Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
File:                     G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft (raw, json)
Hash identifier:          J5yysmlv5UWPAxR+8obyW7w+I7Kn8Ph3vxZycXLWyxk=
Subject key identifier:   C8:93:43:D4:71:B8:52:7F:C6:12:F5:87:95:7E:6F:0A:8A:9F:E5:E5
Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
Certificate issuer:       /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
Manifest number:          01F8
Signing time:             Sun 15 Nov 2026 03:34:18 +0000
Manifest this update:     Sun 15 Nov 2026 03:34:18 +0000
Manifest next update:     Sun 22 Nov 2026 03:34:18 +0000
Files and hashes:         1: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl (hash: FAvkoZ9t7qtsQtiwFg0Aw5Qu6du2dBWtSTmLqO65shA=)
                          2: 9E132FF6E82711EEA7DD994FC4F9AE02.roa (hash: B26dPX7b/Yjt4TuSkN2bNnJztJZLAH1RdhqMlSo1OgI=)
                          3: B5EC27DC80F411F1A8E5D2AB65A30FBC.roa (hash: HDAMBq9cGBoodO1E3jLw/cK2FtT7+fINXvRzCe1mDLw=)
                          4: B51FD00AE82711EEB8A9D24FC4F9AE02.roa (hash: 3cHCQj/rr6yYx0ybKITdR2Z1FEVXIoTC8cGCbWIYYI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
                          rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 03:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
        Validity
            Not Before: Nov 15 03:34:18 2026 GMT
            Not After : Nov 22 03:34:18 2026 GMT
        Subject: CN=6af9283a-18f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:60:c4:a8:40:15:21:98:d9:66:53:94:19:d6:
                    59:6d:6b:4b:c5:e2:1c:33:e7:59:98:bb:74:ab:e8:
                    82:e1:bf:48:62:46:de:6b:c8:03:12:91:48:76:07:
                    d3:3d:e4:d7:59:21:3f:17:33:25:82:b1:d1:85:f8:
                    a5:1d:20:3a:54:b7:63:0f:69:ad:79:c7:be:82:e2:
                    a5:d3:11:e0:15:b6:84:9c:53:e9:07:83:d1:c8:49:
                    85:52:26:57:dd:60:c7:0c:8d:89:34:22:d0:f1:3b:
                    81:78:74:a0:c9:93:8f:54:87:9a:4b:c9:4f:ca:43:
                    06:0a:5b:98:2a:cf:9a:cf:96:50:0d:d8:c1:83:d2:
                    ab:e1:15:b5:6c:99:5d:4f:28:8d:cf:c3:6b:cb:4f:
                    f1:3b:ad:20:cb:e8:8c:c0:05:a6:06:49:cc:19:82:
                    2f:9d:e3:1b:b4:36:d3:3a:0c:06:fe:9d:3d:5e:64:
                    60:bd:79:4f:d1:65:be:fb:0c:18:42:40:00:61:07:
                    0c:56:46:b2:a6:f9:0f:da:9e:34:fe:26:01:b0:54:
                    da:6a:11:cc:5f:cf:1f:c9:0d:af:0b:f1:28:6e:25:
                    94:2b:1c:9c:e8:10:4b:76:f1:f4:51:5c:1d:61:d5:
                    f7:f0:36:08:90:b1:37:fa:9a:f3:4f:85:7b:62:4e:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:93:43:D4:71:B8:52:7F:C6:12:F5:87:95:7E:6F:0A:8A:9F:E5:E5
            X509v3 Authority Key Identifier:
                keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:cb:c8:9d:b5:f3:38:25:86:17:57:ec:d3:d1:ca:c2:bc:
         78:0b:b5:55:3c:c9:d5:74:95:0d:f6:8c:9a:b0:7c:e6:53:bf:
         2a:43:a8:6c:10:03:b5:3c:ac:9b:9e:94:76:31:db:93:a6:26:
         ac:25:c8:fc:4d:a7:78:86:c2:89:c4:05:59:b4:d8:1b:6e:35:
         17:fd:8a:51:05:65:5c:b4:11:90:a0:65:be:de:38:bb:02:33:
         6d:53:fc:af:e4:b6:05:60:56:0c:f2:26:6e:c1:e4:1f:fb:9c:
         b8:de:fc:00:e6:4e:4a:13:b2:d3:5f:8a:c4:73:d7:37:6c:48:
         ed:df:e2:28:b7:d5:bd:30:24:91:08:01:d5:8b:90:38:4d:95:
         b9:f9:35:41:9b:25:e6:78:4c:a5:78:39:be:a6:4c:ee:91:71:
         15:8a:aa:de:74:68:04:84:bb:b3:4f:48:84:96:66:9f:cf:e0:
         d7:35:99:53:de:87:60:8a:96:a3:fc:1a:09:2f:5a:4d:e8:a2:
         83:f3:58:f1:12:b8:4b:6e:36:1a:2f:06:8a:cc:89:d0:3e:13:
         b2:c3:03:44:24:c5:f2:d4:70:27:38:5a:f8:55:88:bb:48:e9:
         54:4d:a0:bb:a5:a9:ad:4e:84:1f:e1:0c:62:58:9a:d8:67:dd:
         51:f8:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:10 2026 by rpki-client