Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
File:                     -rY3Nmo7_ydyaOS_NFMMq86RvOY.mft (raw, json)
Hash identifier:          KV8AKhQSxobq4OVN3Al+jn2NB769Jcz6vkDkbQmM778=
Subject key identifier:   B1:1F:23:45:BB:13:7B:08:03:50:F2:85:E1:52:EE:41:CA:4B:B9:E2
Authority key identifier: FA:B6:37:36:6A:3B:FF:27:72:68:E4:BF:34:53:0C:AB:CE:91:BC:E6
Certificate issuer:       /CN=A9154F63/serialNumber=FAB637366A3BFF277268E4BF34530CABCE91BCE6
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
Manifest number:          09
Signing time:             Sun 15 Nov 2026 09:22:17 +0000
Manifest this update:     Sun 15 Nov 2026 09:22:16 +0000
Manifest next update:     Sun 22 Nov 2026 09:22:16 +0000
Files and hashes:         1: -rY3Nmo7_ydyaOS_NFMMq86RvOY.crl (hash: FqZxN1S7Wlb7vSnR0kBufBwEv4a88rkWbnURF1KeUYg=)
                          2: 84D63AB4D83511F180D8C7953066CEF9.roa (hash: qF8syILGQo53wDItJ55CVXM6mm83pdfeDcLX9VEF0q4=)
                          3: H1vZhiX2A9a23QM8f2wKKYyylV4.asa (hash: K1YtsB/dar6HwTE5JZZof7VfOomRrzzqUshSAsSrN68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.crl
                          rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154F63, serialNumber=FAB637366A3BFF277268E4BF34530CABCE91BCE6
        Validity
            Not Before: Nov 15 09:22:16 2026 GMT
            Not After : Nov 22 09:22:16 2026 GMT
        Subject: CN=6af979c9-abc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:14:95:d6:91:72:53:64:cc:07:15:07:da:
                    77:4c:4d:c9:d8:83:3f:9a:08:e8:f4:42:7e:5f:7a:
                    70:39:22:09:2d:90:0b:12:85:29:e8:5d:4f:b6:64:
                    f0:8e:60:65:7e:d3:08:2a:b0:a5:92:4f:d6:a3:d6:
                    9d:f1:0e:6b:be:f2:34:17:54:18:52:ea:e3:d6:78:
                    40:11:03:e2:26:be:26:d5:52:c6:ef:af:e2:b4:0e:
                    dd:2f:c6:4a:7a:62:de:7e:60:59:3a:31:33:3b:71:
                    b7:a9:57:6a:87:b9:a1:70:30:02:03:cd:be:53:91:
                    03:37:28:22:9e:c6:58:bd:92:7c:30:1e:55:77:80:
                    d8:08:77:af:8a:1b:7c:0d:aa:0d:7f:ab:08:b6:e6:
                    96:3b:8e:2f:0e:22:01:43:3e:5f:29:06:a3:ab:53:
                    e8:aa:3b:a6:2d:95:35:ef:e7:7a:f5:19:e7:05:64:
                    10:7f:af:76:51:8d:b4:6f:36:db:af:1e:fe:fa:63:
                    c5:f3:d8:c8:a3:44:cb:14:db:e8:a1:13:9d:6d:9c:
                    45:31:51:22:c4:4a:6c:16:cd:89:27:7c:4b:4c:05:
                    c2:34:e9:b6:c9:b4:fd:63:1f:a3:8d:d8:c9:a0:12:
                    bf:58:39:34:9b:05:a8:9e:f6:34:dd:d2:c6:3e:f2:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1F:23:45:BB:13:7B:08:03:50:F2:85:E1:52:EE:41:CA:4B:B9:E2
