Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
File:                     i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json)
Hash identifier:          j5Zn/UvFhji7NMq2MP/UtPsGRcAftAU+Tk/SZRHC75s=
Subject key identifier:   6F:0F:58:9B:01:98:5E:F2:F5:58:2D:C7:86:D8:64:C2:6B:1E:1F:78
Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
Certificate issuer:       /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Certificate serial:       06A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
Manifest number:          06A0
Signing time:             Sat 14 Nov 2026 22:15:20 +0000
Manifest this update:     Sat 14 Nov 2026 22:15:19 +0000
Manifest next update:     Sat 21 Nov 2026 22:15:19 +0000
Files and hashes:         1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: j6ayg35MgJzd0l8GaZ1J1oEl82q+rQZ+6AV+lXUv2dQ=)
                          2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 7ciUUzLJ+kZgShwA8i58YsGujRYv/UGV/4XGImsbT2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
                          rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
        Validity
            Not Before: Nov 14 22:15:19 2026 GMT
            Not After : Nov 21 22:15:19 2026 GMT
        Subject: CN=6af8dd78-e837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:bd:2f:75:39:8c:b8:46:9a:b2:d8:61:dc:
                    78:6c:09:ef:85:db:e9:4b:66:d1:eb:95:72:82:27:
                    1e:c6:00:46:61:20:38:53:e2:95:75:94:5e:0c:8a:
                    91:71:de:d9:72:26:5f:e0:66:82:70:b0:b0:c8:f7:
                    27:49:fe:4e:5a:48:51:09:6d:b1:cc:c7:c1:d7:37:
                    88:a2:f0:40:a8:7f:87:a6:58:3b:e0:a0:0d:7d:47:
                    35:6c:dd:c3:38:68:c0:40:d6:89:a2:f0:a1:8b:66:
                    84:42:18:f0:08:97:12:df:e9:b3:91:e8:7e:52:73:
                    25:c3:32:39:86:74:c4:88:91:b5:43:02:bc:fc:b1:
                    aa:aa:76:cc:d1:64:c8:58:dd:7e:3f:f0:f8:b0:08:
                    d4:0c:9c:d3:5d:f8:88:04:21:e1:eb:80:11:74:29:
                    15:9c:f8:f3:e5:54:93:d9:f8:d0:bb:4b:de:6e:6a:
                    dd:2a:27:2f:44:01:1c:f3:f4:b2:24:19:de:f9:10:
                    a9:76:23:17:ac:52:90:ce:b4:32:d6:f4:75:d1:c8:
                    e0:53:36:74:8a:c5:db:6c:67:a7:ff:f2:02:02:b4:
                    a8:8b:22:b5:d4:ec:0f:40:ff:b1:13:16:ce:60:50:
                    48:e2:d5:49:eb:cc:52:c6:93:d6:71:1e:6d:41:1f:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0F:58:9B:01:98:5E:F2:F5:58:2D:C7:86:D8:64:C2:6B:1E:1F:78
            X509v3 Authority Key Identifier:
                keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a0:91:fb:5b:6a:c4:7b:95:52:f9:d7:b7:72:f2:73:e9:e2:
         09:67:1a:18:d8:21:18:53:ed:b3:cd:0a:eb:95:e6:be:1b:5e:
         38:10:ea:3b:28:1b:05:b2:a8:a5:f3:23:e6:c0:06:fc:19:44:
         2a:e6:5b:b9:bd:4b:47:36:8a:5c:37:4a:4f:c1:9e:4c:81:15:
         f3:a0:45:71:08:93:8e:17:cc:f2:67:d2:56:8d:b4:33:7a:5c:
         44:0e:10:87:fc:94:60:44:10:5d:6b:c3:92:43:ae:c8:83:6e:
         22:27:58:15:47:d9:3b:da:b8:fb:69:ab:76:f0:3e:6d:18:92:
         f2:85:14:30:26:84:d7:62:25:ed:08:c1:5c:f5:ba:c4:c7:38:
         07:0f:f5:10:c7:33:6a:fe:8f:97:59:26:8f:0e:41:5c:5e:07:
         cb:81:45:0a:ea:28:ff:4c:48:15:08:2e:ac:c8:72:48:1d:1e:
         ce:11:5d:94:88:8f:f6:e0:13:ab:9a:08:fd:67:c4:ae:f3:31:
         dc:97:d2:90:f2:fd:6a:79:bf:cf:2b:17:80:61:38:70:9c:e5:
         bd:f3:ef:29:1f:87:75:2c:74:87:c6:d9:8c:80:57:7a:7d:75:
         63:80:e2:97:0c:7f:37:a6:67:a4:45:c3:05:73:ef:21:fb:3f:
         b4:ca:f8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:28 2026 by rpki-client