Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
File:                     JDVvu5e9r313vWlCFaK8d-ZL9U0.mft (raw, json)
Hash identifier:          xiW1f5MNkNK68uVLVGOnTGQ4iQ8QIOMxFCmx85QHbWc=
Subject key identifier:   CE:16:3A:BB:A7:28:A6:45:5D:5E:B0:3C:A4:51:F7:78:5D:BD:8A:20
Authority key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D
Certificate issuer:       /CN=A91EA9F0/serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
Manifest number:          84
Signing time:             Sat 03 Oct 2026 08:25:54 +0000
Manifest this update:     Sat 03 Oct 2026 08:25:53 +0000
Manifest next update:     Sat 10 Oct 2026 08:25:53 +0000
Files and hashes:         1: JDVvu5e9r313vWlCFaK8d-ZL9U0.crl (hash: zm2lvlmR0I9iv7bsB4xy9bu71ihFP+dLIltrNaoRGmc=)
                          2: 6AC4E53E001411F1B4E09ECF406F56BC.roa (hash: d6S2IX4DR/rLbqbsWRy4XlJUKZ6LC3VVHK1EodAZfjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D
        Validity
            Not Before: Oct  3 08:25:53 2026 GMT
            Not After : Oct 10 08:25:53 2026 GMT
        Subject: CN=6ac0bc12-60f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:cc:8c:d9:f0:72:a0:0b:56:ca:fb:2a:75:
                    12:d8:d9:a3:5b:e5:5f:e6:cc:6c:6f:24:ec:46:76:
                    a5:62:c3:49:39:43:5b:31:5e:51:d7:dd:16:ec:10:
                    27:26:eb:ec:6b:dd:2d:fc:3b:08:ea:10:a6:95:2c:
                    a2:21:15:fa:3e:59:0d:1c:37:4c:55:18:31:56:65:
                    8a:bb:fc:45:f9:81:ec:74:fb:c4:3e:60:84:83:e1:
                    ac:98:14:25:e4:1d:d2:16:96:83:74:0f:e2:8b:55:
                    69:cc:3b:22:f9:43:ed:0f:e1:f9:38:a1:78:a8:0a:
                    4f:2d:f3:90:fa:be:2f:1e:a1:00:e9:50:54:9d:01:
                    a2:13:26:f3:98:a9:56:a1:6d:44:39:2f:0b:2a:14:
                    aa:7b:29:94:92:d4:62:a1:61:07:c6:31:c2:e5:ef:
                    84:61:21:d1:a7:ac:79:85:c0:f5:36:51:61:5c:0b:
                    2c:e0:0a:f5:c8:bb:a5:47:b7:07:07:4d:da:0c:e4:
                    b3:08:62:e3:0b:38:cb:53:a6:b4:94:00:42:0f:64:
                    fd:48:12:5b:ab:24:a1:37:5d:0f:5b:d7:cb:fe:5d:
                    3f:49:2f:1c:04:16:a5:82:f7:7c:92:14:8e:c5:9d:
                    6c:85:6b:f8:97:cd:5c:1e:c1:7d:34:a9:a0:76:0c:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:3A:BB:A7:28:A6:45:5D:5E:B0:3C:A4:51:F7:78:5D:BD:8A:20
            X509v3 Authority Key Identifier:
                keyid:24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:41:9b:f1:ec:6c:04:56:9c:80:30:cc:b1:11:31:27:0e:
         47:2a:e1:0f:d8:b3:02:45:24:3a:82:ff:09:d8:a3:35:c2:be:
         13:8f:c6:1f:d6:dd:33:84:00:75:4d:be:94:87:90:78:fa:f4:
         67:a8:88:5c:4b:a8:b1:21:f5:6b:14:e7:33:98:10:9a:3d:8b:
         20:bd:0d:ac:98:49:f1:ef:b4:5e:af:26:d9:12:54:7d:7b:26:
         5a:ae:0f:d5:8f:be:42:f1:da:6f:b3:a8:9e:f8:b9:07:20:c3:
         d2:f0:e0:0e:20:39:7c:c6:05:78:c9:05:c0:0f:06:9f:70:44:
         bc:a3:6d:d4:01:72:8e:83:3b:c0:f4:b0:9c:9a:32:8c:9b:be:
         fe:dc:07:e3:d4:37:75:b7:f2:b8:2c:42:13:3b:59:32:31:e4:
         18:de:e2:bd:fe:e8:a5:7d:92:a0:5f:e1:55:58:ca:4d:2b:23:
         fc:ea:0e:aa:09:99:bc:45:83:34:60:f1:f2:9f:f3:35:d3:61:
         20:36:4a:36:03:1e:e8:06:04:99:57:56:00:0c:f4:5e:3b:64:
         6f:2e:87:2f:5c:f5:19:8f:19:f0:11:ad:f0:f7:ff:ef:62:f2:
         d6:96:bd:88:8c:f8:9c:31:b5:88:40:f4:b0:79:0b:40:aa:62:
         17:7e:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:10 2026 by rpki-client