Oct  5 08:25:02 2026 GMT
            Not After : Oct 12 08:25:02 2026 GMT
        Subject: CN=6ac35edf-74bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:27:22:85:98:8e:f2:c7:de:e6:25:73:9b:
                    4d:d3:f9:25:51:da:c3:7e:f5:1d:5b:c3:75:7c:65:
                    d8:1b:04:1b:ec:34:91:76:bb:58:11:19:af:b7:df:
                    45:69:50:33:e6:26:ab:52:83:08:02:83:f5:ff:b7:
                    06:59:98:62:5c:11:26:23:71:6a:0e:3c:fa:e9:91:
                    e2:17:d0:59:72:d3:ed:38:ea:9e:80:3f:82:c1:12:
                    77:b7:21:29:03:e6:4e:c8:7e:94:dc:64:3a:35:9e:
                    31:87:e0:a1:d1:61:03:00:d1:09:97:54:27:4c:49:
                    97:0d:cd:af:ef:cb:47:e2:9c:30:a9:93:8b:bd:f9:
                    fb:ee:ba:3f:70:0f:38:40:fe:f2:09:c0:d0:24:db:
                    ff:c0:32:76:1a:d7:3b:2f:87:c2:30:cd:60:73:7f:
                    91:b4:4f:8f:c4:78:07:fa:6e:9e:65:de:4d:91:5f:
                    f8:87:d8:72:99:3f:77:1b:1e:8d:d7:19:d0:bb:a5:
                    55:55:a8:0e:9a:4e:e1:5c:d2:a1:9a:0c:b0:f9:e0:
                    c6:7c:52:42:42:42:72:18:95:89:09:0e:e3:17:8a:
                    0d:53:d3:2c:f8:b4:64:ca:c1:c8:0b:d0:53:30:4f:
                    70:0f:67:60:e3:fb:63:37:08:2f:c5:e8:4c:51:c7:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:29:C9:65:AD:82:E4:EA:D7:CE:AB:F9:F8:69:6D:BB:10:61:FE
            X509v3 Authority Key Identifier:
                keyid:25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:60:0b:9c:27:d2:b6:0f:0c:df:01:47:c0:9a:59:71:b6:
         fa:a7:7a:94:62:23:9a:d6:dd:19:c5:b6:f7:64:44:5c:cc:3b:
         35:db:b0:a8:94:39:31:6a:5d:7a:31:f9:87:cd:b4:2d:66:17:
         f2:1f:bf:5c:90:eb:ce:c4:d7:2a:51:5d:5b:bf:53:fc:f8:96:
         50:a3:39:96:67:ab:fc:57:50:5e:94:fb:31:bb:a0:08:d1:89:
         c3:60:3d:95:28:17:8c:82:e4:1d:83:56:d3:f6:7e:88:f2:04:
         92:1d:a8:6d:2f:38:a9:79:c7:dd:46:29:15:e0:1e:47:f6:7b:
         d0:e9:58:95:3e:04:1d:48:3f:d2:a9:43:84:b9:bb:3d:2a:52:
         1e:1d:2c:8f:38:d5:55:4b:42:50:30:17:91:52:37:33:18:56:
         8b:7c:37:59:12:5f:1c:2b:6d:50:cb:06:88:f4:84:0f:62:b5:
         07:dc:2f:12:8f:fe:ed:84:ea:be:1e:44:1e:64:5b:ea:33:bd:
         ce:6d:96:d6:56:cb:09:2f:c8:fb:6c:13:34:13:88:2b:e4:f4:
         a4:d7:72:dd:6a:97:ce:52:da:a5:d8:01:45:48:e4:76:8f:03:
         bf:b3:b2:b8:ca:a6:5d:24:32:e2:a1:a6:58:4d:73:39:49:8e:
         d6:c9:14:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjFGMzExMC8GA1UEBRMoMjUxODhENjBBQkY1ODI1NzkyQjRBRkNBRDVCMkI0RTk3
OEZBQUUzMDAeFw0yNjEwMDUwODI1MDJaFw0yNjEwMTIwODI1MDJaMBgxFjAUBgNV
BAMTDTZhYzM1ZWRmLTc0YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3DCcihZiO8sfe5iVzm03T+SVR2sN+9R1bw3V8ZdgbBBvsNJF2u1gRGa+330Vp
UDPmJqtSgwgCg/X/twZZmGJcESYjcWoOPPrpkeIX0Fly0+046p6AP4LBEne3ISkD
5k7IfpTcZDo1njGH4KHRYQMA0QmXVCdMSZcNza/vy0finDCpk4u9+fvuuj9wDzhA
/vIJwNAk2//AMnYa1zsvh8IwzWBzf5G0T4/EeAf6bp5l3k2RX/iH2HKZP3cbHo3X
GdC7pVVVqA6aTuFc0qGaDLD54MZ8UkJCQnIYlYkJDuMXig1T0yz4tGTKwcgL0FMw
T3APZ2Dj+2M3CC/F6ExRx4ftAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmoApyWWt
guTq186r+fhpbbsQYf4wHwYDVR0jBBgwFoAUJRiNYKv1gleStK/K1bK06Xj6rjAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MUYzLzMwOEU4MTFFMjE5
MjExRjE4OTQ0QUFDRTBEM0Q4QzY3L0pSaU5ZS3YxZ2xlU3RLX0sxYkswNlhqNnJq
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSlJpTllLdjFnbGVTdEtfSzFiSzA2WGo2cmpBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
MUYzLzMwOEU4MTFFMjE5MjExRjE4OTQ0QUFDRTBEM0Q4QzY3L0pSaU5ZS3YxZ2xl
U3RLX0sxYkswNlhqNnJqQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCW0mALnCfStg8M3wFHwJpZcbb6p3qUYiOa1t0Zxbb3ZERczDs127ColDkxal16
MfmHzbQtZhfyH79ckOvOxNcqUV1bv1P8+JZQozmWZ6v8V1BelPsxu6AI0YnDYD2V
KBeMguQdg1bT9n6I8gSSHahtLzipecfdRikV4B5H9nvQ6ViVPgQdSD/SqUOEubs9
KlIeHSyPONVVS0JQMBeRUjczGFaLfDdZEl8cK21QywaI9IQPYrUH3C8Sj/7thOq+
HkQeZFvqM73ObZbWVssJL8j7bBM0E4gr5PSk13LdapfOUtql2AFFSOR2jwO/s7K4
yqZdJDLioaZYTXM5SY7WyRSW
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:14:52 2026 by rpki-client