Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
File:                     jaLVp38m0NbVR89fVM32RoXD0wI.mft (raw, json)
Hash identifier:          NAUoMje8BE3v21iJKgmZbmpE2lj04TA7UCZ915anhyU=
Subject key identifier:   03:5E:F3:A2:AD:4D:CB:99:8E:50:54:D5:2A:8A:D8:FC:8A:4F:8C:37
Authority key identifier: 8D:A2:D5:A7:7F:26:D0:D6:D5:47:CF:5F:54:CD:F6:46:85:C3:D3:02
Certificate issuer:       /CN=A91E5EB9/serialNumber=8DA2D5A77F26D0D6D547CF5F54CDF64685C3D302
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
Manifest number:          35
Signing time:             Wed 07 Oct 2026 09:14:58 +0000
Manifest this update:     Wed 07 Oct 2026 09:14:58 +0000
Manifest next update:     Wed 14 Oct 2026 09:14:58 +0000
Files and hashes:         1: jaLVp38m0NbVR89fVM32RoXD0wI.crl (hash: zZqw1t7HbY6L7K4GAcCUTPwoSQP5GH0KwioMo+Z5TJY=)
                          2: 459D907A7A5411F1853CBD4D89A30FBC.roa (hash: I9kJtF1h7oYctnKqxd8kTl2aBwt4XGPxXvRCQBmjedQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EB9, serialNumber=8DA2D5A77F26D0D6D547CF5F54CDF64685C3D302
        Validity
            Not Before: Oct  7 09:14:58 2026 GMT
            Not After : Oct 14 09:14:58 2026 GMT
        Subject: CN=6ac60d92-de90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:ca:28:f5:5d:b9:30:df:e3:de:31:6d:69:
                    f0:9e:a0:98:09:2a:25:81:2e:be:c7:88:40:21:da:
                    19:b0:c8:d2:4a:cf:d8:ba:35:f1:0d:10:cc:16:57:
                    bd:da:60:cb:6d:19:24:77:0b:5b:85:86:35:98:e7:
                    15:5e:59:06:be:0c:89:4e:dd:f5:73:36:ea:5e:13:
                    09:76:02:84:f1:a4:fa:c1:e9:6d:6c:72:0a:13:de:
                    23:92:00:94:53:9a:19:ce:7e:06:70:50:28:39:de:
                    a6:81:c9:b5:36:44:5e:7a:8e:e4:22:7a:13:93:fa:
                    59:ae:a0:c4:30:86:fe:a2:2b:f3:e8:7d:22:77:3e:
                    70:68:79:ba:1b:11:47:aa:bc:39:77:b1:e0:c0:ee:
                    57:3d:35:bb:39:16:a6:03:85:4a:1c:60:79:43:db:
                    5e:5e:bd:0b:de:b4:50:35:35:18:ac:b5:8c:08:9e:
                    d1:ab:4c:91:2b:8c:68:71:7e:15:e4:9b:71:37:ef:
                    2f:73:34:5d:f9:3d:7d:03:5a:79:7f:c6:ed:52:ca:
                    fa:f7:02:2a:67:a5:e1:59:60:4c:6f:e8:3f:51:d0:
                    08:7f:20:a1:39:37:b1:c7:00:b2:c2:68:7c:fb:b1:
                    23:b5:50:b2:97:7f:80:ef:09:1f:d8:2c:b7:3a:d7:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:F3:A2:AD:4D:CB:99:8E:50:54:D5:2A:8A:D8:FC:8A:4F:8C:37
            X509v3 Authority Key Identifier:
                keyid:8D:A2:D5:A7:7F:26:D0:D6:D5:47:CF:5F:54:CD:F6:46:85:C3:D3:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:f7:77:cc:8a:0d:91:d4:01:ee:92:46:bf:b2:b1:57:ef:
         c6:7d:66:71:70:81:13:fe:4d:f1:0a:84:77:00:2d:e5:5a:2a:
         27:15:12:83:6a:45:50:37:1a:39:f6:46:88:08:37:d0:5d:49:
         9c:7e:ca:bf:17:01:1d:e9:9a:e0:f2:38:ca:a8:07:0b:ed:73:
         5b:d1:68:05:62:94:8c:5b:d2:69:0b:71:9a:71:c6:5a:cf:0c:
         c6:f2:99:19:6d:4d:7b:ce:b3:f3:8f:f1:62:fc:14:b4:4d:78:
         41:16:fd:35:16:e1:eb:e6:dc:d1:d2:f8:da:99:64:cc:41:b1:
         06:9c:94:57:04:1d:15:6f:93:26:43:2a:7f:ac:81:80:35:17:
         e0:b4:d4:42:11:7d:1f:32:4d:77:82:e4:e1:08:d1:e8:81:a1:
         a6:59:b0:b2:ba:cb:eb:8c:2c:07:f7:9a:31:54:06:fe:80:cc:
         6f:d8:ff:61:f1:9e:11:33:77:21:98:e4:57:e4:7e:56:79:3e:
         7a:33:a7:0f:1b:c7:eb:86:72:f1:c6:3f:33:40:cb:c8:1e:b2:
         51:b4:e1:b2:6c:1b:65:48:c7:1d:83:f1:fb:5d:db:30:c4:50:
         0d:ea:3f:29:d3:16:1d:ac:a6:63:70:58:ef:19:f2:cc:2c:5e:
         39:58:f3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:17:18 2026 by rpki-client