Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File:                     JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier:          40Yci+qYSqwAFJXN/fZJL9JkQKpPAo/g/2kzkAlNFrM=
Subject key identifier:   F9:9F:DE:21:6F:5D:91:4F:34:87:5B:43:66:01:89:40:40:43:DB:97
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       20AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number:          204E
Signing time:             Thu 22 Oct 2026 15:59:28 +0000
Manifest this update:     Thu 22 Oct 2026 15:59:27 +0000
Manifest next update:     Thu 29 Oct 2026 15:59:27 +0000
Files and hashes:         1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: aM03tDgZMCkI8WYbHgmbAtDOYqLFv9n85kPTaI25sAY=)
                          2: QddJQ9AU1DejB9kWQxSe_-RAcwk.asa (hash: MNzb7V3axwNjOOorQnNwsquV2ScuC0xOrQ5fGHkrViU=)
                          3: QGCATQ_pzULDHuLHzlncBzAMOtc.asa (hash: FVQvBVjwSgnX6bgDhRQLIkfk1se0jMTEdVRGqVC5Ds8=)
                          4: YzA9ZVsqvw1-8XWmtPk4xT91c4w.asa (hash: b5KuP1dyVMqyI8BVVHz6+QkOSV1b34yUsC+RPMa5M0Q=)
                          5: 0GtcX-91z6bFnGQC8mP4RPgQK8M.asa (hash: Rc1wU3+PijWMF69bI1HiNO5U0/l7ZavtKzz4iO5aaMA=)
                          6: BC6CE974A76011F19E77BBC67BEE528E.roa (hash: WBg74k3aA0swlePdFjLpH7JHUBKooZ7R34qJXjEBIwA=)
                          7: E4AEC0ACA75F11F19F6EA77F3611F970.roa (hash: jAX/VFWI/LGqcl+oM9q5+Phgjxnh7/enJfNQUBHHpkI=)
                          8: B6uB0uLFo5kCYXHSVGA76mH8H9I.asa (hash: 0eEwtHlDTp8oTQdpYlosgQpn7/bbRaaZ4LW9p58Em2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 15:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8367 (0x20af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
        Validity
            Not Before: Oct 22 15:59:27 2026 GMT
            Not After : Oct 29 15:59:27 2026 GMT
        Subject: CN=6ada32e0-82a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:db:2c:61:1e:4f:5a:fc:43:f9:7b:88:7f:
                    6b:e2:24:d6:7a:7d:77:05:a1:d4:72:86:b0:85:64:
                    2c:9b:5b:df:45:e6:60:16:bf:9c:c6:ee:28:9e:25:
                    fd:eb:c3:8a:d4:be:a8:59:a5:ba:70:2e:30:ab:fe:
                    4d:93:68:70:a5:29:1e:51:96:24:47:fe:00:03:44:
                    b3:15:c5:1e:dd:a0:e3:56:fc:97:53:53:d4:03:e4:
                    3d:42:fa:de:d8:53:83:8e:e5:6c:d8:d1:69:14:3a:
                    69:6c:ff:b0:d4:8c:66:ae:bd:cc:4a:80:4b:2b:80:
                    3a:0f:44:93:e5:45:ee:0c:31:f1:ac:c0:8b:70:69:
                    d8:89:6c:7e:06:b9:ce:4e:a9:0d:6c:18:1c:c9:28:
                    31:d9:07:0a:f2:b5:fc:0d:72:55:7c:4e:84:61:1a:
                    8d:a8:a8:fe:9e:80:a7:85:b5:cd:f9:24:dd:c3:95:
