Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
File:                     Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json)
Hash identifier:          sLNday/gleDImVTY5+yCQHk8HcxvSlxi/ZoKfQUSVn4=
Subject key identifier:   2C:C7:DD:6F:5A:9C:C4:F5:5D:D5:9D:5F:5D:D8:2A:F7:E3:86:3F:05
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Certificate issuer:       /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial:       05CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
Manifest number:          05C0
Signing time:             Tue 06 Oct 2026 23:12:11 +0000
Manifest this update:     Tue 06 Oct 2026 23:12:11 +0000
Manifest next update:     Tue 13 Oct 2026 23:12:11 +0000
Files and hashes:         1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: 0YwMXT5aw+LItg22Rc+pcK/Unl9VvJIhIGSeoQmNX1k=)
                          2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: tZDhIMTLHb3NbSs7t7zGCwhDrXMR5MLwG/mByKSsB2E=)
                          3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: TzSLplKK/HJS9afWmcTODUx8ULZ9/J0l/ynIkBKB7MM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 23:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486 (0x5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
        Validity
            Not Before: Oct  6 23:12:11 2026 GMT
            Not After : Oct 13 23:12:11 2026 GMT
        Subject: CN=6ac5804b-fcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:99:39:9e:64:71:50:a0:ab:da:a9:93:9c:
                    36:6a:5d:96:b7:2d:32:f5:ec:20:bf:cd:53:bd:d2:
                    30:47:87:36:f8:5e:bc:44:82:e1:24:7a:65:d3:20:
                    af:bb:9e:e6:cb:11:1b:a2:b2:ae:17:94:9d:3a:a7:
                    13:66:87:68:f5:f5:c4:7a:e9:6e:d5:f0:cf:14:3c:
                    22:24:89:32:47:d4:4e:4b:24:e1:01:a6:e2:a2:cd:
                    4e:16:32:79:5e:43:d3:ff:e2:e3:c8:91:2f:7e:26:
                    07:fe:61:33:b5:b5:a7:7a:f4:f0:69:ae:2f:14:0d:
                    e4:c0:e4:19:71:ad:2d:de:75:d0:2a:90:c8:da:59:
                    2b:16:6a:f4:84:98:f2:2b:3d:0a:af:46:58:23:8f:
                    e2:82:ef:4c:56:02:15:7a:11:3e:98:34:aa:94:b9:
                    32:d8:1d:1e:0b:21:76:ed:af:2b:66:3a:7b:39:2a:
                    7e:56:d8:dd:09:17:06:ac:0b:27:d0:38:c2:90:4e:
                    3e:25:fd:bb:6b:d5:60:76:d5:56:ee:62:19:4b:7e:
                    cc:17:51:bd:64:70:1b:f8:35:c0:d2:a8:dc:cb:8e:
                    8e:90:6d:f2:09:a4:00:f6:fb:bf:7a:3b:5f:3f:69:
                    bf:50:88:c9:63:81:92:ec:c4:bc:3e:d3:fa:d1:ea:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C7:DD:6F:5A:9C:C4:F5:5D:D5:9D:5F:5D:D8:2A:F7:E3:86:3F:05
            X509v3 Authority Key Identifier:
                keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:46:40:be:e3:be:35:d7:a2:ed:85:47:78:b0:6d:f6:08:
         9a:cf:07:cc:2a:66:0c:4b:f7:46:ee:47:1e:7e:93:0a:3a:20:
         d3:e1:7c:bf:2d:4e:be:13:bf:de:3d:ce:e1:47:e0:0a:2c:e4:
         ed:a0:ec:52:9d:92:64:27:ae:31:27:59:9b:3d:21:5d:7f:0d:
         e7:8e:04:7f:b2:76:33:d3:17:60:67:78:46:22:ff:b9:59:8a:
         53:43:7f:e1:ae:e9:c9:ff:75:62:b1:80:72:dc:6b:87:26:f4:
         cf:79:69:ff:c2:5c:8a:b8:fe:14:c1:b9:75:24:1e:85:b5:07:
         e7:49:ee:cd:b5:50:ef:02:72:12:e5:cf:00:a8:9f:8d:be:88:
         e9:37:f3:80:90:da:e4:dd:21:ac:98:63:22:27:bd:d2:39:5f:
         ad:5d:39:38:21:0a:d4:24:a8:92:ba:ca:8d:2a:a4:8d:14:dc:
         d8:44:12:c9:87:95:b5:cb:0a:9c:46:aa:ba:ef:26:a3:9e:07:
         d1:6d:68:32:d3:14:10:fa:a0:6c:0a:45:23:09:29:64:db:b1:
         2f:ca:6d:27:e5:1f:56:15:48:b0:0a:ac:a4:ff:6a:82:45:42:
         89:aa:97:fe:e5:d2:6f:05:6c:6c:6d:37:33:ff:4c:b5:b5:f9:
         7a:e6:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:07:03 2026 by rpki-client