Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft
File:                     V2clsMbYVbVNImohjbOo5-9uerk.mft (raw, json)
Hash identifier:          AqHNBcxrrXz3F8BzIOQh+anIBW4omrskfIzrY+QIkl0=
Subject key identifier:   32:51:B2:9F:58:74:2E:00:76:21:C4:06:52:B4:19:3B:97:4E:EA:F8
Authority key identifier: 57:67:25:B0:C6:D8:55:B5:4D:22:6A:21:8D:B3:A8:E7:EF:6E:7A:B9
Certificate issuer:       /CN=A911BC38/serialNumber=576725B0C6D855B54D226A218DB3A8E7EF6E7AB9
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft
Manifest number:          D6
Signing time:             Thu 05 Nov 2026 07:35:21 +0000
Manifest this update:     Thu 05 Nov 2026 07:35:20 +0000
Manifest next update:     Thu 12 Nov 2026 07:35:20 +0000
Files and hashes:         1: V2clsMbYVbVNImohjbOo5-9uerk.crl (hash: yLUu8Y9VJRuFm6hZoJBpDsrTYVv1qUoJJZ67PK8W/gk=)
                          2: upVfM9AMe9cCCbKZYvxO7sKt5XA.asa (hash: HX/GntZw5wEF8eMvytwbC3iOZhd+JC/9qY4DVBlFfvI=)
                          3: A9C261C699BC11F0A121CE7BC4F9AE02.roa (hash: t1vXWTK7xY5/V5AsZ7htDC7rPKBFYLYDV0lZJeQu23A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.crl
                          rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 07:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC38, serialNumber=576725B0C6D855B54D226A218DB3A8E7EF6E7AB9
        Validity
            Not Before: Nov  5 07:35:20 2026 GMT
            Not After : Nov 12 07:35:20 2026 GMT
        Subject: CN=6aec31b8-65d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:5e:2e:1b:86:1a:f4:bd:e9:5f:49:36:0c:
                    3f:85:e3:7f:69:6a:c9:0a:99:89:d6:c0:c5:0e:41:
                    39:16:e7:8f:0a:8b:92:83:6a:65:f2:44:b4:55:82:
                    23:f8:a9:b3:ea:3f:76:bc:44:e4:67:9c:2a:58:99:
                    4c:38:4d:f2:6b:c2:0f:d8:bf:3a:8a:24:85:41:06:
                    b8:d6:ba:de:57:4e:31:ec:cb:b8:01:e9:b6:e8:5f:
                    e5:cd:38:12:18:6d:95:02:77:8b:95:2d:26:a9:aa:
                    df:ca:61:4d:26:66:92:45:64:18:8f:ee:74:5c:36:
                    9c:a0:46:5f:e1:28:04:c1:4d:f0:bf:f0:f1:42:ed:
                    e8:8a:2c:98:68:c4:86:4b:82:ff:3c:36:ff:f6:ab:
                    d3:67:57:0d:dd:b8:c4:22:c2:f7:99:72:aa:85:26:
                    eb:13:80:b0:8e:de:8a:8f:2e:ec:a5:ec:48:6e:43:
                    c9:0c:ca:a5:25:26:ab:a6:21:37:34:43:b3:93:3c:
                    92:1c:94:b8:97:e3:2b:f6:15:ab:76:e1:e0:c5:d9:
                    1b:54:f7:99:16:40:21:aa:aa:4c:f2:51:e2:0a:11:
                    06:ab:b5:f5:a3:b9:5c:9b:a0:17:c9:d9:76:1d:31:
                    a0:db:f2:21:25:d5:76:6a:53:70:df:7a:47:e5:9e:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:51:B2:9F:58:74:2E:00:76:21:C4:06:52:B4:19:3B:97:4E:EA:F8
            X509v3 Authority Key Identifier:
                keyid:57:67:25:B0:C6:D8:55:B5:4D:22:6A:21:8D:B3:A8:E7:EF:6E:7A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:20:ae:2d:0a:21:03:df:09:c3:33:95:84:08:2b:74:15:b5:
         b6:a5:11:48:bf:52:28:b4:11:fa:fb:e4:1b:5f:d0:8e:ba:e4:
         20:a8:b3:47:0a:a0:f1:59:af:4b:fa:79:66:21:ae:d6:29:36:
         cd:35:00:9c:a7:83:a2:cd:ae:56:41:f8:8f:38:fb:95:28:28:
         d7:54:04:35:ff:19:83:0f:a0:a4:c9:9b:8b:8a:14:bf:fe:4f:
         b8:26:c4:fc:e0:b0:3e:75:8c:d9:fa:56:27:9f:a7:83:4f:8b:
         94:4b:b9:12:75:09:05:66:63:86:df:9b:7b:b3:8e:b6:29:d4:
         4a:0e:2a:26:43:8c:93:ad:da:31:0b:c8:37:48:30:f2:91:2b:
         1f:12:63:d5:77:1f:d3:48:c3:a4:6a:c1:91:24:1b:f3:f7:fb:
         99:67:06:f2:b3:5d:af:29:a1:d6:4e:35:6a:06:5d:6a:13:18:
         c8:fd:b5:a5:61:06:ae:5e:36:9c:65:f5:30:35:62:ac:45:e1:
         64:fc:e6:3d:51:37:37:05:17:99:aa:ff:0c:40:83:5a:19:fb:
         4f:7f:6b:e2:eb:90:f6:4b:0b:69:14:1f:e5:7f:93:4d:71:8f:
         ea:d7:f9:92:3b:f1:66:66:6a:cb:8d:c3:7a:1c:4b:62:30:f1:
         06:d1:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:56:49 2026 by rpki-client