Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
File:                     mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json)
Hash identifier:          uYjwcexnyDaGAhE+Tdi80Ngl0KV0ZxfFL++VXXHfgKk=
Subject key identifier:   A9:16:E7:9D:05:DA:0E:D3:62:A5:B2:F7:D3:A8:CA:E3:83:E8:0F:0A
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Certificate issuer:       /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial:       090C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
Manifest number:          1B1D
Signing time:             Sat 14 Nov 2026 17:03:34 +0000
Manifest this update:     Sat 14 Nov 2026 17:03:33 +0000
Manifest next update:     Sat 21 Nov 2026 17:03:33 +0000
Files and hashes:         1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: /BK2epVkJRpEfy3OlgC/x9IZe3uv+uNl7sAjIuF9NxE=)
                          2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: pFivcl6/2LaS0iSbDcUyygHwyMDGedaAY+O1WaW+9u8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
        Validity
            Not Before: Nov 14 17:03:33 2026 GMT
            Not After : Nov 21 17:03:33 2026 GMT
        Subject: CN=6af89466-ea5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7f:f1:a3:cb:74:94:6d:a6:b2:00:b0:b9:cf:
                    0d:91:54:c8:06:0c:91:b1:7e:6f:a0:39:6a:56:39:
                    a1:a7:3f:38:ba:a0:88:f9:06:1c:b4:ec:6b:ce:5b:
                    fd:8d:65:45:ba:70:a4:73:78:57:e6:0d:49:b7:ad:
                    b4:5c:69:f8:98:0e:36:fb:ba:08:8d:e7:31:0b:9e:
                    c8:c8:7c:4a:2c:b2:7c:09:3e:a1:c8:c5:92:1e:14:
                    e7:d5:9b:bc:f5:78:78:b7:96:ca:11:9b:a5:ce:bf:
                    58:84:f2:7f:90:35:a6:1c:ad:98:43:e6:52:a6:fc:
                    5d:3d:bb:e5:79:1d:3e:4e:29:3a:87:86:be:55:df:
                    eb:72:a2:b3:58:75:d4:44:6e:02:f1:ba:64:25:7f:
                    f5:47:24:7e:3a:18:8b:22:a0:f2:fb:42:62:e2:65:
                    85:f2:64:43:79:e0:4a:c7:28:5c:8f:7e:16:75:4e:
                    10:a7:53:6c:ed:bb:86:4f:57:53:d5:d4:d5:af:52:
                    04:2d:91:53:93:9d:48:01:73:e4:07:4a:39:19:4b:
                    85:35:05:e0:54:db:97:60:a9:48:c3:7b:0e:03:6a:
                    70:98:7a:01:32:2e:41:67:9d:52:87:d9:b6:c0:0d:
                    18:27:87:d4:17:c1:a6:92:c3:81:72:2e:3c:cd:4c:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:16:E7:9D:05:DA:0E:D3:62:A5:B2:F7:D3:A8:CA:E3:83:E8:0F:0A
            X509v3 Authority Key Identifier:
                keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:da:99:39:f3:d3:db:1c:8c:9b:9a:81:dd:d6:e6:cd:8f:35:
         57:87:1a:d6:2f:c7:45:ed:ea:5f:3f:a3:c6:6a:b7:b8:2d:b9:
         36:25:f3:19:a6:05:9f:b3:fb:5f:78:6c:81:10:7e:21:52:8a:
         70:80:62:b8:38:e3:4d:a4:8c:28:95:09:51:4d:9e:96:9e:44:
         92:d2:f1:87:ad:85:d9:36:f6:d5:25:89:5a:92:0a:16:27:06:
         04:ed:40:d1:ef:5f:e5:d1:45:31:3a:67:24:e3:67:e8:8a:e6:
         3a:18:e0:13:c2:ac:8a:76:c3:31:75:d9:1e:c4:3a:8c:ed:8d:
         9b:dc:90:66:dd:12:a5:37:1f:1c:b5:a8:7a:c5:ba:9a:a2:8b:
         72:ca:49:01:21:81:5b:e2:7d:e0:3b:25:10:6a:98:cc:13:37:
         30:8c:cf:fa:46:72:6d:4a:22:75:cd:5c:40:cc:c4:d1:c5:12:
         67:55:86:9e:73:63:1a:2a:ce:48:cc:88:41:87:a6:73:a9:67:
         fb:c5:bd:cf:bf:ab:96:a3:b8:a1:a9:bd:77:41:70:44:a1:bb:
         58:7e:a7:55:ba:6a:08:87:2f:f0:e5:cc:b2:d8:41:7c:fd:37:
         75:d0:a3:cb:e6:c0:fc:e1:b8:dd:4f:91:c9:ab:f0:b1:39:45:
         ca:62:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:24:28 2026 by rpki-client