Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
File:                     0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json)
Hash identifier:          ZQO0KrjhgT96NKfh1fGMWIH1nZSn+K8TOsjkwBui4+o=
Subject key identifier:   E9:38:2A:F3:D6:A9:5F:17:E3:06:C5:88:F2:17:84:23:C8:0D:E5:18
Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Certificate issuer:       /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Certificate serial:       07EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
Manifest number:          07E2
Signing time:             Sun 08 Nov 2026 21:13:59 +0000
Manifest this update:     Sun 08 Nov 2026 21:13:58 +0000
Manifest next update:     Sun 15 Nov 2026 21:13:58 +0000
Files and hashes:         1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: gYRg6U7XwuVyaf878Hi4Bsfn8p/xWg7m7J/XQ4oTWSk=)
                          2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: KDHec1NuQnRFPj3fy0LeUs+7NE3BsKDvmh07xKvSLiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
                          rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 21:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026 (0x7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
        Validity
            Not Before: Nov  8 21:13:58 2026 GMT
            Not After : Nov 15 21:13:58 2026 GMT
        Subject: CN=6af0e616-3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:cd:5a:79:4d:b4:cb:9d:10:29:95:de:2a:
                    95:7f:83:65:0c:83:be:49:c9:dc:4e:3b:93:a2:c5:
                    c8:e6:26:ae:0e:9e:1f:9c:1b:3b:c6:44:bd:b4:50:
                    3c:22:5d:b2:b9:39:5c:78:3a:31:95:ff:fc:e8:a2:
                    3d:17:b6:0d:73:de:0a:13:24:a5:94:75:c0:34:2c:
                    53:12:91:ff:80:67:d6:60:77:41:bc:56:7f:48:3d:
                    5a:ce:a2:23:00:ea:29:b3:1b:9a:83:c9:42:b1:8c:
                    c7:56:fc:5f:93:e0:5e:c9:5b:2a:24:d3:fb:b3:9f:
                    0a:79:81:53:63:02:e4:3b:c1:89:a0:6e:2b:ee:10:
                    1f:fc:68:3d:4d:3f:09:b4:08:5e:25:d4:28:24:a1:
                    dd:4d:40:93:b0:23:d8:c4:e5:89:dd:04:27:82:e6:
                    d8:ca:b8:77:3a:9e:ca:1b:0b:de:92:fd:5f:2f:34:
                    49:51:66:bd:f0:a1:4d:a7:0c:2a:98:44:2f:0f:c5:
                    15:12:a6:e5:83:f9:11:c6:f7:cc:c0:c1:80:5b:aa:
                    29:f7:33:ae:86:5a:7d:f0:9d:ed:b2:60:d2:24:3e:
                    61:9c:36:5c:b5:b6:4e:4a:65:64:72:36:2a:f5:56:
                    fe:75:76:a5:ea:6d:3c:7b:bd:94:18:1f:95:72:e2:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:2A:F3:D6:A9:5F:17:E3:06:C5:88:F2:17:84:23:C8:0D:E5:18
            X509v3 Authority Key Identifier:
                keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:73:b4:d8:6c:2f:3b:5b:bd:04:5f:73:07:8d:50:8a:8d:98:
         c1:3a:18:bf:f2:29:4c:20:88:83:77:41:5d:79:23:7d:23:7c:
         0e:e5:4f:c1:b2:ee:95:24:e0:74:41:18:d7:22:3b:84:a2:7f:
         ba:91:c3:5c:f8:46:1a:1a:f5:84:22:31:6c:d6:b9:39:2b:48:
         a8:81:8d:be:8b:4f:67:f4:75:db:fe:37:ff:9b:0f:a3:16:be:
         20:6a:5b:54:01:2c:be:01:a8:6d:1b:38:dd:d3:92:30:4d:8c:
         3e:94:19:64:b6:7d:d4:a1:1a:7a:ed:fc:dd:5b:fb:dd:52:bb:
         95:0a:b7:0e:09:ba:e2:9f:fd:00:5e:c9:32:5e:be:98:c0:e8:
         12:12:e2:50:6d:16:34:27:59:be:3d:04:cb:22:82:fd:35:05:
         ca:ce:13:98:b7:5f:ce:f1:58:91:b1:a1:18:1d:06:37:2c:4c:
         6c:39:76:ed:05:ee:7c:b7:e8:a4:23:2a:19:23:74:2f:17:20:
         a7:11:2f:26:9d:82:97:ba:61:14:52:52:93:67:ba:97:3c:c2:
         4b:35:cc:57:da:bc:93:5e:72:6f:34:d7:04:56:88:33:6e:ef:
         08:1e:c1:f5:47:fa:6e:01:7d:cd:6e:77:ab:c6:65:57:9e:22:
         fb:80:3c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:54:46 2026 by rpki-client