            X509v3 Authority Key Identifier:
                keyid:FA:B6:37:36:6A:3B:FF:27:72:68:E4:BF:34:53:0C:AB:CE:91:BC:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:00:51:c9:fb:71:3e:56:c4:72:af:de:4f:c5:f9:e9:85:ba:
         f1:0a:25:74:cd:ee:af:cd:a4:a4:c1:e5:6b:cc:4d:ee:f5:9e:
         6f:87:75:d4:3e:04:fa:bd:d1:96:65:6a:c6:f8:f6:38:5c:b9:
         c7:a4:a9:64:0d:7a:56:c8:ec:0c:73:d0:4f:05:b7:7e:1c:9d:
         55:4c:4a:e8:cf:57:6d:44:8c:1b:f2:74:23:93:31:b8:8c:a5:
         5e:3a:65:9d:62:af:3d:fa:6e:be:18:0d:59:55:76:09:44:22:
         2c:d6:c2:ec:91:0f:85:f1:39:42:45:17:e4:73:d8:ae:ec:bd:
         e8:94:92:cb:7e:76:9f:d4:8f:10:32:4f:2b:b1:fb:ec:ee:15:
         45:2c:a6:59:15:f2:90:4d:cb:b3:9c:ef:ec:e8:0f:0d:b6:ab:
         35:cd:27:ad:6d:45:4e:13:7e:2b:8b:5c:23:2c:27:da:9d:b5:
         9e:14:87:04:9b:fe:25:6e:cc:c7:43:9c:61:2e:b4:07:fb:05:
         a2:3b:21:6f:ca:8f:78:82:99:25:ec:bc:14:bb:20:5d:38:5e:
         23:15:ae:01:cc:5f:30:ea:96:9a:23:da:8b:61:31:70:7e:cc:
         67:d6:19:5b:6e:fa:2a:b9:19:b5:9a:25:24:9d:63:57:ed:5b:
         d6:61:2e:d0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NEY2MzExMC8GA1UEBRMoRkFCNjM3MzY2QTNCRkYyNzcyNjhFNEJGMzQ1MzBDQUJD
RTkxQkNFNjAeFw0yNjExMTUwOTIyMTZaFw0yNjExMjIwOTIyMTZaMBgxFjAUBgNV
BAMTDTZhZjk3OWM5LWFiYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgqxSV1pFyU2TMBxUH2ndMTcnYgz+aCOj0Qn5fenA5IgktkAsShSnoXU+2ZPCO
YGV+0wgqsKWST9aj1p3xDmu+8jQXVBhS6uPWeEARA+ImvibVUsbvr+K0Dt0vxkp6
Yt5+YFk6MTM7cbepV2qHuaFwMAIDzb5TkQM3KCKexli9knwwHlV3gNgId6+KG3wN
qg1/qwi25pY7ji8OIgFDPl8pBqOrU+iqO6YtlTXv53r1GecFZBB/r3ZRjbRvNtuv
Hv76Y8Xz2MijRMsU2+ihE51tnEUxUSLESmwWzYknfEtMBcI06bbJtP1jH6ON2Mmg
Er9YOTSbBaie9jTd0sY+8unBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsR8jRbsT
ewgDUPKF4VLuQcpLueIwHwYDVR0jBBgwFoAU+rY3Nmo7/ydyaOS/NFMMq86RvOYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RjYzL0E3OEIyOUU2RDgz
MjExRjFCQ0QwMDAxQzJGNjZDRUY5Ly1yWTNObW83X3lkeWFPU19ORk1NcTg2UnZP
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXJZM05tbzdfeWR5YU9TX05GTU1xODZSdk9ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0
RjYzL0E3OEIyOUU2RDgzMjExRjFCQ0QwMDAxQzJGNjZDRUY5Ly1yWTNObW83X3lk
eWFPU19ORk1NcTg2UnZPWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB+AFHJ+3E+VsRyr95PxfnphbrxCiV0ze6vzaSkweVrzE3u9Z5vh3XUPgT6vdGW
ZWrG+PY4XLnHpKlkDXpWyOwMc9BPBbd+HJ1VTEroz1dtRIwb8nQjkzG4jKVeOmWd
Yq89+m6+GA1ZVXYJRCIs1sLskQ+F8TlCRRfkc9iu7L3olJLLfnaf1I8QMk8rsfvs
7hVFLKZZFfKQTcuznO/s6A8Ntqs1zSetbUVOE34ri1wjLCfanbWeFIcEm/4lbszH
Q5xhLrQH+wWiOyFvyo94gpkl7LwUuyBdOF4jFa4BzF8w6paaI9qLYTFwfsxn1hlb
bvoquRm1miUknWNX7VvWYS7Q
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:27:42 2026 by rpki-client