Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
File:                     uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json)
Hash identifier:          UZp7I/iNUgwzMwpii9fH+SltxXNZ2baG9cLgHH7k6Po=
Subject key identifier:   59:45:0B:49:02:B4:CE:22:08:ED:7D:FC:F0:4D:12:44:2B:BB:66:2B
Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
Certificate issuer:       /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Certificate serial:       04A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
Manifest number:          0498
Signing time:             Sat 14 Nov 2026 23:47:35 +0000
Manifest this update:     Sat 14 Nov 2026 23:47:34 +0000
Manifest next update:     Sat 21 Nov 2026 23:47:34 +0000
Files and hashes:         1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: 87BGsjmrBOOGtOXB4qEO55Ez0acK2gp97mh305wOzEU=)
                          2: 31CD283C9BC711F19F5994905811F970.roa (hash: PGf3cD4di0e7S3BL97JrDAuKwE7gTjy/Y+Q+WS9v7GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl
                          rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
        Validity
            Not Before: Nov 14 23:47:34 2026 GMT
            Not After : Nov 21 23:47:34 2026 GMT
        Subject: CN=6af8f316-2a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:1f:50:f5:eb:26:e1:3e:80:b3:83:72:92:
                    b1:e4:97:99:95:49:d9:05:d7:d9:9d:3f:3d:92:d6:
                    8a:a1:9e:51:79:26:11:0c:80:1c:ad:db:55:aa:7c:
                    c8:17:73:d1:1c:58:6e:3c:34:8d:a5:5f:3b:e4:ce:
                    54:6f:73:ab:f6:66:cc:59:ce:81:52:f2:e4:9f:d0:
                    6e:85:64:48:40:7a:d2:e3:23:d8:ff:0e:d9:d7:5f:
                    4d:49:bf:c1:61:27:65:dd:5d:0e:5f:56:23:9a:81:
                    f7:75:72:7a:5b:33:9a:f1:19:ac:f0:62:bd:4a:c6:
                    63:17:01:3b:b1:0c:d5:05:03:ff:09:87:06:c7:59:
                    a1:14:83:31:cc:48:e6:49:b5:51:0d:2f:ee:b2:68:
                    93:e8:73:af:6f:24:0c:6f:4e:38:67:6e:c9:94:dc:
                    19:66:9e:e0:fb:ed:f4:0d:ab:36:b1:d7:a8:68:a2:
                    44:91:92:2f:77:aa:6e:72:81:5c:f1:3b:bd:69:17:
                    2e:da:25:d6:38:3a:9f:30:1c:d7:72:99:11:d4:78:
                    d0:49:44:55:d1:e1:37:b7:ae:bd:4c:90:b5:1f:94:
                    9d:ba:80:85:61:11:ba:dd:6b:9b:74:d1:a8:4b:cd:
                    3a:d5:7c:9c:b9:fb:2d:e0:42:93:7c:a1:e1:ac:20:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:45:0B:49:02:B4:CE:22:08:ED:7D:FC:F0:4D:12:44:2B:BB:66:2B
            X509v3 Authority Key Identifier:
                keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:da:27:76:cd:27:68:b9:df:84:56:3d:16:db:f2:c0:87:
         7d:f6:4e:3b:8e:0b:c3:30:90:ae:38:67:60:eb:8c:28:86:82:
         d3:25:9e:39:f4:be:ca:12:77:1a:63:78:06:00:53:e3:32:f5:
         57:98:0d:20:31:d3:cd:18:ae:8d:5e:ae:9e:47:31:86:3f:69:
         66:3d:08:2f:6a:8c:ff:50:d2:d3:96:0e:b8:a2:2e:f6:b0:ae:
         a4:59:78:53:d9:10:25:33:d8:26:97:6d:9b:b2:be:a3:84:df:
         e7:8c:7f:9e:de:11:03:7f:bd:b4:c4:bf:63:00:4a:64:7d:2e:
         a5:a0:fb:13:b0:1d:cd:5a:93:27:87:a1:ba:de:66:9e:ed:48:
         85:30:1a:90:90:83:46:d9:ca:5e:f9:db:c8:d3:06:80:9f:6f:
         0f:17:f5:2d:18:0d:69:90:fc:1f:b5:f4:27:58:ba:33:ce:c3:
         d9:ff:a6:b4:fc:22:9d:80:5d:b8:32:4d:d2:cf:03:08:46:8d:
         45:ef:20:e6:e4:17:a3:70:a4:a5:47:d2:03:18:e6:9f:38:9a:
         a6:52:c4:3e:0e:75:77:fc:fb:b2:2d:36:88:db:36:4e:aa:85:
         e5:57:01:f6:dc:74:b5:8e:8e:c0:4f:0d:20:8e:ff:7a:be:d7:
         d4:a9:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:57:05 2026 by rpki-client