Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
File:                     Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json)
Hash identifier:          I6BK/PLlKQFDempzNBIIn/Kov80RSLIDGd6RZNZgpps=
Subject key identifier:   A7:57:A7:68:C5:4B:60:5F:AA:26:FD:80:C3:FD:36:59:68:61:CE:A4
Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD
Certificate issuer:       /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
Certificate serial:       0698
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
Manifest number:          20CC
Signing time:             Sun 04 Oct 2026 16:21:14 +0000
Manifest this update:     Sun 04 Oct 2026 16:21:13 +0000
Manifest next update:     Sun 11 Oct 2026 16:21:13 +0000
Files and hashes:         1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: aYoepYv4gGW7+436vIbeHd//ZeumyGeQHDMWsea6DA0=)
                          2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: ng5bgbFugCpJCI2PYFWeSfminEhUjB176PVU+n+Eszk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl
                          rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD
        Validity
            Not Before: Oct  4 16:21:13 2026 GMT
            Not After : Oct 11 16:21:13 2026 GMT
        Subject: CN=6ac27cfa-7cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:61:77:a6:33:8a:6d:cb:03:2b:19:3f:e4:
                    29:d5:32:d4:2c:65:ec:75:54:2b:91:36:11:a0:c3:
                    40:06:a4:b6:6e:44:85:0b:8c:21:63:0d:ba:46:f4:
                    f5:2d:82:e2:59:29:7a:a1:96:12:7c:b1:a9:39:05:
                    03:e4:ce:f3:f0:7f:b6:d9:f8:54:ee:ea:a6:39:b2:
                    58:0d:34:1e:7b:6f:a5:47:f3:6f:6b:6f:65:2b:66:
                    1e:3f:c5:5d:a0:ab:ca:1b:44:73:e8:2d:b3:46:56:
                    bb:5a:d6:17:ed:9e:fc:97:a0:a3:da:bd:75:54:c5:
                    e4:ff:ce:fe:c6:ea:13:6b:07:3f:5a:28:de:fc:b8:
                    2b:6a:65:a7:5a:04:66:3f:f7:41:3d:6a:c4:c9:ba:
                    f4:e2:90:f7:f0:bb:97:db:fe:e3:16:1b:4f:ea:74:
                    59:74:72:8f:ca:a9:0d:af:50:59:3e:02:8b:de:8d:
                    a0:0c:da:cb:5d:4e:4f:88:3d:de:79:6d:28:40:45:
                    81:cd:12:83:bf:5c:a2:75:48:7c:1c:fe:ca:2a:81:
                    ba:dd:3c:ec:6b:f8:9d:92:06:0d:98:3f:34:0f:fd:
                    a5:8c:af:bd:0a:46:07:60:78:63:28:a1:38:0d:5c:
                    f5:bd:61:ac:26:ad:b0:5d:af:c1:bf:1e:d0:ff:b2:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:A7:68:C5:4B:60:5F:AA:26:FD:80:C3:FD:36:59:68:61:CE:A4
            X509v3 Authority Key Identifier:
                keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:0e:61:78:00:c1:47:78:47:3d:b2:df:55:84:f5:12:e0:31:
         31:af:3f:bc:5b:6c:cc:a8:9e:e4:d6:3c:78:88:94:33:b4:ba:
         eb:4c:23:08:45:09:f0:6e:4f:c5:4a:90:81:20:81:a3:66:e7:
         f0:5b:3b:9b:1a:1c:01:ba:17:1d:ed:a3:81:f6:62:15:5f:59:
         a4:fc:f3:be:ac:21:3c:cb:28:a8:4e:c6:5b:d2:f8:33:4c:68:
         4b:f3:79:c0:94:26:bc:b8:ef:02:66:27:0d:23:6c:32:67:a6:
         37:55:8b:5f:6f:60:c3:7e:5f:dc:f0:d8:68:56:5a:8e:95:df:
         b6:3d:fe:35:f5:f7:d5:79:15:6b:d8:64:49:8d:36:de:8d:ab:
         f2:4c:5d:a5:30:9e:a0:12:96:0f:3d:0e:e7:af:94:9a:b5:33:
         69:a4:7a:c3:47:96:cf:60:65:af:99:ca:33:be:24:e5:a6:0d:
         8b:0b:0d:c8:3c:a6:50:0b:a4:ca:2e:26:ac:36:f9:d7:5a:54:
         66:54:40:fc:6b:ba:96:c7:69:40:ee:d7:6c:57:70:d2:11:cf:
         3a:d9:4b:a0:5c:eb:cb:48:49:b0:b7:30:2d:af:f0:b3:11:ea:
         16:2e:d9:d6:8d:81:cb:03:94:57:9d:25:65:ba:ed:b1:b1:9a:
         6a:28:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:38:20 2026 by rpki-client