Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
File:                     sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft (raw, json)
Hash identifier:          AWkIlDsE0mGUypzBr/EDpp2gsJlSnMfbeTJuw8/+dZc=
Subject key identifier:   93:21:1D:95:9B:66:EC:AB:9E:2E:D2:C5:0B:E1:32:62:A6:F8:08:A4
Authority key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
Certificate issuer:       /CN=A911FE83/serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
Manifest number:          97
Signing time:             Sun 15 Nov 2026 07:40:02 +0000
Manifest this update:     Sun 15 Nov 2026 07:40:01 +0000
Manifest next update:     Sun 22 Nov 2026 07:40:01 +0000
Files and hashes:         1: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl (hash: aOP0ZUOk/Zz5vYSsndPMnTv/RN4WY414c2gQZhWkmM0=)
                          2: 1CF20536001311F1AC4D12CC406F56BC.roa (hash: g4Ud8ofVkhlMNmXk1DVd80+pMPQpIN+9NWS+U7ei8zU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
                          rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 07:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
        Validity
            Not Before: Nov 15 07:40:01 2026 GMT
            Not After : Nov 22 07:40:01 2026 GMT
        Subject: CN=6af961d1-54ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:04:9f:61:34:d9:3e:cb:06:2d:da:0f:a1:
                    4b:89:bc:bf:9a:45:a8:b2:39:6d:9b:98:c7:6c:89:
                    2d:52:eb:7e:6f:47:2b:d9:b1:54:15:77:a0:93:60:
                    37:61:d7:85:cd:b3:d7:69:18:e2:58:fe:5b:10:e0:
                    e9:b5:9c:2b:41:42:4d:d7:e2:22:13:ac:76:e6:63:
                    62:d9:f7:53:05:8c:9b:6d:7f:a2:73:a3:73:aa:13:
                    9a:ec:57:33:8c:aa:9a:c7:7b:02:23:0a:a9:59:1b:
                    92:6e:bb:56:01:30:9c:9e:02:9f:d9:06:7c:21:b6:
                    1f:73:e7:dc:f0:99:7f:85:f5:1d:a8:82:a3:d7:d9:
                    4c:4e:81:a2:e8:8f:58:89:14:b6:b2:b3:cc:8e:92:
                    2a:7c:68:a4:ea:be:c7:f7:ac:59:e9:4a:ce:65:ee:
                    c9:35:c6:dd:e0:de:7e:ea:e4:08:d6:f7:a7:54:a8:
                    20:72:75:f7:04:45:f4:68:dd:17:2f:04:ce:f6:4a:
                    b2:56:03:19:b4:4c:c9:48:a0:85:e8:e4:d6:d4:90:
                    e1:c3:1c:d8:45:95:ea:8c:02:45:eb:90:a3:63:4f:
                    7d:44:ed:00:45:90:af:3e:78:3b:81:30:b4:ae:b1:
                    67:74:55:2a:5f:1b:39:b7:ce:cd:d9:c2:d2:56:9c:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:21:1D:95:9B:66:EC:AB:9E:2E:D2:C5:0B:E1:32:62:A6:F8:08:A4
            X509v3 Authority Key Identifier:
                keyid:B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1b:1c:6d:6c:b5:6d:5f:fd:80:9f:ab:79:a0:9a:40:cd:56:
         2a:dc:8a:ef:cb:09:02:b6:fa:89:da:fb:29:45:26:3d:2a:4f:
         fd:bc:5d:e3:89:86:eb:80:f8:c5:3b:99:1f:ef:fb:1b:d7:64:
         35:c4:28:e7:0b:5f:f2:c0:7e:61:7f:53:60:5a:77:3c:34:80:
         bf:8c:5a:57:21:2b:ae:4b:b5:1a:d1:33:3e:d3:45:e2:0b:08:
         25:fd:53:57:ce:8a:dd:cd:e3:c6:30:a7:e3:ac:94:bb:30:6f:
         2d:9e:ed:23:25:dd:23:78:33:5c:7f:b9:78:96:16:74:12:c5:
         d5:ae:30:34:e5:97:41:39:f9:ce:0c:32:5a:14:b2:48:7c:6e:
         77:90:06:2b:73:83:87:cc:9c:d0:7b:c5:db:16:5b:da:1f:54:
         d3:fc:98:ea:7f:23:59:05:7c:57:36:b6:da:a5:39:a1:e2:4a:
         41:00:03:7f:fc:91:fe:d5:c7:98:4d:e9:14:62:ce:84:1a:a9:
         63:3d:d4:cc:75:2b:0d:72:72:f4:41:5d:1a:0b:04:6c:92:d9:
         93:5d:cd:a5:b7:d4:0c:82:72:e6:aa:6d:77:f5:48:b8:94:70:
         2f:b1:1c:0f:52:dc:65:19:98:af:79:a5:8a:5a:05:69:fd:55:
         7f:3f:03:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:55:36 2026 by rpki-client