Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft
File:                     JGgod4ICzbuCxWclO6nDnDy51Cs.mft (raw, json)
Hash identifier:          qS+O/Dmt3THfWDQq403HKz78rCbcZZU3/GdZijkqYmo=
Subject key identifier:   25:11:92:04:12:B0:4B:43:3E:84:09:0E:EA:F1:82:C8:84:72:5A:05
Authority key identifier: 24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B
Certificate issuer:       /CN=A91F832B/serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft
Manifest number:          3A
Signing time:             Mon 05 Oct 2026 09:04:39 +0000
Manifest this update:     Mon 05 Oct 2026 09:04:38 +0000
Manifest next update:     Mon 12 Oct 2026 09:04:38 +0000
Files and hashes:         1: JGgod4ICzbuCxWclO6nDnDy51Cs.crl (hash: 314LxMeLpEuGQQEacp7TDNhMzCJwbie8j/6ef2r8YeE=)
                          2: 7ZsDllYmRJDDzKykoQ_Po5y8-fk.asa (hash: lZnxC85PE/4oBWnZK7QXBmfu0GWZJBsWrS9vGM6BoC8=)
                          3: 4D9099E66F9411F18CD406106EA30FBC.roa (hash: KhV4pO08T7ByOxUr4S8oxiImOdoh9Kqbs9FBQHAW+9Y=)
                          4: 0F812C446F9211F1BD55685D6CA30FBC.roa (hash: bHHRKzCejdw2U0vQu39U0T3o7ItJZ6r4kG6fcSW5tNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl
                          rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F832B, serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B
        Validity
            Not Before: Oct  5 09:04:38 2026 GMT
            Not After : Oct 12 09:04:38 2026 GMT
        Subject: CN=6ac36827-3e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:a5:76:dc:de:b1:50:e1:28:ee:d1:b0:46:
                    e5:c3:ea:f1:f0:51:b3:3d:5e:dc:5f:35:6d:c0:3c:
                    0f:0f:07:71:be:ad:a1:0e:3a:58:f7:d7:96:48:e7:
                    80:82:b8:df:11:cb:84:9f:91:f2:46:84:d7:31:94:
                    6b:13:3b:e4:60:e7:29:a2:10:35:d0:f0:1e:52:1e:
                    06:9c:46:fc:e4:44:d9:07:b2:f0:d7:49:23:d8:5f:
                    3b:32:18:65:70:53:c5:79:b7:f6:cf:81:90:e0:5f:
                    18:65:2b:1e:1d:b5:db:1b:13:2f:f9:c6:b4:02:49:
                    1c:cf:fe:d3:18:51:c7:47:0d:f0:29:05:ac:b2:fa:
                    c5:25:38:15:a5:de:26:a3:9f:ab:93:07:e8:0c:6e:
                    c0:f9:e5:74:ff:6d:82:d0:44:42:14:3e:0b:3d:48:
                    d0:36:53:aa:55:bf:b0:23:14:18:60:96:cc:cb:e3:
                    c6:0e:fd:44:f3:94:6d:66:45:8b:eb:77:9e:b4:78:
                    90:3a:82:4a:f7:cc:82:1f:ed:a5:63:6b:d8:26:32:
                    f2:ff:d4:4d:e4:52:83:1c:8d:b8:6d:be:9e:39:24:
                    f9:89:b8:9b:4c:07:0c:31:39:63:22:42:a6:81:6d:
                    ab:54:51:8f:61:31:67:55:28:5f:8e:be:ff:60:7a:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:92:04:12:B0:4B:43:3E:84:09:0E:EA:F1:82:C8:84:72:5A:05
