Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File:                     MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier:          HL4kDoWV8PoF8mQzgfYYv7UBCgDPAN6j1ry7dCtEQZw=
Subject key identifier:   91:56:8A:B4:1B:BA:CC:4D:B5:45:A2:7F:98:5C:1B:CD:53:5A:98:EF
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer:       /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial:       08E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number:          08D6
Signing time:             Sat 14 Nov 2026 20:27:58 +0000
Manifest this update:     Sat 14 Nov 2026 20:27:58 +0000
Manifest next update:     Sat 21 Nov 2026 20:27:58 +0000
Files and hashes:         1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: Aql6bAxlmJ5zqXH+tG0hFBK/9m4+tpQgicfz/iGzbl8=)
                          2: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: WbN70PvdDWv4jvLtRJ5S9uLwxSwxMKfQ8G7JrhEau+o=)
                          3: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: 7lILAk4gsWPIDZdA1SJEcAGVilUIsUdUMv+Kcbhfelo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 20:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278 (0x8e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
        Validity
            Not Before: Nov 14 20:27:58 2026 GMT
            Not After : Nov 21 20:27:58 2026 GMT
        Subject: CN=6af8c44e-59c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:7a:a9:fb:a9:c8:43:ee:40:e4:9b:ea:fe:
                    10:18:02:f2:d7:f7:29:bb:c0:d2:df:f2:7f:94:23:
                    14:8a:23:32:ff:4b:80:50:36:56:ec:45:51:27:f6:
                    d9:aa:e3:62:fb:71:c4:d8:d3:13:01:86:fb:31:50:
                    d2:64:53:7b:1d:dd:c2:94:a0:43:10:42:57:17:b6:
                    7a:32:a9:bc:60:d6:41:8e:04:4c:b4:f2:fa:43:79:
                    74:d0:6d:9f:89:91:be:b7:fc:12:c9:06:be:34:c0:
                    e6:f1:2e:b3:8a:a5:9c:3a:ce:ba:05:56:db:1e:ee:
                    e7:3d:4f:83:9e:7c:72:77:5a:a1:4a:e5:c8:2f:39:
                    eb:92:24:c9:04:85:18:47:39:d2:38:1f:25:fe:19:
                    73:41:50:2a:b3:10:64:7a:e0:88:86:25:f2:f8:b2:
                    fc:04:b7:5f:fc:c0:4d:31:0e:cd:66:24:73:fb:77:
                    97:fd:44:1a:dd:b4:e0:56:4e:f8:a1:a4:16:ab:7e:
                    48:01:29:6b:5f:0e:d4:85:f4:35:d0:c8:80:9f:14:
                    2d:e4:5f:c5:49:01:0e:2f:45:bd:74:fc:2f:2a:4c:
                    2a:64:9e:03:2c:d2:cf:5e:7d:af:f2:f7:56:29:93:
                    26:bb:a4:4b:cc:9b:6f:fa:6e:bf:50:ca:d6:26:db:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:56:8A:B4:1B:BA:CC:4D:B5:45:A2:7F:98:5C:1B:CD:53:5A:98:EF
            X509v3 Authority Key Identifier:
                keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:4d:0c:c7:ed:a6:07:28:9e:07:16:7b:6a:4c:d8:33:a4:
         64:0e:12:bc:1f:91:8d:c1:bd:85:fd:f7:84:cd:51:61:0f:81:
         99:56:fe:d2:77:e4:c4:c5:5b:84:83:23:95:66:54:3e:a4:60:
         19:40:90:4d:c4:eb:ef:19:6a:b0:27:23:ba:06:51:23:f3:01:
         42:b1:4e:69:3d:53:b8:ad:c4:38:5b:83:9b:9e:d2:5d:07:ec:
         9c:ea:49:10:4f:f4:e8:f0:cb:79:9c:ca:dc:ef:e4:b3:b9:2f:
         92:f3:96:e3:76:b4:52:a3:8b:aa:ff:a6:3f:6d:7b:c3:2d:31:
         d8:1c:61:c5:91:b6:e5:74:47:74:c9:6a:3f:9b:a6:07:ac:c8:
         3b:df:19:5e:6a:6e:7a:3a:cd:e6:08:e2:b1:93:b9:42:aa:a0:
         e3:b4:fd:15:f3:ac:12:0b:99:8d:cf:32:6b:ff:e7:15:ab:75:
         a7:0b:64:71:f6:f2:e0:de:b1:f3:a4:f0:5b:32:1a:39:5e:83:
         a4:26:28:4c:9b:9d:5b:90:eb:aa:b7:65:da:ec:f0:e9:ac:1f:
         ba:af:b9:09:15:7a:42:6b:3d:c6:59:b1:13:63:45:b9:e8:44:
         0c:30:dd:38:05:f2:82:6b:61:5d:1a:4f:66:10:c5:be:43:55:
         ec:bb:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:52 2026 by rpki-client