Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft
File:                     j-7SDCRC6A2K21UYUyH566ymNRk.mft (raw, json)
Hash identifier:          +dpwv1E8skNSldeFaZTFJtLs5nlreRtpcV8GxKARN8M=
Subject key identifier:   5E:00:20:DA:74:33:F9:4B:51:10:FA:13:D2:DA:C8:A5:DE:7F:83:D5
Authority key identifier: 8F:EE:D2:0C:24:42:E8:0D:8A:DB:55:18:53:21:F9:EB:AC:A6:35:19
Certificate issuer:       /CN=A91C987A/serialNumber=8FEED20C2442E80D8ADB55185321F9EBACA63519
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft
Manifest number:          2C
Signing time:             Mon 05 Oct 2026 09:17:47 +0000
Manifest this update:     Mon 05 Oct 2026 09:17:47 +0000
Manifest next update:     Mon 12 Oct 2026 09:17:47 +0000
Files and hashes:         1: j-7SDCRC6A2K21UYUyH566ymNRk.crl (hash: a06Emph5FZgCl7InYMeA8ruWIVQ3nlS30KwRQbyBZXU=)
                          2: BE253534915611F18490ADCA6911F970.roa (hash: caiLmjkO5oWnKKV5DBoQbkeqp1PZP9RJyWHBUbg7Qdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.crl
                          rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C987A, serialNumber=8FEED20C2442E80D8ADB55185321F9EBACA63519
        Validity
            Not Before: Oct  5 09:17:47 2026 GMT
            Not After : Oct 12 09:17:47 2026 GMT
        Subject: CN=6ac36b3b-c0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:e9:29:5a:19:39:c8:89:71:e3:7e:99:65:
                    72:22:14:ee:fa:9b:53:79:e4:4d:57:7f:96:b6:92:
                    0c:ca:f0:9f:6b:29:5e:47:6b:4f:20:a4:43:26:86:
                    1e:f1:a7:91:ea:bb:76:95:88:e1:42:47:99:0c:29:
                    1a:4e:db:d8:73:b0:81:e8:c1:0f:ba:e7:d3:65:2b:
                    17:3e:02:f9:52:5f:c7:18:cf:13:0e:f6:0c:28:05:
                    dc:41:95:be:90:9d:3b:9c:9c:29:ea:c6:d7:93:11:
                    b2:10:7f:0b:75:1c:93:84:41:e5:2e:66:c4:47:8e:
                    13:ad:6f:f4:2d:25:cf:4a:02:ae:df:d9:52:78:a9:
                    c6:54:ae:3b:e9:ed:95:d9:80:a6:dd:a1:37:0f:4d:
                    d2:74:22:46:c9:b2:fe:29:2f:9d:d9:0f:b4:c8:d6:
                    b6:a9:e3:85:98:a8:ed:e0:19:94:58:3a:5f:0f:8b:
                    e1:2b:e9:c7:d5:69:09:93:a0:ff:d1:05:88:50:9d:
                    34:8f:ad:1f:bd:07:a6:6f:56:67:ec:27:4f:27:62:
                    db:8e:cf:4b:27:25:2e:77:45:e9:5d:e7:78:3d:9c:
                    2b:7e:09:34:d6:96:c5:cd:c7:19:55:0d:72:d3:89:
                    37:1e:4f:64:fa:be:fe:27:e9:6d:52:2d:ff:53:e7:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:20:DA:74:33:F9:4B:51:10:FA:13:D2:DA:C8:A5:DE:7F:83:D5
            X509v3 Authority Key Identifier:
                keyid:8F:EE:D2:0C:24:42:E8:0D:8A:DB:55:18:53:21:F9:EB:AC:A6:35:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:c6:63:59:3e:33:57:fb:02:a0:7a:1b:1c:dd:a9:92:e0:
         fc:52:7f:43:cd:2e:04:aa:8f:04:71:19:50:6a:26:e9:5b:5d:
         dd:91:3e:ed:a1:c7:03:c2:a3:41:0f:aa:83:23:d7:05:47:6d:
         f4:35:92:55:b9:2c:76:7e:ca:c1:6c:94:ea:4e:fa:e0:db:b9:
         b8:6e:26:2f:e2:ea:3c:12:67:8b:ba:56:8b:b4:95:5d:17:86:
         81:1f:d8:3f:d0:30:52:bd:88:a3:5e:98:ba:23:bb:49:e2:60:
         f4:40:a0:ee:d5:89:b0:ae:7d:28:8e:78:57:6e:b0:91:43:c8:
         64:b1:2d:b4:7b:ef:90:1e:18:f5:1b:59:0e:1f:4c:4f:64:77:
         0c:31:7b:c1:25:a2:b6:a1:75:39:91:bf:ae:06:68:d7:79:63:
         63:40:68:ff:e4:19:9d:33:8d:a8:cb:23:8e:21:61:9c:81:d3:
         71:70:00:f0:03:f3:1e:6f:cf:de:56:31:ad:2a:cf:c4:1c:6d:
         8e:93:a3:bb:80:9d:4a:4b:ca:7e:96:29:99:4a:79:de:e0:70:
         2c:74:e7:d4:9f:e0:75:ac:10:4f:6c:20:a3:6a:77:24:ae:20:
         ad:8f:1a:81:e3:a3:7d:38:91:e5:70:83:d5:1b:81:ce:96:67:
         6d:c5:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:34 2026 by rpki-client