Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File:                     RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier:          TvMsUxa7JdY7VHNpaDWQ68Bn97MuF9mlPgAPAeW/3ww=
Subject key identifier:   2C:83:3C:B4:68:05:6C:5F:7B:F2:0C:A3:F8:E7:19:A0:AC:B3:C5:48
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer:       /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number:          02D3
Signing time:             Sun 15 Nov 2026 01:21:43 +0000
Manifest this update:     Sun 15 Nov 2026 01:21:43 +0000
Manifest next update:     Sun 22 Nov 2026 01:21:43 +0000
Files and hashes:         1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: HP7qwTdLZhAOZDmSCA+BKUYHO9MrhzfIJUu6pRyYk/8=)
                          2: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: Yq+XkZnFsUBeEQv24fQGoEmIq0pC6YGTxLPonEh4+Us=)
                          3: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: 4uTpTxxOKcFpix9VMs0QMyQDPqJHXQEnQ2Lc7hCfmwQ=)
                          4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: HMh0PudeObId9zudYejPSA5f+N2qiPXxo4G9qeOgkD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 01:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
        Validity
            Not Before: Nov 15 01:21:43 2026 GMT
            Not After : Nov 22 01:21:43 2026 GMT
        Subject: CN=6af90927-7f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:18:c7:e5:70:0e:bd:d9:10:7c:20:0a:a7:
                    bf:84:d2:17:79:da:99:cd:19:e3:5b:9e:5e:4a:06:
                    39:1a:5a:cc:0b:72:15:61:26:d2:58:55:e6:86:e5:
                    aa:31:60:63:0d:a2:fa:e8:88:78:39:dd:a2:51:4a:
                    40:5f:54:c9:db:13:ac:21:31:09:62:02:d8:27:f6:
                    23:86:02:6c:39:99:86:55:68:fd:a5:b3:27:60:22:
                    a0:fa:98:bf:1e:60:12:d8:04:c7:b9:bd:70:55:10:
                    97:0f:03:b3:bc:e7:74:88:bd:40:1e:d5:a6:9b:99:
                    22:58:8e:a2:52:59:fe:97:75:9f:a6:1c:c0:b8:74:
                    d5:16:fd:5e:ae:ff:10:42:f7:6e:cc:54:a3:92:43:
                    61:bc:5f:46:f5:d2:e4:9f:1a:68:85:fe:0c:92:94:
                    0b:ab:4a:22:01:45:dc:bf:31:26:22:b4:1c:ad:26:
                    03:db:54:a0:3e:6f:9d:75:66:12:eb:5e:f9:c3:02:
                    1a:22:f0:da:5b:b1:9d:fc:bc:64:f2:cb:90:39:24:
                    37:1d:b1:e8:e6:b2:71:de:f1:b6:02:69:b8:b0:1c:
                    a9:4c:9c:7a:97:39:a7:5c:98:c8:32:54:69:56:87:
                    4c:bf:31:90:76:42:51:dd:b0:da:a4:b2:42:a1:a7:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:3C:B4:68:05:6C:5F:7B:F2:0C:A3:F8:E7:19:A0:AC:B3:C5:48
            X509v3 Authority Key Identifier:
                keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:86:24:5d:83:25:22:ae:63:31:15:6f:a5:0d:14:a6:06:
         32:3b:48:d6:a8:7e:ff:5e:ad:05:1f:62:5e:1a:0d:9e:33:bc:
         1a:a5:a6:ea:47:ff:e3:00:5c:75:36:7c:ac:f1:94:63:1a:64:
         7e:e3:9e:ba:bf:a0:f1:47:ab:88:2b:fb:7d:a4:a4:27:e2:8d:
         1f:af:42:87:46:9c:d3:ba:10:32:1e:57:44:df:49:5d:b0:41:
         be:f7:a2:1f:f9:eb:de:9b:a9:de:14:75:e8:8f:a6:b5:34:63:
         dd:86:c4:ef:0f:a8:45:71:1c:a6:d2:ad:b0:2a:9b:97:f0:24:
         48:97:b8:4b:f2:dd:00:0b:3b:a7:fd:79:75:a2:58:91:ca:42:
         e6:0c:3a:18:02:e1:d4:3f:1f:cb:cb:69:a8:45:92:8e:35:84:
         08:c7:6e:f2:05:92:21:07:c3:b9:84:19:6e:f9:da:a0:f4:e1:
         df:ce:e3:38:30:da:9a:9a:0e:7a:f4:54:1d:43:9c:68:22:19:
         58:ec:12:f5:e1:ee:fc:98:11:34:4b:23:03:ff:b9:be:43:a0:
         0b:af:d9:8e:d7:a5:3c:38:c7:3d:8d:c1:78:19:6a:49:d4:db:
         1d:96:6c:57:83:3e:eb:3c:3f:9f:3b:33:0d:bd:65:19:63:70:
         a7:b8:3d:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE
MkFBRUU0QjkwHhcNMjYxMTE1MDEyMTQzWhcNMjYxMTIyMDEyMTQzWjAYMRYwFAYD
VQQDEw02YWY5MDkyNy03ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdwYx+VwDr3ZEHwgCqe/hNIXedqZzRnjW55eSgY5GlrMC3IVYSbSWFXmhuWq
MWBjDaL66Ih4Od2iUUpAX1TJ2xOsITEJYgLYJ/YjhgJsOZmGVWj9pbMnYCKg+pi/
HmAS2ATHub1wVRCXDwOzvOd0iL1AHtWmm5kiWI6iUln+l3WfphzAuHTVFv1erv8Q
QvduzFSjkkNhvF9G9dLknxpohf4MkpQLq0oiAUXcvzEmIrQcrSYD21SgPm+ddWYS
6175wwIaIvDaW7Gd/Lxk8suQOSQ3HbHo5rJx3vG2Amm4sBypTJx6lzmnXJjIMlRp
VodMvzGQdkJR3bDapLJCoadcUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyDPLRo
BWxfe/IMo/jnGaCss8VIMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2
MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1
TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD
cDZIazJrc3NCdnJTcXU1TGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC+mGJF2DJSKuYzEVb6UNFKYGMjtI1qh+/16tBR9iXhoNnjO8GqWm6kf/4wBc
dTZ8rPGUYxpkfuOeur+g8UeriCv7faSkJ+KNH69Ch0ac07oQMh5XRN9JXbBBvvei
H/nr3pup3hR16I+mtTRj3YbE7w+oRXEcptKtsCqbl/AkSJe4S/LdAAs7p/15daJY
kcpC5gw6GALh1D8fy8tpqEWSjjWECMdu8gWSIQfDuYQZbvnaoPTh387jODDampoO
evRUHUOcaCIZWOwS9eHu/JgRNEsjA/+5vkOgC6/ZjtelPDjHPY3BeBlqSdTbHZZs
V4M+6zw/nzszDb1lGWNwp7g9KQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:38 2026 by rpki-client