Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
File:                     Js6lcSyYfVN6eITq8DUAFr8UxMY.mft (raw, json)
Hash identifier:          MIcE+W7L2+twLhvDpF8og1HuhTM345WDk785WK9/wJw=
Subject key identifier:   51:15:34:3C:EB:D0:98:B4:85:2E:EA:6D:8C:6C:BE:4F:1D:21:30:2D
Authority key identifier: 26:CE:A5:71:2C:98:7D:53:7A:78:84:EA:F0:35:00:16:BF:14:C4:C6
Certificate issuer:       /CN=A91FAB2C/serialNumber=26CEA5712C987D537A7884EAF0350016BF14C4C6
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Js6lcSyYfVN6eITq8DUAFr8UxMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
Manifest number:          21
Signing time:             Sat 17 Oct 2026 09:38:00 +0000
Manifest this update:     Sat 17 Oct 2026 09:38:00 +0000
Manifest next update:     Sat 24 Oct 2026 09:38:00 +0000
Files and hashes:         1: Js6lcSyYfVN6eITq8DUAFr8UxMY.crl (hash: AN0ol74cIelP12AA4NdttYYyhY7XpzMqzvM3gbl3V6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Js6lcSyYfVN6eITq8DUAFr8UxMY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 09:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB2C, serialNumber=26CEA5712C987D537A7884EAF0350016BF14C4C6
        Validity
            Not Before: Oct 17 09:38:00 2026 GMT
            Not After : Oct 24 09:38:00 2026 GMT
        Subject: CN=6ad341f8-9b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:42:5d:28:eb:b3:b6:44:88:dd:8a:7e:9d:5c:
                    91:ca:c5:b8:ce:df:29:61:87:e8:76:5a:48:c1:d3:
                    90:26:3b:bc:6d:4a:99:68:52:a4:a0:11:e8:1d:f6:
                    f4:21:18:60:71:b9:02:af:d0:86:fe:4b:fd:bd:34:
                    14:32:51:49:21:f5:6d:b9:a2:ae:f0:1d:1c:f7:92:
                    60:3a:1e:e7:5f:9d:40:f8:f7:01:49:7a:34:51:e0:
                    b8:a8:46:d5:1b:dd:ea:55:7b:de:60:d7:6a:6a:ed:
                    0d:b2:dc:08:f4:cb:4a:35:c9:e9:ed:fb:42:8b:bc:
                    3b:ad:66:ee:6f:c1:55:07:95:df:64:7d:86:13:6f:
                    c5:a2:3b:c8:00:dc:a3:cd:c5:21:d7:bc:3d:89:ea:
                    a1:0d:fc:16:5c:e9:eb:b3:e5:b2:7d:5e:1c:1a:ff:
                    4c:9b:e2:f9:be:2d:c8:89:c7:33:60:83:1a:2b:41:
                    f7:77:3b:93:79:0d:42:a8:97:af:c8:6d:11:84:6d:
                    d8:3c:ed:a3:31:a6:a5:ed:81:4b:e4:a2:0e:26:ce:
                    fe:b5:38:10:98:b9:c2:7e:01:af:15:a5:84:a4:08:
                    fb:11:5b:3f:93:54:9e:1f:82:71:64:99:01:fd:88:
                    52:e7:4c:50:af:ec:08:f1:53:42:76:3e:22:bf:f0:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:15:34:3C:EB:D0:98:B4:85:2E:EA:6D:8C:6C:BE:4F:1D:21:30:2D
            X509v3 Authority Key Identifier:
                keyid:26:CE:A5:71:2C:98:7D:53:7A:78:84:EA:F0:35:00:16:BF:14:C4:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Js6lcSyYfVN6eITq8DUAFr8UxMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/305810829AA211F1A860336D3E11F970/Js6lcSyYfVN6eITq8DUAFr8UxMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:fc:e6:05:d2:19:6f:2c:a8:ec:5f:09:34:68:7b:59:66:
         13:d5:78:77:8a:ab:1c:4c:ec:03:22:25:9c:bb:3b:41:c4:06:
         5d:ea:6d:c7:a7:6f:59:8e:de:6f:f7:03:ca:2d:8a:78:8c:9d:
         1e:57:27:3c:a8:78:fd:98:dd:c6:d6:28:da:fc:84:96:2d:e3:
         90:ae:83:4e:7d:4d:76:69:9a:6d:af:30:f5:ab:22:a6:b5:c8:
         ae:d2:11:59:f2:f3:9e:26:10:25:07:9f:68:b5:12:b1:52:1c:
         14:b0:6d:24:b3:7e:48:f5:e5:de:a2:c4:dc:40:88:57:48:19:
         87:c1:fb:82:f5:66:63:cb:1c:b5:ce:41:ce:12:93:7b:0b:90:
         43:27:6c:4c:b9:15:5e:d4:d4:19:a8:04:69:1a:14:69:ac:ad:
         c5:be:45:d6:af:6a:6a:17:1b:5b:38:bb:98:97:2e:8f:7e:42:
         1a:78:fc:a8:04:53:a4:9f:90:0b:f6:9a:e6:43:7a:5a:d2:71:
         e5:4b:80:e8:60:c1:ab:8e:4d:4e:83:35:39:d7:ef:5d:56:9b:
         6b:17:6a:47:7b:8a:77:2d:b6:1a:ee:9c:e6:d4:3b:3a:5c:96:
         70:21:c0:93:1f:db:ae:64:7c:6a:d0:33:e4:39:45:e1:6c:32:
         3c:f0:2c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:20:39 2026 by rpki-client