Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
File:                     ju12mE8jGqLHDymCN43Gndg9WFw.mft (raw, json)
Hash identifier:          iUq6DiV6Izn+qk/B5gjBnAVuYwxlypbUbhNX9loRrGs=
Subject key identifier:   46:A0:C8:6A:1C:C4:68:44:1F:C9:21:4D:75:3F:07:42:17:99:21:36
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Certificate issuer:       /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
Manifest number:          82
Signing time:             Mon 05 Oct 2026 08:09:48 +0000
Manifest this update:     Mon 05 Oct 2026 08:09:47 +0000
Manifest next update:     Mon 12 Oct 2026 08:09:47 +0000
Files and hashes:         1: ju12mE8jGqLHDymCN43Gndg9WFw.crl (hash: WWFq2ZNISsE3AiNj80jGmdigKWLNMf2fY0b4lr03AsQ=)
                          2: 850C91D6001811F18252CD21426F56BC.roa (hash: H0q+xb6eVx4tPSPvPAYInq6UBtaoioP2tniqAH87wyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
        Validity
            Not Before: Oct  5 08:09:47 2026 GMT
            Not After : Oct 12 08:09:47 2026 GMT
        Subject: CN=6ac35b4c-6916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:03:7e:24:94:af:a0:ff:b5:2a:61:c8:55:
                    e0:24:bd:2c:54:7e:b7:45:6c:ca:32:58:8c:8b:4a:
                    2a:20:1b:18:eb:b5:5d:14:e6:d9:86:ea:a7:6d:1b:
                    eb:5e:60:f8:9b:92:50:50:05:d4:e2:0c:03:9d:e7:
                    60:00:fc:5b:9f:3c:a6:88:47:9c:2f:94:3f:5f:31:
                    37:96:fc:9e:c9:cd:81:92:61:da:4b:52:32:07:39:
                    c1:21:0d:f8:1d:0a:a2:b3:eb:ec:09:00:1d:e0:ac:
                    f1:ce:07:49:96:67:45:4f:63:c3:56:cd:b5:e5:ff:
                    06:68:5a:09:e1:e6:0b:b6:fe:89:86:09:ef:29:72:
                    00:7b:20:20:04:0a:24:f9:61:29:9f:b8:a1:1b:a2:
                    de:ba:b9:72:b3:29:21:02:a1:36:ca:bb:a6:4a:44:
                    86:72:b1:45:56:a3:21:29:9d:ca:0a:1a:2b:39:f9:
                    51:45:3b:b7:3d:32:c5:c3:a2:b2:7b:ab:19:2c:36:
                    1f:f2:d5:25:36:48:cc:23:48:f6:f8:a0:2b:b9:e7:
                    4f:f8:84:19:0b:b1:b5:79:89:70:4d:ad:47:64:a3:
                    18:27:a0:e3:c6:7c:e5:40:2b:41:3b:5c:bc:07:21:
                    9f:99:b1:2c:a6:df:31:9d:40:92:a4:f7:34:e2:c8:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:C8:6A:1C:C4:68:44:1F:C9:21:4D:75:3F:07:42:17:99:21:36
            X509v3 Authority Key Identifier:
                keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:33:f9:75:44:f6:5f:9b:81:57:eb:15:a5:07:60:80:b7:44:
         78:3d:b9:c2:de:c7:cf:08:8f:5c:ac:2a:c3:67:e5:18:0c:e1:
         16:21:aa:86:45:b3:e0:b2:91:ec:55:dc:75:b2:55:04:a0:a3:
         58:74:36:cd:50:73:ef:4a:7d:8a:a3:d9:d4:ab:7c:da:96:dd:
         dd:59:b1:e1:dd:3d:40:f3:1b:8b:20:20:63:57:93:2c:97:5d:
         78:24:72:ca:94:46:3b:d3:c5:4c:88:8d:99:61:91:c4:bf:fb:
         4c:12:d4:79:0d:16:ba:f2:ed:21:b8:93:58:46:30:c0:75:6a:
         a1:dc:0d:db:fa:8d:c7:cf:6f:45:04:c8:fd:f0:08:b9:cf:e2:
         02:86:10:e7:b0:e0:e2:f1:7d:63:ba:f3:1a:9c:e4:ed:0c:95:
         f0:9b:c6:57:09:53:40:c6:8d:b4:27:fc:35:e9:7c:6b:a7:d7:
         e8:10:88:a2:13:7e:4b:fb:3b:81:7a:95:a0:05:f4:9f:4b:ea:
         9b:e2:bd:50:27:ef:b8:c7:c4:55:ca:4e:ec:ce:e0:49:d4:34:
         1b:ca:43:e9:1e:06:9b:f8:26:6c:b3:88:15:eb:31:e9:f2:15:
         61:9c:71:f8:82:9e:27:f1:dc:74:46:5b:f2:31:29:4e:e3:ba:
         56:f9:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 16:04:11 2026 by rpki-client