Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
File:                     p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json)
Hash identifier:          CXO3Vi0avw2r05rl/DYU15lPrCzy/I6kTok2Ee6LuKw=
Subject key identifier:   29:27:CC:F2:7D:A5:AB:DA:A5:0F:3B:F3:7C:94:CA:FF:14:50:CA:60
Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0
Certificate issuer:       /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0
Certificate serial:       082E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
Manifest number:          0823
Signing time:             Sat 14 Nov 2026 21:02:10 +0000
Manifest this update:     Sat 14 Nov 2026 21:02:09 +0000
Manifest next update:     Sat 21 Nov 2026 21:02:09 +0000
Files and hashes:         1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: MHKc867rX2OKT3G0L5uLYEtAgN08tK+207TblGk5eJ4=)
                          2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: 5mVaiMwplqRf3wo+cmT13v7nFPq+pyaaZ5AbsWK8FKM=)
                          3: bN94abeDZJ4DKd-OU2HKCrVIEjI.asa (hash: 3W62QE0qx2lwZJO4lb3cGSHIP42CeQTaHxBahwjHfew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl
                          rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 21:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0
        Validity
            Not Before: Nov 14 21:02:09 2026 GMT
            Not After : Nov 21 21:02:09 2026 GMT
        Subject: CN=6af8cc51-b95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:de:ea:c5:20:ee:be:bf:92:4c:67:bf:a5:
                    97:ba:9b:e3:ac:3e:26:dd:94:d0:6c:83:5f:10:94:
                    f5:9e:8a:89:16:d1:f4:07:9d:66:cf:8c:78:6e:ae:
                    14:37:7f:7c:60:bf:a7:c4:2d:e2:bc:a7:72:54:fe:
                    66:67:fb:77:5e:31:3e:56:59:84:96:62:26:0d:83:
                    2b:fa:6b:42:46:d1:0c:2d:11:6f:58:cb:ac:21:5f:
                    91:07:28:a2:7a:81:ea:77:66:63:83:a6:93:51:54:
                    f8:df:b1:49:b4:fc:86:24:76:c5:4e:8c:5c:7c:cc:
                    f7:3a:da:56:0e:cd:7c:29:64:09:38:76:8b:5f:4e:
                    fa:10:13:7c:ef:22:b3:ee:07:7a:1e:17:0b:5f:4f:
                    14:78:74:b8:1a:5c:b6:f3:24:5c:39:d0:be:d8:41:
                    1a:dc:aa:c4:79:f3:4a:06:0a:c7:e8:53:ce:27:de:
                    a7:6a:6e:1e:38:79:01:cc:76:21:a3:d0:b0:e6:d2:
                    95:15:d2:26:04:23:d2:32:68:79:e6:b6:0d:a5:67:
                    f3:01:6c:8d:d3:95:ce:0a:38:bf:3c:d5:9c:d0:d2:
                    a7:37:5e:a8:8c:eb:ce:56:9e:8a:a5:2b:10:36:56:
                    e3:9a:a3:47:b2:71:d9:e6:94:5a:51:04:f6:e1:63:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:27:CC:F2:7D:A5:AB:DA:A5:0F:3B:F3:7C:94:CA:FF:14:50:CA:60
            X509v3 Authority Key Identifier:
                keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:f0:a3:c4:a3:03:49:f7:27:38:cf:95:c9:34:2a:13:1c:
         4a:5b:e6:75:85:5b:bb:4f:2e:23:12:34:36:40:65:d3:53:62:
         30:4d:86:b6:09:c8:82:25:bd:27:4d:ee:7d:74:e9:04:90:10:
         45:17:26:43:89:6e:b5:45:73:08:fe:b1:e3:79:c8:36:7e:59:
         62:92:0b:33:15:41:ea:18:d0:8d:3b:be:58:56:c0:05:0a:ac:
         a7:b0:0e:32:57:8a:2d:fe:9f:88:19:68:4f:81:59:35:79:7f:
         e3:cb:0c:0f:83:2e:06:e5:cc:52:e6:8d:73:86:fb:89:6c:1a:
         d5:4a:a8:b5:71:89:f8:65:64:af:50:f9:db:2e:82:7c:ad:e8:
         26:29:49:e8:b9:36:6c:b7:c4:80:04:1d:1e:d9:bc:94:f0:e5:
         e1:2c:76:2b:25:93:bd:21:ea:86:d7:d2:43:ca:c7:c5:a7:37:
         63:da:be:5c:b8:a1:78:cc:fb:41:0b:05:92:2a:f8:e9:59:11:
         26:17:43:58:49:ef:c0:1f:a3:21:b9:31:b6:86:dd:44:60:34:
         94:0f:48:f2:f6:72:79:26:1c:91:ed:db:c0:9a:c5:29:62:10:
         a7:02:26:11:44:d1:1b:61:04:c0:1f:61:0c:fd:f2:d6:eb:df:
         99:22:31:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:43:05 2026 by rpki-client