Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft
File:                     FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft (raw, json)
Hash identifier:          dgRaMtYvRndMZ20wL5CpstKJipv1I59UCn04lk5LGJ4=
Subject key identifier:   91:6A:EF:DF:2D:5E:5D:35:39:2D:36:B4:20:88:98:4E:BE:6E:1D:2A
Authority key identifier: 14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A
Certificate issuer:       /CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft
Manifest number:          02B9
Signing time:             Sun 15 Nov 2026 01:35:14 +0000
Manifest this update:     Sun 15 Nov 2026 01:35:13 +0000
Manifest next update:     Sun 22 Nov 2026 01:35:13 +0000
Files and hashes:         1: FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl (hash: U+OJo+FcQLQKSL8anccsqWXOtArsXR+ynvkJmX5VdVQ=)
                          2: 5153E9DAC0B911ED99A12312C4F9AE02.roa (hash: bb+VA7pizyeITIcQT7fn3+RnD/NIkiexRtzS5nQLjjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl
                          rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 01:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEC3C, serialNumber=147A0E048711B62506B09F088A05992A3A31020A
        Validity
            Not Before: Nov 15 01:35:13 2026 GMT
            Not After : Nov 22 01:35:13 2026 GMT
        Subject: CN=6af90c52-ca8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:6d:dd:64:e2:35:c8:6b:0d:e8:75:cb:e8:
                    46:af:e1:bf:b1:ba:73:69:4f:6f:00:96:41:e9:d1:
                    14:c9:9b:d1:59:69:ca:89:e8:0c:b4:eb:93:b1:05:
                    2b:c8:ac:d2:a6:43:14:ed:92:b5:71:95:34:c8:a2:
                    08:40:4a:94:df:be:56:ff:b2:15:56:0a:c6:d5:55:
                    9b:fa:81:01:14:a0:15:53:41:e1:01:13:65:69:8f:
                    0c:b7:c1:3a:bc:f2:fb:2d:22:0e:21:7c:77:cc:a4:
                    81:21:d8:84:1c:08:32:9a:f7:80:30:b6:aa:f4:c8:
                    ae:d4:27:28:66:a9:45:41:e0:52:8b:d8:4c:64:a4:
                    ac:83:32:2c:32:4f:0a:ff:b6:be:d2:03:d3:b7:2d:
                    5b:79:53:cb:9d:7c:38:a4:a2:d9:52:8e:a7:bf:54:
                    0a:77:d5:0e:08:5a:1f:f8:ee:53:de:6f:c5:c6:c2:
                    3b:96:6f:50:4b:9d:2e:19:bc:bf:92:9d:a1:ce:36:
                    b9:95:2b:c0:f9:3e:a6:8a:80:75:ad:23:47:21:29:
                    b4:7d:5e:98:41:af:7c:3e:2d:57:62:66:21:ff:4e:
                    b5:38:0a:fa:8b:4e:32:8e:32:d6:d1:f8:38:f1:f2:
                    a7:e0:69:a0:98:57:c0:ab:d9:59:8e:9a:2b:cb:0d:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:EF:DF:2D:5E:5D:35:39:2D:36:B4:20:88:98:4E:BE:6E:1D:2A
            X509v3 Authority Key Identifier:
                keyid:14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:38:2d:82:b2:6e:f1:96:31:4a:95:59:2c:69:51:79:1f:
         b2:84:8e:7a:30:5e:af:46:30:51:13:e0:cc:6d:a1:b1:9d:c6:
         50:a2:86:6a:ef:a3:5e:b1:72:f1:60:d0:ab:f9:ac:d3:32:a4:
         18:43:78:2b:cf:ac:a8:b2:7f:7d:7b:c2:6c:64:c0:4c:81:6c:
         61:a1:b0:d7:af:24:b5:51:40:27:2a:e6:b7:30:71:c9:80:6a:
         4b:ab:a0:e1:ec:a5:8f:b9:a3:15:2a:06:4e:22:06:92:1c:9c:
         52:0e:fd:5c:6a:1d:9a:0b:3a:1b:af:00:af:e2:d1:63:5f:d1:
         17:da:ba:b2:ba:33:ef:f4:9e:45:c6:f2:34:9f:f5:06:4a:21:
         31:77:6c:7e:d0:9b:f4:57:b0:d8:ad:b9:f1:94:e5:b5:9c:8a:
         c1:c0:6e:be:8d:1e:82:b4:2c:17:87:2e:1b:52:a3:de:57:4f:
         44:3b:bd:2c:4c:05:11:53:f5:5e:e7:3d:c1:a7:4f:d0:83:2c:
         bc:7a:9a:81:66:7d:7a:66:10:97:56:3c:7c:d8:c3:e1:87:c2:
         0a:ee:ee:7b:3b:cb:8e:a4:53:fa:b9:6c:6c:54:5d:69:d5:2e:
         87:26:53:1a:3a:f9:41:20:13:7d:f9:ac:e0:8a:17:4c:09:9e:
         50:f2:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:06 2026 by rpki-client