Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File:                     pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier:          XEd1f1sPORZqE9r0c2lYw8hsKzShHLCWUZ/zUoeNeLg=
Subject key identifier:   9E:C4:D6:51:D0:15:18:FE:74:4E:81:BF:92:79:A9:F3:7C:75:FE:2B
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer:       /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number:          010B
Signing time:             Sun 01 Nov 2026 07:10:27 +0000
Manifest this update:     Sun 01 Nov 2026 07:10:27 +0000
Manifest next update:     Sun 08 Nov 2026 07:10:27 +0000
Files and hashes:         1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: OayJlBJaJOyAzOpFlMiG07nYCNPotT0Hhrzs5jQmWJk=)
                          2: 5B118C12986011F0A5423187C4F9AE02.roa (hash: alasAzOtWpleBKeTwTXbhQlKP6svXTD3Kr1GRXjNvNE=)
                          3: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: MvcG4U91ksg21bFQHUycofyC3j8v7/vCU+cxxJzP/x8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 07:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
        Validity
            Not Before: Nov  1 07:10:27 2026 GMT
            Not After : Nov  8 07:10:27 2026 GMT
        Subject: CN=6ae6e5e3-ec39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:12:69:09:12:b0:4c:32:39:98:76:96:78:
                    d1:ed:f3:87:66:27:fb:37:ab:dc:43:6f:17:d5:4f:
                    f9:19:bf:f2:a2:ea:a5:bb:ac:87:3f:d5:b9:45:21:
                    7e:5b:8a:06:96:e2:05:cd:80:57:da:d3:dd:96:ba:
                    8d:91:e0:56:e3:8a:61:52:ef:7d:02:22:0e:84:78:
                    88:6a:02:5f:4c:77:72:99:e4:f8:2d:9b:fa:8b:43:
                    95:8a:75:42:fd:ac:71:26:e2:e1:07:3b:86:63:ea:
                    47:28:49:63:ea:88:07:93:92:97:f0:38:88:4e:70:
                    ab:e8:dc:3f:65:40:eb:d6:89:e1:e0:b5:37:ac:7a:
                    77:b6:0f:23:3b:33:5a:58:13:4b:da:d7:3a:4b:c0:
                    21:0c:e2:16:4c:62:b4:e7:dd:24:2f:28:b8:b1:e1:
                    3b:6b:24:a6:2d:69:16:9b:9f:38:2a:42:5d:13:6d:
                    46:f8:0b:9f:22:d8:fe:e4:d5:f1:e9:b0:6a:38:c7:
                    40:2b:b0:24:51:e6:a9:ec:a5:69:06:07:63:51:d0:
                    1b:44:0f:22:ab:20:80:21:f8:d8:b3:f0:17:67:71:
                    4e:ce:2c:7e:d9:78:d9:81:c1:db:cc:32:f7:e4:74:
                    f4:8f:d7:a7:5f:1f:a5:93:b4:fb:8c:0f:e0:6e:97:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C4:D6:51:D0:15:18:FE:74:4E:81:BF:92:79:A9:F3:7C:75:FE:2B
            X509v3 Authority Key Identifier:
                keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:db:03:ac:66:44:1a:83:db:5c:6d:f4:c1:73:9f:41:a0:bd:
         d8:e2:0f:15:cd:ed:49:16:8e:ec:33:8d:c6:57:ad:13:1d:7b:
         2d:cc:e0:7f:a6:d5:2a:63:be:53:22:01:17:37:d1:35:91:22:
         ea:97:07:82:a3:11:ac:8c:fe:84:b6:37:68:77:b8:75:1d:1d:
         8a:f8:28:80:39:fa:3e:20:44:da:ab:fa:98:5a:54:72:86:b4:
         47:0d:07:ce:bf:ff:7e:8d:8e:bf:91:f5:f6:5c:54:22:cb:b3:
         d6:93:e7:7a:a0:8a:a5:17:8e:ac:ba:7b:7d:4a:67:dd:91:b0:
         58:e9:37:af:18:e5:c4:72:73:d9:71:2a:07:9d:4d:ce:ab:fd:
         e2:c4:24:a7:4c:93:2a:42:30:05:99:e2:e1:97:34:7a:c8:3b:
         0a:f0:73:1f:f5:55:33:b4:b4:82:be:bb:e6:be:89:16:13:b6:
         bb:2c:cc:7f:3b:90:51:33:ff:e0:13:7e:2d:16:30:43:c6:3c:
         3e:ff:0e:54:e4:22:75:3f:b1:60:5e:ab:49:2a:0f:4b:25:2e:
         cd:ab:5b:96:4f:77:c3:5a:3f:90:10:73:9d:f4:bd:66:91:2a:
         ab:49:23:62:67:0c:c7:89:7d:96:59:2b:7f:92:a8:d5:97:75:
         aa:e0:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:51:09 2026 by rpki-client