Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
File:                     CIE_b-4hrwS022CvNj9a-H-JonU.mft (raw, json)
Hash identifier:          fx8yYIKxn7Pffb3Aq5bRQjaIuXHEo0vok6WA9fqw0Is=
Subject key identifier:   6A:CF:3C:0A:8F:29:EE:BC:96:E1:D1:1B:58:10:10:72:26:D9:3B:77
Authority key identifier: 08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75
Certificate issuer:       /CN=A91629F2/serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
Manifest number:          64
Signing time:             Sun 15 Nov 2026 08:17:17 +0000
Manifest this update:     Sun 15 Nov 2026 08:17:17 +0000
Manifest next update:     Sun 22 Nov 2026 08:17:17 +0000
Files and hashes:         1: CIE_b-4hrwS022CvNj9a-H-JonU.crl (hash: linl60TyxcUl889vw11WYg2hpb4b3VyAPZw1TpMNtt8=)
                          2: 9577FE7C4C0B11F1996C5785A4833773.roa (hash: 0qEz6js7PBUojcJH/VQOhbzx5OAA1vw3c9ZuGNzrDdM=)
                          3: M-YyomAbDZNik49oeLL9FW3tnEU.asa (hash: 3dDXthL12D9m1Pup4xme9OMed7t9aMyRmXR3VN1JLQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl
                          rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629F2, serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
        Validity
            Not Before: Nov 15 08:17:17 2026 GMT
            Not After : Nov 22 08:17:17 2026 GMT
        Subject: CN=6af96a8d-9603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:08:b8:3e:89:8a:af:5e:12:03:93:85:66:
                    90:81:5b:9c:8b:39:55:a1:f4:16:3b:52:40:c6:01:
                    4a:be:d7:df:1f:7f:b5:6a:aa:0a:27:bf:34:a2:23:
                    62:8b:f4:58:84:d2:07:ee:e0:ba:df:6c:db:21:c1:
                    bc:26:7b:5a:44:90:90:61:58:f8:12:30:59:4b:ef:
                    80:72:09:ec:e4:cc:77:1d:e9:15:e7:be:6d:d3:2f:
                    ab:8c:34:12:fa:93:66:a1:8b:21:97:d7:d1:d2:6f:
                    08:d7:a1:56:03:ef:86:04:ec:33:f0:81:62:9e:f0:
                    d8:24:73:e8:4d:fa:8f:e2:1a:86:d4:b4:51:ea:32:
                    2f:f9:c1:66:02:5b:bb:ca:14:60:08:13:a9:cf:8f:
                    c1:f8:38:97:d6:f0:da:d9:01:bf:f1:61:90:09:38:
                    f0:af:ac:e3:51:ca:04:89:02:9b:32:f4:b6:79:0b:
                    4e:32:e4:93:13:9a:f8:ee:76:2e:ee:87:d1:a1:be:
                    51:93:aa:b5:fd:59:78:69:59:5f:3e:89:02:00:bf:
                    53:8e:c9:ca:b4:2e:0f:71:76:0d:13:36:d7:f0:d5:
                    19:62:06:94:90:ed:e8:5a:b5:72:81:c1:5a:c2:e3:
                    c2:19:d9:d7:97:a5:e3:1d:8c:e6:f6:30:d8:a3:86:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CF:3C:0A:8F:29:EE:BC:96:E1:D1:1B:58:10:10:72:26:D9:3B:77
