Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File:                     dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier:          3N0KMKdPF8viHJqtGNDnEYKdBYY4M6LpxU9QIrlWtLA=
Subject key identifier:   19:51:D6:18:36:C2:1E:06:50:52:E9:2F:21:57:D4:68:B6:F0:EB:E8
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       027D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number:          0271
Signing time:             Sun 15 Nov 2026 02:16:41 +0000
Manifest this update:     Sun 15 Nov 2026 02:16:40 +0000
Manifest next update:     Sun 22 Nov 2026 02:16:40 +0000
Files and hashes:         1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: DLZnVZ5P9sih39wKxSk5iM6b628MZTko6GVQ4kwO+ws=)
                          2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: w37FmKuGyYiI7GCx8HffTvi454gu/r8u+XiWKTa1IQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Nov 15 02:16:40 2026 GMT
            Not After : Nov 22 02:16:40 2026 GMT
        Subject: CN=6af91609-9490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:7b:3e:db:0c:5f:e2:c9:2c:f6:6b:24:bb:
                    7b:40:6e:e4:3a:1d:ff:1f:20:c2:5a:a3:c1:ae:c2:
                    1c:18:2d:6f:90:60:e4:c5:70:0a:c3:d0:ca:0a:39:
                    6e:f9:b9:0b:e2:21:24:6e:ec:4a:8f:24:8e:81:ce:
                    2a:bc:2b:3b:08:47:fb:a9:2d:db:66:fa:ae:87:44:
                    76:18:e9:f2:b8:89:6c:85:6c:22:e5:51:86:64:40:
                    d8:e6:47:21:2d:47:25:8c:d4:36:82:d4:7e:b3:72:
                    02:e0:d4:77:30:02:ae:47:60:fb:a6:03:0a:ce:cb:
                    d7:f2:2d:13:d8:e3:52:24:a4:2f:ea:4f:29:f3:c0:
                    e0:dd:94:9b:f8:c1:ff:5f:82:61:ca:04:77:cc:9f:
                    ba:8f:a3:72:97:cf:66:32:98:25:8a:e5:d4:90:9c:
                    f9:b4:50:31:f3:31:bb:b4:16:ff:17:09:f5:0f:74:
                    b0:c4:ec:08:c9:20:f7:d0:12:d7:16:6c:47:25:5b:
                    86:1a:73:2c:0b:ee:c6:30:9e:50:46:8c:b8:13:38:
                    3e:cc:9c:a3:42:2a:46:5e:d4:34:c9:22:53:ca:7f:
                    7e:78:b6:09:ba:40:da:2c:81:44:ae:71:3b:85:6e:
                    9f:fd:0e:a3:c5:52:6a:3d:f1:93:6f:50:0d:5f:c6:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:51:D6:18:36:C2:1E:06:50:52:E9:2F:21:57:D4:68:B6:F0:EB:E8
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:68:4c:bf:c2:a2:4f:34:25:2d:cb:7f:b6:a4:fc:cc:9e:ba:
         c8:0b:40:0c:5b:c9:a3:14:1a:16:9c:0e:ca:2b:c3:0c:d3:2f:
         87:0e:ab:d5:6a:b1:5f:14:f9:2b:67:68:5c:11:cc:96:f8:4a:
         7a:fa:8b:c8:71:e4:e1:8e:9a:f0:30:dd:9a:ae:8c:b7:da:79:
         8d:3f:e0:8f:eb:f7:14:2f:30:42:da:b1:04:3d:08:00:af:a5:
         eb:08:04:d4:1b:9e:29:3b:60:0a:1d:21:fc:70:33:eb:f9:d4:
         bb:b0:04:01:15:d9:3c:e9:11:ce:64:f8:37:e2:a2:c3:38:b8:
         b4:65:4d:af:e5:f8:ca:37:23:10:d9:3a:61:55:95:04:2a:25:
         4d:5a:ee:85:cb:56:ba:bd:b2:71:05:d9:0a:26:6d:51:fe:2f:
         3b:14:2a:4b:5a:87:47:24:ed:ed:d5:67:29:7c:ae:2d:81:ab:
         10:9b:cd:61:f9:7a:9d:94:54:40:21:76:97:7b:07:68:96:63:
         5d:25:4d:39:90:72:20:4e:cd:9d:69:26:67:1f:97:c7:fc:78:
         97:f1:cf:f3:ef:8d:7c:10:96:49:29:14:e0:de:f5:18:7c:ea:
         2b:0d:51:5d:61:1a:d5:70:20:ce:ce:a6:34:1a:25:bf:d5:34:
         05:43:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:00 2026 by rpki-client