                    da:e9:5b:ec:0d:12:77:f2:08:e7:fd:80:28:fb:47:
                    58:da:02:92:23:ae:a4:f9:ae:f5:62:bf:78:44:c0:
                    c2:6c:62:59:38:09:70:dd:0a:c8:95:34:99:a6:0e:
                    80:39:27:6b:84:2a:56:59:ca:40:55:35:1d:c1:d4:
                    dc:7c:18:44:92:25:f6:03:31:48:8e:1a:12:6e:64:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9F:DE:21:6F:5D:91:4F:34:87:5B:43:66:01:89:40:40:43:DB:97
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f0:fd:6f:90:0f:12:ac:e5:63:73:7f:d3:ef:83:cd:6d:57:
         20:eb:08:2f:97:65:98:90:77:22:b4:36:c9:16:de:56:02:4d:
         e0:73:7c:df:0f:50:fc:18:9a:dd:71:81:67:c5:06:57:a6:a1:
         68:d2:e3:54:34:33:e9:c6:55:23:79:0e:ed:92:bf:68:64:45:
         0a:85:bb:f3:6c:7b:ef:2b:4d:3f:54:86:12:cd:c4:63:64:66:
         fb:12:a8:36:f5:e1:81:8f:26:03:e1:15:02:90:22:97:d5:00:
         7e:f4:73:1c:8e:21:22:e6:85:94:14:02:aa:7f:41:4f:b8:26:
         74:5e:af:02:c3:ff:80:ce:42:9c:f5:3b:1d:0a:af:eb:66:64:
         8b:7c:1f:2c:62:0c:6b:0e:4d:29:6d:b4:1a:8d:47:cb:25:37:
         04:5c:98:ef:d2:e1:6d:da:28:53:43:a3:15:3a:16:ee:9c:37:
         65:d4:e6:60:39:62:03:59:ae:da:12:98:02:19:e7:d9:1b:6e:
         10:7e:3c:2e:19:3b:4b:da:c0:8f:1a:20:97:ca:8b:6f:72:cf:
         52:76:f5:e4:1e:f2:38:a3:36:18:40:1d:3c:72:52:6b:8b:96:
         c2:f0:d4:02:c1:25:09:76:4f:46:ef:a5:eb:54:86:50:46:63:
         e1:40:84:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5
OTFGMzMwQjkwHhcNMjYxMDIyMTU1OTI3WhcNMjYxMDI5MTU1OTI3WjAYMRYwFAYD
VQQDEw02YWRhMzJlMC04MmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs03bLGEeT1r8Q/l7iH9r4iTWen13BaHUcoawhWQsm1vfReZgFr+cxu4oniX9
68OK1L6oWaW6cC4wq/5Nk2hwpSkeUZYkR/4AA0SzFcUe3aDjVvyXU1PUA+Q9Qvre
2FODjuVs2NFpFDppbP+w1Ixmrr3MSoBLK4A6D0ST5UXuDDHxrMCLcGnYiWx+BrnO
TqkNbBgcySgx2QcK8rX8DXJVfE6EYRqNqKj+noCnhbXN+STdw5Xa6VvsDRJ38gjn
/YAo+0dY2gKSI66k+a71Yr94RMDCbGJZOAlw3QrIlTSZpg6AOSdrhCpWWcpAVTUd
wdTcfBhEkiX2AzFIjhoSbmQqiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmf3iFv
XZFPNIdbQ2YBiUBAQ9uXMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF
RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN
TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1
cUx3X1k3Z2paTHFaSHpNTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAevD9b5APEqzlY3N/0++DzW1XIOsIL5dlmJB3IrQ2yRbeVgJN4HN83w9Q/Bia
3XGBZ8UGV6ahaNLjVDQz6cZVI3kO7ZK/aGRFCoW782x77ytNP1SGEs3EY2Rm+xKo
NvXhgY8mA+EVApAil9UAfvRzHI4hIuaFlBQCqn9BT7gmdF6vAsP/gM5CnPU7HQqv
62Zki3wfLGIMaw5NKW20Go1HyyU3BFyY79LhbdooU0OjFToW7pw3ZdTmYDliA1mu
2hKYAhnn2RtuEH48Lhk7S9rAjxogl8qLb3LPUnb15B7yOKM2GEAdPHJSa4uWwvDU
AsElCXZPRu+l61SGUEZj4UCE4w==
-----END CERTIFICATE-----
Generated at Fri Oct 23 22:02:55 2026 by rpki-client