Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File:                     dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier:          YHXLcYJhsBNrDkCGEAoQjDHbnbmHzPlkq9TrPQuK+Z4=
Subject key identifier:   DB:9B:7E:2D:67:3D:A0:5B:30:95:B5:11:47:43:52:CC:68:43:4A:78
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer:       /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial:       0331
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number:          0313
Signing time:             Sun 15 Nov 2026 00:58:07 +0000
Manifest this update:     Sun 15 Nov 2026 00:58:07 +0000
Manifest next update:     Sun 22 Nov 2026 00:58:07 +0000
Files and hashes:         1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: 7t0DOcmhKFe+WoWITSUUi0J8u9sPI6FS9CahVn4GeRA=)
                          2: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: bgQ4QA9EsMV4P1/N6HLMc8asHKp9aBowzlQxxkpiMIw=)
                          3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: pv+TSjOIdZ7NDrJ4z58kpSpDp3kbno6S26qXS1oFNpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
                          rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
        Validity
            Not Before: Nov 15 00:58:07 2026 GMT
            Not After : Nov 22 00:58:07 2026 GMT
        Subject: CN=6af9039f-cf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:57:14:fe:fc:32:48:40:9c:ec:cb:b9:78:
                    26:21:87:6d:44:71:7d:cb:de:f9:8b:a9:09:b4:1e:
                    30:5a:1b:5b:72:93:a7:bc:6c:c4:27:a1:72:58:d3:
                    06:5b:8d:11:de:87:8f:4a:74:c5:a4:4b:d8:b4:e9:
                    f6:58:b5:db:a4:da:63:fc:d7:3b:f8:18:b4:2b:5e:
                    d8:67:d0:38:46:f9:7d:99:fb:91:12:ff:cd:68:98:
                    ac:cd:70:47:f5:e3:46:09:07:49:ec:b9:71:e5:e3:
                    80:6d:17:ec:74:15:9c:17:13:53:ae:22:63:05:88:
                    9a:af:a5:a4:63:b9:7d:36:9c:a8:51:40:89:fc:8b:
                    02:5e:f7:4a:0d:bb:51:34:03:d9:cf:3e:11:3e:f5:
                    46:d7:bc:16:4d:80:e5:e3:e4:af:95:4d:fc:db:66:
                    ff:da:9c:30:11:02:11:db:f6:b5:9d:a0:05:00:9f:
                    95:ed:a7:05:ca:b7:da:bf:5f:81:4e:61:f2:2e:a4:
                    a0:7a:8e:6e:8a:2f:a1:14:4c:62:1a:08:db:e3:8e:
                    0a:65:b3:4c:37:51:9d:9e:cb:7c:be:f4:a1:06:90:
                    3b:af:c7:e0:95:0f:2e:40:52:85:ca:aa:29:e6:68:
                    51:0f:bc:61:de:27:bd:c8:75:a4:bf:df:b4:9d:14:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9B:7E:2D:67:3D:A0:5B:30:95:B5:11:47:43:52:CC:68:43:4A:78
            X509v3 Authority Key Identifier:
                keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:1d:53:14:f0:ca:68:58:93:97:7d:eb:38:43:99:05:9f:
         6c:2b:99:42:5d:61:d7:55:c9:e6:43:85:eb:c6:6d:da:39:b5:
         00:98:ae:30:99:90:71:d3:54:f7:4d:e4:d7:55:28:dd:7d:e6:
         d6:f5:a4:fd:e8:1f:20:c6:12:29:88:77:a1:3f:07:fc:10:68:
         b7:38:cc:90:2b:3b:f9:f9:55:63:2e:19:83:18:a3:46:3d:74:
         c8:c6:b9:36:46:25:6e:86:f2:49:36:69:9c:11:d6:0e:4a:53:
         59:8d:19:f9:b9:03:94:02:66:75:81:df:1d:9b:58:eb:90:0c:
         5d:b9:00:a6:b3:ec:fe:3e:4b:26:09:97:7f:ae:c2:34:ea:b0:
         de:8d:e4:26:2b:d3:5a:94:22:9d:aa:2c:20:24:07:49:0c:03:
         54:3a:67:a4:4c:46:af:27:88:13:8f:a0:f1:bb:ae:7f:88:ad:
         27:e6:29:61:ef:e2:57:7f:f3:4b:06:c0:ec:f2:e8:38:25:62:
         c6:ce:dc:c3:f5:a2:f5:f4:1e:bf:81:7f:18:12:aa:56:8a:02:
         68:b5:19:e5:b0:e7:dc:d9:25:aa:f7:10:8c:d3:42:f2:3e:c2:
         c4:82:4b:da:67:24:ef:47:2a:68:e4:8e:64:a6:92:cc:a3:20:
         39:d4:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:25:48 2026 by rpki-client