Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File:                     fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier:          QWstRIcyH6dPREwIuc7NQ3ohZSXz5TvHusWgXH/pZs4=
Subject key identifier:   8C:12:7F:AC:D4:43:94:7C:20:27:03:04:46:54:A0:FB:73:1F:FA:E2
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number:          0219
Signing time:             Thu 05 Nov 2026 03:45:26 +0000
Manifest this update:     Thu 05 Nov 2026 03:45:26 +0000
Manifest next update:     Thu 12 Nov 2026 03:45:26 +0000
Files and hashes:         1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: FbpEusilbye2k5TAsjQQ3GO3pBXxr6UHvu8+9iy2bVQ=)
                          2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: uQETdOBNe+Ai7qHHdjas7+cwdq4hlfeAOCRsaHC0QMs=)
                          3: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: RCE7v/cxnBGfMPk3MtJPuEIln4OQNI5lz0I7q4Ez8SY=)
                          4: B6B34C7E80F211F1958CCFA465A30FBC.roa (hash: Ym/+JBhkEZ5Bpl7vO2rxrswxWBhGXCPumfmGo7E+pVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 03:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: Nov  5 03:45:26 2026 GMT
            Not After : Nov 12 03:45:26 2026 GMT
        Subject: CN=6aebfbd6-b6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:36:30:d3:30:17:a5:fb:1a:62:7e:08:20:
                    48:4a:07:4c:fc:23:2e:1c:ed:2c:ab:00:85:b0:34:
                    d1:3f:2d:21:63:9d:d8:5c:39:50:2b:f1:4e:93:89:
                    25:e6:4b:52:1a:58:34:c5:9a:a2:54:ef:56:0a:9c:
                    92:79:56:ce:6c:ec:4e:ee:a5:20:93:89:70:ab:90:
                    a3:19:0b:d6:64:47:06:d4:51:9f:68:36:26:9c:3a:
                    a2:a3:ff:c9:f1:33:ad:ac:72:b0:a0:53:e9:da:df:
                    d1:50:63:96:aa:e9:64:db:c0:11:57:bb:a0:85:b9:
                    58:81:11:f8:b1:f9:bc:7e:78:a0:d2:ba:db:fd:42:
                    2d:2e:85:06:ea:93:78:3d:c4:68:85:d1:d7:09:80:
                    e4:27:e6:28:18:42:33:a9:1a:1d:d5:39:6f:cc:a2:
                    e4:e5:ee:ab:67:71:c0:2e:8a:0a:1d:78:ee:da:0a:
                    5e:9f:1b:1a:a8:3e:c9:5a:73:e2:0f:14:d8:26:08:
                    73:65:89:01:cd:4f:f8:5e:7b:92:b9:18:c4:bb:2f:
                    ff:45:e5:f6:bd:ee:82:47:e3:e4:27:79:94:ed:cd:
                    c2:17:9e:1a:a6:95:a0:e6:a3:f6:2c:bc:99:5a:17:
                    0e:ac:12:98:71:29:54:9a:1c:0c:2f:6a:f5:9d:b8:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:12:7F:AC:D4:43:94:7C:20:27:03:04:46:54:A0:FB:73:1F:FA:E2
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:f4:da:73:aa:5a:a0:38:ca:e1:25:f2:55:40:53:e1:84:
         93:4f:40:1c:f8:38:28:4a:25:a6:0e:48:3f:ea:d0:7c:57:73:
         a4:e5:e6:13:84:ab:0e:7c:6b:99:c6:31:94:39:9c:14:99:d9:
         ed:0e:16:55:5d:e8:9a:12:01:6a:11:cb:b6:e1:a7:1a:c2:e0:
         a0:c5:97:67:43:f2:80:e1:1f:7c:bf:1b:d7:e4:58:60:c9:0d:
         e3:b6:84:c1:4a:22:7c:47:69:ce:40:72:34:84:00:e6:d1:0d:
         76:2f:af:f4:f9:f4:0d:bf:4c:d2:9b:20:fd:aa:58:cf:7f:90:
         1d:b0:98:0e:54:fc:67:3c:a0:77:14:e0:41:3e:11:42:cc:d4:
         cd:25:f5:2c:d9:27:f4:3e:e9:7a:5f:23:48:1f:47:5a:b3:6e:
         79:2d:8d:8e:dd:5f:19:ad:10:93:0e:77:ed:28:c2:71:6f:90:
         0a:60:6f:af:35:58:c2:21:cc:5d:68:b8:36:19:8b:41:86:8c:
         16:9e:f1:94:70:2c:eb:e5:2d:a9:db:42:44:b1:a5:57:e6:27:
         e3:7b:23:8a:c5:e4:52:e3:38:0d:99:27:3f:a2:20:85:1d:fd:
         a0:e2:cc:43:33:c0:2e:01:10:a9:a5:a2:aa:bd:58:ea:69:06:
         30:27:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:17:51 2026 by rpki-client