Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
File:                     H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json)
Hash identifier:          fFBDB4cP73VhnSOX4ZgZT5zEy0jMXCm0sE7wFZJLvuM=
Subject key identifier:   EE:0C:A7:68:84:E5:EA:4E:C2:8D:B0:35:F3:20:85:55:6C:7E:89:D0
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Certificate issuer:       /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial:       0714
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
Manifest number:          070B
Signing time:             Sat 14 Nov 2026 21:57:32 +0000
Manifest this update:     Sat 14 Nov 2026 21:57:31 +0000
Manifest next update:     Sat 21 Nov 2026 21:57:31 +0000
Files and hashes:         1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: ZThNt+T6Hbe67C029hLLxnKG5E5DY5y3HJJiG6x900M=)
                          2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: Oq+DZRLUONdiWQsPcpVZZkOJsIqLLjEOw+XElhBj3Kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
                          rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 21:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
        Validity
            Not Before: Nov 14 21:57:31 2026 GMT
            Not After : Nov 21 21:57:31 2026 GMT
        Subject: CN=6af8d94c-484b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:15:07:5a:65:a1:1d:46:4c:2e:6a:00:d9:
                    31:e3:fd:45:94:76:dc:2f:b8:31:11:05:77:22:95:
                    59:92:80:78:60:95:6b:17:48:59:20:7e:0f:16:c7:
                    78:23:79:3f:a2:a0:ea:19:71:b2:c3:11:82:3a:2e:
                    ee:d4:fb:e5:0b:67:88:5b:04:68:ce:35:9b:56:87:
                    af:4e:82:84:0e:11:9a:7e:f8:f6:c0:31:88:71:4a:
                    18:a4:ed:72:04:3a:37:eb:c4:69:32:44:41:3c:f6:
                    4c:80:a8:d2:50:50:2d:99:c6:2a:21:66:c9:9d:94:
                    16:8b:24:d9:7e:5f:77:ec:dd:1c:c7:bb:d7:90:cf:
                    ae:8a:a2:86:47:3e:ca:52:a3:95:2b:a7:cf:32:99:
                    ae:25:d6:ee:5a:75:5e:f7:3f:96:ea:5e:f6:d7:d0:
                    26:89:a5:76:d3:a3:87:4d:04:9d:48:e3:3a:44:ea:
                    26:bc:58:e8:51:87:6b:a7:7e:9d:f4:53:66:f4:ae:
                    75:a1:9c:7b:b4:bc:25:b5:4d:ad:9d:b0:bb:25:92:
                    c8:66:da:e7:d1:40:fe:89:16:b3:f8:53:42:d5:d1:
                    3a:46:d4:2b:28:06:15:cf:0d:a5:01:45:62:08:39:
                    28:ae:26:bc:cf:6a:fd:9c:e2:87:3c:d1:b6:fb:eb:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0C:A7:68:84:E5:EA:4E:C2:8D:B0:35:F3:20:85:55:6C:7E:89:D0
            X509v3 Authority Key Identifier:
                keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:e2:cd:77:06:b4:8c:12:e0:92:29:6c:25:1d:ce:6c:f9:
         22:fd:40:76:02:d5:9d:96:28:42:93:2d:9b:c0:67:92:5d:60:
         a6:d6:4f:eb:c9:48:b5:25:09:31:25:9b:70:9f:0c:20:ad:8f:
         49:9a:c0:01:e4:1b:3a:55:fa:f0:36:36:87:81:f7:3a:8a:6e:
         92:81:b3:84:85:a6:ff:93:1b:73:21:25:3d:be:32:c6:c2:ed:
         71:78:02:6d:62:10:67:86:bc:ef:7c:0c:5c:6f:b8:31:6f:11:
         de:53:8a:02:4d:85:8f:d7:b4:54:53:4b:45:05:47:54:69:cc:
         90:37:01:e1:0b:18:f3:c0:bf:f4:59:6e:77:00:ca:fc:f0:86:
         f6:a6:b9:20:f5:f1:4d:89:98:12:99:7b:47:66:be:84:a0:72:
         15:d1:f4:24:c6:03:99:e2:fb:6c:55:89:a4:3c:70:73:66:f2:
         84:09:7b:12:82:00:0f:ae:75:9f:c7:d6:32:94:5c:aa:b9:dc:
         03:63:fd:05:28:f9:97:db:dd:9c:f5:20:5d:74:0d:64:89:bd:
         08:9f:d6:e5:85:62:7e:34:8a:ce:bf:d6:24:8e:0b:ea:b2:d3:
         87:a2:93:6e:a6:54:aa:c8:02:81:f3:35:7b:eb:76:01:7c:80:
         a2:a6:3e:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0REYxMTAvBgNVBAUTKDFGRDhFQzdDNjU0N0FFQzUyQUQ3RTBFMEJDMzJDRjdD
QUEyMjFFMzcwHhcNMjYxMTE0MjE1NzMxWhcNMjYxMTIxMjE1NzMxWjAYMRYwFAYD
VQQDEw02YWY4ZDk0Yy00ODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArK4VB1ploR1GTC5qANkx4/1FlHbcL7gxEQV3IpVZkoB4YJVrF0hZIH4PFsd4
I3k/oqDqGXGywxGCOi7u1PvlC2eIWwRozjWbVoevToKEDhGafvj2wDGIcUoYpO1y
BDo368RpMkRBPPZMgKjSUFAtmcYqIWbJnZQWiyTZfl937N0cx7vXkM+uiqKGRz7K
UqOVK6fPMpmuJdbuWnVe9z+W6l7219AmiaV206OHTQSdSOM6ROomvFjoUYdrp36d
9FNm9K51oZx7tLwltU2tnbC7JZLIZtrn0UD+iRaz+FNC1dE6RtQrKAYVzw2lAUVi
CDkoria8z2r9nOKHPNG2++t5fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4Mp2iE
5epOwo2wNfMghVVsfonQMB8GA1UdIwQYMBaAFB/Y7HxlR67FKtfg4Lwyz3yqIh43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRERi81Q0YxRjdBMkFE
NUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJzVXExLURndkRMUGZLb2lI
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g5anNmR1ZIcnNVcTEtRGd2RExQZktvaUhqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjRERi81Q0YxRjdBMkFENUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJz
VXExLURndkRMUGZLb2lIamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHAHizXcGtIwS4JIpbCUdzmz5Iv1AdgLVnZYoQpMtm8Bnkl1gptZP68lItSUJ
MSWbcJ8MIK2PSZrAAeQbOlX68DY2h4H3OopukoGzhIWm/5MbcyElPb4yxsLtcXgC
bWIQZ4a873wMXG+4MW8R3lOKAk2Fj9e0VFNLRQVHVGnMkDcB4QsY88C/9FludwDK
/PCG9qa5IPXxTYmYEpl7R2a+hKByFdH0JMYDmeL7bFWJpDxwc2byhAl7EoIAD651
n8fWMpRcqrncA2P9BSj5l9vdnPUgXXQNZIm9CJ/W5YVifjSKzr/WJI4L6rLTh6KT
bqZUqsgCgfM1e+t2AXyAoqY+hQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:26:36 2026 by rpki-client