Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File:                     E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier:          GDJd/SKlzIrkRI+PFYSw6frXZW+3H2vg+KYgGV7Ix2E=
Subject key identifier:   0C:48:8F:EC:B7:0D:6A:AA:FB:04:6E:42:12:CC:7C:3D:F7:26:72:FF
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer:       /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number:          01B9
Signing time:             Tue 03 Nov 2026 04:46:12 +0000
Manifest this update:     Tue 03 Nov 2026 04:46:11 +0000
Manifest next update:     Tue 10 Nov 2026 04:46:11 +0000
Files and hashes:         1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: UyiGelc+e5TKKTnnH2UgLMCxRz9XUITIS8fgArVFn8A=)
                          2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: q/inWwagPqsJ9K+IB7d6o4TgPPjDhue6dL8dPifXSPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 04:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Validity
            Not Before: Nov  3 04:46:11 2026 GMT
            Not After : Nov 10 04:46:11 2026 GMT
        Subject: CN=6ae96714-6d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:14:1a:7d:c3:f0:15:a5:e4:40:10:0f:c2:
                    93:dc:93:d9:23:37:68:0c:cc:56:a6:0f:ff:81:e2:
                    5a:75:e3:43:f4:53:70:a8:9c:a4:b7:80:3f:b7:ac:
                    d4:44:eb:f7:a8:e8:03:f4:d1:67:80:d9:08:5b:e3:
                    0f:85:4f:03:d3:d5:29:12:a8:d8:f8:d3:fe:74:ba:
                    80:25:ae:34:82:8a:92:ca:c9:58:4c:ec:1e:df:d0:
                    ed:7f:b7:4c:35:ca:48:be:8b:38:be:08:54:55:2a:
                    34:23:50:48:8f:cc:89:14:95:d7:e5:3b:31:15:a9:
                    3f:64:5a:c2:61:14:01:7f:d0:9e:54:a0:1e:0e:de:
                    8a:30:82:d4:fd:14:de:b2:52:d5:1a:bb:91:12:c7:
                    87:1a:02:b0:ea:ab:a7:73:44:c8:bd:22:b6:1e:1f:
                    6f:d2:a1:2a:cd:6c:ee:d2:43:db:65:aa:a2:d8:1e:
                    51:72:c5:6e:85:c9:d2:6b:f0:a8:09:e3:7f:01:4e:
                    1f:71:7a:1c:2a:3e:10:05:99:fd:09:fa:0f:33:a7:
                    44:3c:0a:88:76:27:83:ba:5f:11:85:f8:7c:b8:cd:
                    ad:3a:59:9b:c1:95:29:c8:0c:6a:79:15:35:64:b4:
                    c1:a1:e0:62:15:20:17:05:9e:ab:aa:c5:6f:72:89:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:48:8F:EC:B7:0D:6A:AA:FB:04:6E:42:12:CC:7C:3D:F7:26:72:FF
            X509v3 Authority Key Identifier:
                keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:26:ac:bc:9a:5a:12:7a:04:e8:dd:6e:fd:f5:13:a6:a6:a9:
         dc:ba:3a:eb:42:a0:90:1a:f6:a5:8e:d1:5e:87:92:b4:79:6e:
         a4:f9:0e:f3:92:f5:00:08:3c:97:6f:37:1b:9d:56:fb:25:74:
         64:16:35:18:63:55:28:7d:be:17:0a:40:ba:13:67:f2:a5:8b:
         62:67:79:1a:ec:ce:da:3e:28:21:ea:3c:fe:74:d9:0f:0b:f5:
         39:35:e3:9e:6e:da:0f:05:27:85:19:57:d1:c6:e9:37:0a:56:
         64:b8:bb:c5:66:fc:73:29:c5:5a:17:a7:89:6e:08:0a:76:e4:
         df:68:c1:4b:0e:bb:37:e2:b9:74:58:b3:96:d9:26:d6:cb:23:
         dd:a5:c9:d6:45:9e:44:ed:c6:53:e7:8f:a3:94:fb:26:e9:45:
         eb:c9:5d:bc:6c:41:3a:05:13:42:74:98:16:a6:dd:bb:34:fb:
         0e:a4:fb:9f:43:8b:a6:6a:ae:4d:1f:03:c1:3b:56:b4:35:97:
         40:d0:77:ee:b3:a0:77:0f:32:af:37:22:b3:d6:fb:ac:a6:17:
         25:c5:92:d8:62:4f:ac:23:0f:df:1c:03:0b:85:fa:eb:11:97:
         d0:27:5b:a8:23:7f:0d:15:55:0c:9b:de:e1:63:a8:d9:d9:3b:
         76:d6:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:32:51 2026 by rpki-client