Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft
File:                     63FQpM6SL6wpsyjukMw8MGZdHAE.mft (raw, json)
Hash identifier:          5aRFooQLQukUrLADhpsZMxmfHSWemmYis+4s17ueA6E=
Subject key identifier:   C4:73:54:F8:23:F2:9B:41:E7:21:13:0C:0D:CB:EC:99:A9:B2:8B:17
Authority key identifier: EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01
Certificate issuer:       /CN=A912D0F9/serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft
Manifest number:          13
Signing time:             Sun 15 Nov 2026 09:17:03 +0000
Manifest this update:     Sun 15 Nov 2026 09:17:02 +0000
Manifest next update:     Sun 22 Nov 2026 09:17:02 +0000
Files and hashes:         1: 63FQpM6SL6wpsyjukMw8MGZdHAE.crl (hash: xxndE49JhrSXgksgrP7CYTXXZTV0MqqO5IBBaJfx8mU=)
                          2: 4miTgO8EhsprLChEh-q4Mn5hsTw.asa (hash: D4pYH5SztOlsL4KdvA+H5FVkg/eAdESfsAaR3XMaJZA=)
                          3: 8289BA82CC1F11F1838D8EC4F965CEF9.roa (hash: boE2sycC2r5ODz/01BwJlA+5yIdWkBbWVObJEJ9TaCs=)
                          4: 81EB1850CC1F11F1838D8EC4F965CEF9.roa (hash: L3eXRTeUj9b+BaJNKpKL5J6FfevEpL6651oRdj+KYRk=)
                          5: 8159E83ACC1F11F1838D8EC4F965CEF9.roa (hash: 2hTubPtrgJJMd06KFdSit0jYklFumCbRHXosAnHQhx4=)
                          6: jxx7aKzpUOmQYzQbWP5X83uIwq4.asa (hash: HT7d+7yrXjraD3uVVyswB6+b6Z6vPvCREmhJsozVwuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.crl
                          rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 09:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0F9, serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01
        Validity
            Not Before: Nov 15 09:17:02 2026 GMT
            Not After : Nov 22 09:17:02 2026 GMT
        Subject: CN=6af9788f-16bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:b7:cd:49:83:81:80:f6:69:50:9d:25:79:
                    fb:fb:8a:6d:1a:6f:fa:99:57:c5:8c:64:d3:d0:e2:
                    c8:bd:c8:b4:89:b4:4e:a0:ed:46:ba:9b:02:c5:98:
                    c3:03:06:78:21:c1:44:c0:5b:c8:f9:53:cf:37:e2:
                    28:41:74:07:d7:29:9b:5b:df:33:d5:8a:da:1f:e1:
                    f0:15:a2:38:99:8f:e3:1f:1c:c8:0e:33:67:3d:1a:
                    29:0c:b0:4e:03:f1:c1:e1:bf:1d:0d:e1:b8:5f:df:
                    c1:f0:fd:a7:16:eb:d4:6d:09:71:8d:4e:4d:9b:ab:
                    80:e0:22:dd:ac:2d:c0:c6:1b:8f:6b:ae:31:76:48:
                    a3:db:87:61:2a:e6:6c:90:ad:1d:d1:a8:c0:50:a1:
                    3d:1e:5c:05:8b:c1:94:60:a2:01:92:61:6a:e0:2f:
                    51:3e:be:7f:98:a8:c2:88:88:72:9c:c4:2c:7b:09:
                    f4:e9:4d:33:d4:6b:b6:44:67:73:57:8c:d3:44:0c:
                    f5:97:ad:9a:d8:9e:87:ba:29:46:2e:e3:4c:9a:87:
                    9e:66:bd:2c:21:52:ce:30:3f:b8:f6:ac:dd:15:28:
                    cc:ff:c6:78:7d:10:18:bf:30:f8:c0:4b:f6:a7:43:
                    5a:9e:1f:75:ae:8a:34:b0:69:be:d5:a2:74:69:17:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:73:54:F8:23:F2:9B:41:E7:21:13:0C:0D:CB:EC:99:A9:B2:8B:17
            X509v3 Authority Key Identifier:
                keyid:EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:58:09:81:03:98:e5:75:32:54:d4:21:b5:76:62:85:52:66:
         56:0d:de:25:eb:89:56:4e:5c:9f:e9:af:b0:b8:0d:c8:b5:0e:
         dc:77:e1:c1:6c:60:13:24:7d:9f:3e:d3:7a:7c:22:ca:fe:54:
         78:61:7c:68:a2:e8:28:6f:2e:cc:46:d6:97:b9:15:af:36:07:
         32:36:cc:5c:3d:fe:84:5d:a4:7d:10:f5:8e:79:0b:ab:28:a9:
         24:01:04:79:a6:4b:fd:31:7c:b2:26:13:73:fa:8c:bd:0e:b9:
         da:ca:e7:fd:d4:60:f1:4a:eb:0a:d1:12:2a:80:b4:03:85:fe:
         db:c2:41:23:ce:5b:96:73:c4:98:3a:bc:22:bb:0e:0c:f9:b2:
         c4:68:1d:11:b6:8c:c4:74:a2:0a:32:51:22:c3:b3:af:91:9a:
         f2:bf:72:d7:40:9e:9d:56:96:f8:ac:af:f6:63:4b:41:3e:aa:
         5e:5c:f6:13:76:21:30:bd:81:63:51:8c:a2:18:ca:81:6c:30:
         56:38:08:db:45:a8:50:64:2b:bf:01:1c:f0:c2:fd:2c:67:8a:
         db:f0:4c:94:27:24:24:56:9e:d1:bc:1c:ec:bc:8b:09:2c:42:
         9c:43:74:65:ca:0d:52:ce:0e:68:fd:cb:84:bf:3d:7f:69:c5:
         93:1d:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:22:55 2026 by rpki-client