            X509v3 Authority Key Identifier:
                keyid:24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:97:89:4b:15:92:31:66:d4:47:99:a5:98:bf:a1:02:97:64:
         f1:68:77:c0:b3:b9:10:2c:ba:5f:8f:7c:1e:e6:3c:bf:43:bf:
         88:db:50:a4:c4:38:06:c8:bf:c6:85:70:5b:27:84:04:59:71:
         ad:49:28:38:48:42:eb:17:5a:33:77:a7:90:9d:18:b2:2a:bd:
         5f:95:00:8e:30:44:0b:80:6a:d2:3b:5f:c2:80:4e:69:9e:5f:
         fc:6b:6d:a2:1b:2c:4e:05:32:26:27:02:25:8d:a2:90:82:f3:
         57:44:82:c3:07:8a:17:79:8c:02:40:7b:1a:d7:23:0f:c4:98:
         9c:79:01:84:b9:de:6e:10:e0:e7:58:d7:1e:e6:db:e7:a1:4d:
         2a:f2:3c:f1:17:3a:f8:79:07:1c:a5:c7:ce:53:d7:b7:c6:5c:
         da:43:3b:11:85:c2:0d:78:19:79:f9:d1:67:b6:eb:73:6f:38:
         50:d1:d6:ab:e8:3b:cc:c3:81:30:cd:b3:14:ca:38:f5:06:48:
         36:46:8e:11:c5:79:e3:6d:d6:38:9d:36:ba:8e:fb:63:98:c4:
         33:44:a9:b0:35:db:f4:62:9a:a4:4d:4c:ac:0a:c7:74:8b:b7:
         ae:db:a1:7e:7c:b6:64:90:95:4b:47:6c:36:24:ea:af:12:1b:
         92:3a:ed:89
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
ODMyQjExMC8GA1UEBRMoMjQ2ODI4Nzc4MjAyQ0RCQjgyQzU2NzI1M0JBOUMzOUMz
Q0I5RDQyQjAeFw0yNjEwMDUwOTA0MzhaFw0yNjEwMTIwOTA0MzhaMBgxFjAUBgNV
BAMTDTZhYzM2ODI3LTNlNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLxaV23N6xUOEo7tGwRuXD6vHwUbM9XtxfNW3APA8PB3G+raEOOlj315ZI54CC
uN8Ry4SfkfJGhNcxlGsTO+Rg5ymiEDXQ8B5SHgacRvzkRNkHsvDXSSPYXzsyGGVw
U8V5t/bPgZDgXxhlKx4dtdsbEy/5xrQCSRzP/tMYUcdHDfApBayy+sUlOBWl3iaj
n6uTB+gMbsD55XT/bYLQREIUPgs9SNA2U6pVv7AjFBhglszL48YO/UTzlG1mRYvr
d560eJA6gkr3zIIf7aVja9gmMvL/1E3kUoMcjbhtvp45JPmJuJtMBwwxOWMiQqaB
batUUY9hMWdVKF+Ovv9geudHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJRGSBBKw
S0M+hAkO6vGCyIRyWgUwHwYDVR0jBBgwFoAUJGgod4ICzbuCxWclO6nDnDy51Csw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzJCL0RGMTZBMDRDNkY4
RDExRjE5MkVCQTAyMzZCQTMwRkJDL0pHZ29kNElDemJ1Q3hXY2xPNm5EbkR5NTFD
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSkdnb2Q0SUN6YnVDeFdjbE82bkRuRHk1MUNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4
MzJCL0RGMTZBMDRDNkY4RDExRjE5MkVCQTAyMzZCQTMwRkJDL0pHZ29kNElDemJ1
Q3hXY2xPNm5EbkR5NTFDcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAUl4lLFZIxZtRHmaWYv6ECl2TxaHfAs7kQLLpfj3we5jy/Q7+I21CkxDgGyL/G
hXBbJ4QEWXGtSSg4SELrF1ozd6eQnRiyKr1flQCOMEQLgGrSO1/CgE5pnl/8a22i
GyxOBTImJwIljaKQgvNXRILDB4oXeYwCQHsa1yMPxJiceQGEud5uEODnWNce5tvn
oU0q8jzxFzr4eQccpcfOU9e3xlzaQzsRhcINeBl5+dFntutzbzhQ0dar6DvMw4Ew
zbMUyjj1Bkg2Ro4RxXnjbdY4nTa6jvtjmMQzRKmwNdv0YpqkTUysCsd0i7eu26F+
fLZkkJVLR2w2JOqvEhuSOu2J
-----END CERTIFICATE-----
Generated at Mon Oct 5 22:07:13 2026 by rpki-client