Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
File:                     JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json)
Hash identifier:          GPoUxMOqnPfg/DSqRK25B5oajIUotEiAL5vKIRc5zKk=
Subject key identifier:   1F:04:FB:F0:5E:6B:C8:A4:BD:95:26:99:14:92:88:C2:1A:D6:07:A3
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Certificate issuer:       /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial:       0DB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
Manifest number:          0DA7
Signing time:             Mon 26 Oct 2026 17:55:14 +0000
Manifest this update:     Mon 26 Oct 2026 17:55:13 +0000
Manifest next update:     Mon 02 Nov 2026 17:55:13 +0000
Files and hashes:         1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: N8X9CycqZi5ZuRz/p/RPGrVd22LVFTJbHcaEIsAK6RI=)
                          2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: QLA/RgvuaonKg9bW/z2IbJYEpT3gfx5VJ79vVBjWg0o=)
                          3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 89YxSryYm31Rbj8lSds/XzwttXebIp1udXTMfTHqmfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3510 (0xdb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
        Validity
            Not Before: Oct 26 17:55:13 2026 GMT
            Not After : Nov  2 17:55:13 2026 GMT
        Subject: CN=6adf9402-3217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:ef:e3:83:f8:df:d8:8c:b6:10:ad:1f:e7:
                    38:36:41:da:f4:41:01:ca:f6:6f:54:30:2b:2f:ac:
                    08:5c:46:a9:2d:89:13:f4:cb:2c:4a:76:49:d8:cb:
                    ab:a4:34:45:95:e4:24:e1:4a:db:e5:ad:0e:db:dc:
                    c8:b5:b8:b7:45:47:c4:5f:54:c2:90:b5:d8:72:af:
                    42:21:a8:dd:84:99:96:c2:fb:0f:64:eb:40:d6:3e:
                    01:6f:f8:37:b5:c7:71:9c:9b:ec:27:de:68:04:6c:
                    e3:e3:5f:fc:43:4f:7e:c5:e8:e4:7f:bf:05:96:2c:
                    ce:e7:d6:b0:af:a1:29:67:5b:79:f6:60:bc:c1:89:
                    9b:ed:c7:07:b5:f2:66:32:e2:62:0a:9c:d8:15:9f:
                    ca:05:28:d3:4e:bf:0b:d6:46:13:c3:cd:ad:f7:ca:
                    f2:76:3c:2e:e7:fb:2d:23:22:1e:0c:9c:6a:62:9d:
                    13:bc:b6:43:30:9d:a2:42:bd:70:ac:cd:27:b0:50:
                    3c:f8:66:3d:c6:8f:64:bf:5b:10:18:d5:53:c6:46:
                    e1:07:63:de:0e:32:e4:d1:5a:c5:67:2d:a3:d0:36:
                    11:82:d4:91:90:ae:48:63:83:e6:d9:6f:3a:b8:3e:
                    9c:31:e6:16:a5:47:da:d4:47:d6:4c:a1:9d:7e:7a:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:04:FB:F0:5E:6B:C8:A4:BD:95:26:99:14:92:88:C2:1A:D6:07:A3
            X509v3 Authority Key Identifier:
                keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b7:6e:1a:32:e2:1e:90:61:24:36:b8:1c:b6:83:7c:96:75:
         08:19:37:48:53:4c:13:c0:54:e1:6f:08:6f:f7:ae:42:00:c5:
         a7:2b:0c:0e:c5:7a:51:ac:77:90:63:3f:06:16:07:a9:85:95:
         36:ea:7a:03:c7:02:8b:b2:2d:83:f4:4d:f6:85:c9:3c:da:e2:
         9d:b4:93:8d:5a:65:c4:da:8e:4c:25:fa:7f:29:3b:5f:b0:de:
         b2:65:80:77:f9:07:d8:4a:48:59:ea:cf:34:63:43:0f:10:2e:
         b6:36:3d:a2:17:2a:c0:46:42:a4:9d:c5:a4:b4:4e:9e:0f:60:
         55:3f:c5:c2:32:14:71:9a:41:a8:43:dd:33:67:cb:6a:37:a9:
         98:46:af:ac:c9:a1:d4:81:80:b1:a9:a1:83:30:6f:53:3e:f5:
         e4:32:e9:1b:d3:c7:0a:83:dc:79:da:c9:40:f5:84:67:dd:83:
         84:64:0c:00:c0:82:9a:5a:6d:72:fe:b1:a3:06:01:04:90:c0:
         4f:60:78:8d:77:5e:e0:67:23:87:4e:ab:39:05:5a:8d:86:1b:
         4c:65:8f:7c:4c:ad:f7:7d:ba:55:9a:06:04:4a:20:5a:a8:6b:
         ac:c8:81:9e:85:90:c2:7c:0a:6c:e0:10:98:d3:24:f8:9b:63:
         ec:82:7d:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD
RjQxN0M5M0YwHhcNMjYxMDI2MTc1NTEzWhcNMjYxMTAyMTc1NTEzWjAYMRYwFAYD
VQQDEw02YWRmOTQwMi0zMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA57Lv44P439iMthCtH+c4NkHa9EEByvZvVDArL6wIXEapLYkT9MssSnZJ2Mur
pDRFleQk4Urb5a0O29zItbi3RUfEX1TCkLXYcq9CIajdhJmWwvsPZOtA1j4Bb/g3
tcdxnJvsJ95oBGzj41/8Q09+xejkf78FlizO59awr6EpZ1t59mC8wYmb7ccHtfJm
MuJiCpzYFZ/KBSjTTr8L1kYTw82t98rydjwu5/stIyIeDJxqYp0TvLZDMJ2iQr1w
rM0nsFA8+GY9xo9kv1sQGNVTxkbhB2PeDjLk0VrFZy2j0DYRgtSRkK5IY4Pm2W86
uD6cMeYWpUfa1EfWTKGdfnogdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8E+/Be
a8ikvZUmmRSSiMIa1gejMB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz
RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTg2OC8wNjVBQzIyQ0YzRkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01V
QjVXNkc2bXgzYV9QUVh5VDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGrduGjLiHpBhJDa4HLaDfJZ1CBk3SFNME8BU4W8Ib/euQgDFpysMDsV6Uax3
kGM/BhYHqYWVNup6A8cCi7Itg/RN9oXJPNrinbSTjVplxNqOTCX6fyk7X7DesmWA
d/kH2EpIWerPNGNDDxAutjY9ohcqwEZCpJ3FpLROng9gVT/FwjIUcZpBqEPdM2fL
ajepmEavrMmh1IGAsamhgzBvUz715DLpG9PHCoPcedrJQPWEZ92DhGQMAMCCmlpt
cv6xowYBBJDAT2B4jXde4Gcjh06rOQVajYYbTGWPfEyt9326VZoGBEogWqhrrMiB
noWQwnwKbOAQmNMk+Jtj7IJ9Zg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:58 2026 by rpki-client