Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
File:                     fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json)
Hash identifier:          SamV8GIALNxEFn+tVS7leoy5B2rreH7QGrTkOFQucr8=
Subject key identifier:   A7:58:66:D2:46:87:4D:D0:6A:00:2F:61:E7:B1:6D:9F:AC:5B:26:2E
Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Certificate issuer:       /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Certificate serial:       0B2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
Manifest number:          0B1C
Signing time:             Mon 02 Nov 2026 19:27:00 +0000
Manifest this update:     Mon 02 Nov 2026 19:27:00 +0000
Manifest next update:     Mon 09 Nov 2026 19:27:00 +0000
Files and hashes:         1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: 3o2avq4x6oqMaTnFTXFExNLZklrnfPqtCxotXPqYQR0=)
                          2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: UbjsSqecieT8KT64hSVXVxons7KgEXv44KoSFwBnx9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl
                          rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 19:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2861 (0xb2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
        Validity
            Not Before: Nov  2 19:27:00 2026 GMT
            Not After : Nov  9 19:27:00 2026 GMT
        Subject: CN=6ae8e404-8e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:ec:7d:fc:bf:e3:a4:10:22:9b:d6:3f:d2:
                    6c:b7:53:59:e1:5d:b7:f0:c4:ca:0a:db:85:c7:ab:
                    b0:60:5e:d2:17:32:46:f4:9a:bf:72:d5:6c:42:20:
                    7d:74:1d:de:91:7a:76:bf:1b:a1:ac:11:d6:58:41:
                    46:a7:f3:6c:ae:62:5f:47:51:6b:9e:48:d1:a1:04:
                    a0:0b:b8:70:14:fa:3c:8c:4e:f1:39:5f:ca:fd:d5:
                    02:7f:1d:49:dd:c5:db:37:e4:e5:a1:0b:b6:2d:aa:
                    d3:c7:7e:e9:d3:a9:a1:09:55:e4:ae:43:6f:b8:9b:
                    38:37:56:49:73:da:31:a9:4c:f0:12:27:84:50:01:
                    a6:5a:e0:00:6e:a7:a7:f2:f9:2a:1a:c4:ee:36:a9:
                    f1:1c:16:b9:79:13:9b:d0:37:c5:7d:d7:6f:d7:5a:
                    b0:d4:0b:23:e8:63:46:1a:08:a8:a3:2b:be:5f:a5:
                    bf:c4:fb:da:3e:9c:83:d7:6e:07:12:fd:f9:bb:d6:
                    b1:57:a4:b1:c6:5d:9c:35:93:59:cc:04:af:42:5e:
                    4e:95:94:26:e0:48:d5:41:1d:b2:f3:cf:a4:bd:bd:
                    e1:69:11:98:b4:fb:54:fd:27:cc:05:42:f8:19:92:
                    15:08:0c:dd:d5:b6:c6:9b:95:88:de:68:17:d6:b2:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:58:66:D2:46:87:4D:D0:6A:00:2F:61:E7:B1:6D:9F:AC:5B:26:2E
            X509v3 Authority Key Identifier:
                keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:41:55:81:bd:e2:5e:7c:73:52:bd:c8:40:09:f1:7c:bb:
         37:a1:c8:56:17:eb:dd:b5:12:c7:9c:61:8e:e6:79:f7:78:c1:
         5d:ef:8e:44:b7:86:54:e6:43:f3:10:4c:5c:68:d5:d3:1b:92:
         31:8e:45:8e:a5:2c:d4:fb:ee:c3:9f:43:9d:35:1d:81:b0:12:
         ca:4e:21:2f:dc:c9:6c:14:11:2a:67:72:f0:4b:bf:92:12:96:
         d6:94:a9:b8:7d:be:cb:98:56:ca:4b:10:f4:13:a2:2e:db:72:
         5b:a8:23:d5:dc:c2:d1:2b:91:7d:33:e2:64:48:c7:04:88:95:
         95:35:91:96:0e:96:e5:8a:b3:5e:56:ec:57:7e:d7:1d:c3:57:
         9f:33:ba:96:2b:2e:0a:f4:c7:18:2f:b6:2c:87:fb:a1:ec:14:
         f3:e9:50:cb:7e:8d:ce:cc:8f:f4:dc:6b:a4:85:f2:c5:93:51:
         7a:aa:c0:6c:0c:2d:56:19:f2:69:76:90:f2:12:bc:24:33:3c:
         b0:52:f9:87:93:d6:4b:47:39:18:37:71:ce:5a:35:2d:d8:e6:
         16:14:6c:ee:c8:0b:f7:be:61:68:ff:2f:15:bf:7d:22:d5:3d:
         8f:21:37:56:98:05:2e:4e:6c:76:a3:81:2b:fc:f9:96:31:e2:
         90:65:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:53:48 2026 by rpki-client