            X509v3 Authority Key Identifier:
                keyid:08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:2f:b8:31:b2:69:9c:a5:24:63:72:17:a1:bf:e5:56:48:
         e4:e9:76:5e:a5:eb:51:a9:00:0c:5c:97:cc:e5:d7:7b:d5:83:
         7f:2d:b7:9a:a5:c3:72:7c:57:2e:8f:4d:41:d9:90:5d:e8:11:
         09:e6:06:af:35:10:eb:17:9f:ca:49:25:33:d7:e9:7f:81:32:
         db:3e:38:88:80:f7:d3:5f:e0:0a:2a:83:44:ec:fd:b2:fa:30:
         0b:80:18:ea:37:10:35:8e:09:29:7d:cd:6e:37:71:37:dc:1b:
         db:b0:ec:8e:e4:9e:bb:b4:7e:37:be:78:60:93:66:60:73:1d:
         92:ba:dd:06:7d:8d:23:63:64:a3:b9:0c:87:c8:6e:ed:6c:8f:
         cd:b0:44:01:79:4c:21:7d:4e:c9:b6:54:f0:41:47:aa:af:61:
         f7:79:3a:f4:7c:78:6d:3e:7d:c1:e5:2d:bd:14:af:99:37:9b:
         ac:cf:65:d5:cb:c2:a2:26:30:15:c1:1a:f2:bd:cb:fb:8e:f2:
         90:37:cc:a6:70:a1:2d:56:2c:50:1c:7a:66:84:4f:a9:b4:63:
         d6:8d:32:78:86:b9:42:0c:50:30:7b:ef:7a:05:84:d0:c6:3f:
         b8:b5:96:02:c7:f4:58:a1:94:14:e1:e1:3f:ee:b9:60:ae:0c:
         7f:b2:46:c5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MjlGMjExMC8GA1UEBRMoMDg4MTNGNkZFRTIxQUYwNEI0REI2MEFGMzYzRjVBRjg3
Rjg5QTI3NTAeFw0yNjExMTUwODE3MTdaFw0yNjExMjIwODE3MTdaMBgxFjAUBgNV
BAMTDTZhZjk2YThkLTk2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgsAi4PomKr14SA5OFZpCBW5yLOVWh9BY7UkDGAUq+198ff7VqqgonvzSiI2KL
9FiE0gfu4LrfbNshwbwme1pEkJBhWPgSMFlL74ByCezkzHcd6RXnvm3TL6uMNBL6
k2ahiyGX19HSbwjXoVYD74YE7DPwgWKe8Ngkc+hN+o/iGobUtFHqMi/5wWYCW7vK
FGAIE6nPj8H4OJfW8NrZAb/xYZAJOPCvrONRygSJApsy9LZ5C04y5JMTmvjudi7u
h9GhvlGTqrX9WXhpWV8+iQIAv1OOycq0Lg9xdg0TNtfw1RliBpSQ7ehatXKBwVrC
48IZ2deXpeMdjOb2MNijhlq9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUas88Co8p
7ryW4dEbWBAQcibZO3cwHwYDVR0jBBgwFoAUCIE/b+4hrwS022CvNj9a+H+JonUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUYyL0VCN0Y5QURFNEMw
NDExRjE4QTZGOEQ3OUExODMzNzczL0NJRV9iLTRocndTMDIyQ3ZOajlhLUgtSm9u
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ0lFX2ItNGhyd1MwMjJDdk5qOWEtSC1Kb25VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy
OUYyL0VCN0Y5QURFNEMwNDExRjE4QTZGOEQ3OUExODMzNzczL0NJRV9iLTRocndT
MDIyQ3ZOajlhLUgtSm9uVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBLQi+4MbJpnKUkY3IXob/lVkjk6XZepetRqQAMXJfM5dd71YN/LbeapcNyfFcu
j01B2ZBd6BEJ5gavNRDrF5/KSSUz1+l/gTLbPjiIgPfTX+AKKoNE7P2y+jALgBjq
NxA1jgkpfc1uN3E33BvbsOyO5J67tH43vnhgk2Zgcx2Sut0GfY0jY2SjuQyHyG7t
bI/NsEQBeUwhfU7JtlTwQUeqr2H3eTr0fHhtPn3B5S29FK+ZN5usz2XVy8KiJjAV
wRryvcv7jvKQN8ymcKEtVixQHHpmhE+ptGPWjTJ4hrlCDFAwe+96BYTQxj+4tZYC
x/RYoZQU4eE/7rlgrgx/skbF
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:48:39 2026 by rpki-client