Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File:                     o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier:          jclo3uaXlw1QG/b3/KwwEhHcuH4j52Jp7hGjaUFclCY=
Subject key identifier:   13:B3:A2:56:D8:D0:D4:9D:DD:F7:B0:FF:85:DF:CA:E5:1D:BC:A6:2E
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       04DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number:          04C0
Signing time:             Fri 09 Oct 2026 00:05:00 +0000
Manifest this update:     Fri 09 Oct 2026 00:04:59 +0000
Manifest next update:     Fri 16 Oct 2026 00:04:59 +0000
Files and hashes:         1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: FL/01J4XgTArVB4xqejtjcqPKHbojCWHuB4Eu1c/4bM=)
                          2: 0B5742C234AD11F1851A1E75B8833773.roa (hash: PgHm8kIkg0ILltI3AvO0evXqOsp4h8xbRfxnnSTT31c=)
                          3: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: kXLkRG4xYfLnM0J2YdWVuS+q04wt6hKsDNBBad1HXsc=)
                          4: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: vKCveSRO1lmMSMepRjwFMH5hVO6szfi6cYdihL340nY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: Oct  9 00:04:59 2026 GMT
            Not After : Oct 16 00:04:59 2026 GMT
        Subject: CN=6ac82fab-c209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:a3:d5:0d:dd:95:c6:e3:ee:17:a5:27:b8:
                    a4:4d:4b:dc:6c:04:a2:7f:b0:95:c0:49:31:af:28:
                    69:fd:a8:dc:cf:e5:66:c6:4e:df:38:a2:2a:1f:d0:
                    14:cf:f5:23:87:3a:61:d8:9c:16:27:a7:49:74:e2:
                    23:75:47:ae:a9:53:f7:e1:f0:2e:94:24:6d:14:d5:
                    e1:6f:10:f0:82:4f:6b:21:0b:3c:ed:3a:81:2c:13:
                    25:34:57:82:05:3d:51:9e:d8:1e:86:6e:ef:c0:15:
                    9c:5d:88:2a:97:4c:6a:b2:06:c6:3f:ff:03:ce:3a:
                    32:82:6f:d7:4e:7d:1b:04:c5:c3:f1:b7:fd:f0:4a:
                    8f:4c:bd:f6:c3:cf:7c:09:54:60:52:d4:7d:42:b6:
                    bf:99:06:85:54:6b:d6:8b:88:5e:38:9b:4c:dd:11:
                    6c:b6:e0:de:fe:b7:38:40:53:96:a1:03:4c:27:26:
                    ef:f8:9b:58:e6:6c:cf:9d:95:e2:78:c5:a8:ef:db:
                    c8:ce:e4:f1:83:a4:4d:2d:0b:16:2e:43:d7:79:28:
                    0e:db:ea:3f:ec:71:f8:9f:26:d1:7d:53:ed:35:c2:
                    5d:9b:c4:15:66:1e:68:1d:6c:69:af:cc:b9:c5:33:
                    8a:14:e6:eb:4a:03:a1:57:60:af:d0:91:7d:7b:18:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B3:A2:56:D8:D0:D4:9D:DD:F7:B0:FF:85:DF:CA:E5:1D:BC:A6:2E
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:df:97:b0:26:72:41:ec:88:6b:f2:06:aa:53:78:19:53:1f:
         d7:9f:04:45:5a:2a:16:47:7d:8f:37:b3:c6:1f:68:fc:82:dd:
         e8:32:16:10:0f:b2:f9:07:2b:89:5f:7f:f6:86:e5:a4:06:04:
         0b:55:f9:72:94:2c:d3:ec:df:69:51:33:98:f7:52:42:4a:02:
         9f:34:67:83:25:59:07:a4:93:c7:52:26:48:95:7e:12:ab:e0:
         f0:53:94:5f:12:ab:5a:d9:23:d5:ac:6f:74:55:66:05:d7:3f:
         d8:99:b7:91:e0:ce:8f:6f:e5:49:13:c9:9d:52:96:76:b7:f8:
         79:40:93:00:00:95:d0:5b:71:16:27:9b:bd:cb:33:88:cd:e2:
         2b:00:f9:c7:28:3a:59:0b:03:d2:69:b1:5b:e3:c9:43:5f:19:
         ea:a0:fe:b4:6e:85:59:e1:42:7f:e4:7f:4b:ae:47:8a:33:db:
         2f:87:27:9b:3f:1d:b1:38:d8:bd:51:e2:08:25:dd:3e:5d:ca:
         f5:70:0f:34:21:e4:ce:fb:d7:17:b3:07:ec:e4:29:23:9e:7c:
         4d:bf:ae:d4:50:5c:a5:99:d0:8c:90:9b:51:4d:b2:7c:cf:f4:
         dd:47:12:2a:38:c3:e3:46:67:ef:a7:e4:52:49:47:b8:05:3d:
         e6:17:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:57:14 2026 by rpki-client