Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
File:                     _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json)
Hash identifier:          WwN1HCm6qDsZo+AuEJdbU0Srfvu6BwjTVy0am82w6H4=
Subject key identifier:   1B:2F:01:2B:C8:34:88:55:83:8B:07:B2:42:9D:83:B8:6C:98:E4:03
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Certificate issuer:       /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial:       0576
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
Manifest number:          0560
Signing time:             Sat 14 Nov 2026 23:16:14 +0000
Manifest this update:     Sat 14 Nov 2026 23:16:14 +0000
Manifest next update:     Sat 21 Nov 2026 23:16:14 +0000
Files and hashes:         1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: QHQMp4q9L2+/tGN42qI14GKCE1l8EjqS3CQRVD46PAo=)
                          2: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: fhiAdGa4IPwNMr1C8st0hwPcHptchYq4f6e4udnEpd8=)
                          3: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: 61Giy9BtVW5vUYKxIQpVLEtE+uQr+3ZeqDe9C2sRopM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
                          rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
        Validity
            Not Before: Nov 14 23:16:14 2026 GMT
            Not After : Nov 21 23:16:14 2026 GMT
        Subject: CN=6af8ebbe-e68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:1e:cf:93:46:b5:1b:e5:e3:ba:4a:cd:61:
                    f8:68:ec:e1:6c:c4:41:b6:0e:bf:63:63:51:c6:d4:
                    fa:33:67:66:40:3c:0d:91:2a:f6:0a:da:c2:67:55:
                    a8:34:b9:5e:a7:99:1a:6d:6b:26:b1:fd:a0:80:78:
                    4e:7c:bf:4a:cb:16:5d:f2:27:91:6c:6c:be:52:fe:
                    31:03:d5:95:bb:4e:b8:c0:3a:60:44:67:d8:86:3d:
                    18:26:b8:76:02:b4:34:91:bb:26:3a:1c:1e:a0:dd:
                    99:77:d0:0e:8a:32:d0:40:15:6e:bf:75:12:14:30:
                    a5:26:f8:da:24:67:e9:14:de:2b:4f:44:3e:97:b9:
                    49:3e:cf:43:c1:a2:3e:bf:14:41:ef:a5:ec:55:e0:
                    33:80:c8:cb:d6:b4:77:a4:85:02:2e:f4:34:c7:20:
                    96:7f:46:4f:3f:b7:fb:4a:f9:c9:7f:51:a5:9d:91:
                    e6:a9:2f:a1:d3:a7:9c:42:b0:2b:25:10:65:9a:d4:
                    24:98:0f:46:ec:fc:1b:a2:f4:60:60:3b:ed:cc:b2:
                    56:a3:b0:d6:a1:8e:d2:20:57:6e:1f:fe:0a:56:a6:
                    34:82:f5:43:a3:28:cb:54:2b:a9:d9:9a:36:c1:de:
                    71:8e:a5:b9:c3:d9:4d:37:11:b7:6d:75:d9:fe:f1:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2F:01:2B:C8:34:88:55:83:8B:07:B2:42:9D:83:B8:6C:98:E4:03
            X509v3 Authority Key Identifier:
                keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0e:96:54:39:c3:a0:87:74:07:ea:32:7a:89:96:60:a5:67:
         92:47:4f:07:7a:73:2c:db:1a:3d:b9:c3:ae:22:b3:99:e9:db:
         f1:74:d0:69:8c:16:18:9f:74:0e:4a:2f:04:88:5a:13:5e:c2:
         0f:7b:4a:a7:63:9b:5e:40:18:92:ac:b3:68:02:10:9b:4b:1c:
         3b:ce:2a:c2:f0:ce:2a:b7:e9:d3:f2:08:d8:57:15:d3:a7:0f:
         ec:7f:eb:81:fa:03:de:4f:90:15:5c:41:17:f1:36:32:b5:ab:
         02:f8:0c:2f:b9:25:83:24:cc:d4:4f:20:b3:56:7a:17:a0:f0:
         e2:91:f7:47:58:0e:8f:af:51:ba:e8:6e:d4:ad:7c:17:9a:47:
         cf:f7:84:3f:61:7e:73:f3:4a:86:8f:8f:61:2a:d2:2f:d3:cf:
         44:3c:05:da:9f:40:a6:65:2e:3e:6a:47:e1:08:45:20:0e:ab:
         2e:f0:8d:0b:da:fe:c0:eb:6d:77:df:fa:63:a0:38:f4:4a:46:
         11:a0:70:55:3b:ab:fc:bb:74:f7:41:f5:f3:38:66:fd:e0:ee:
         56:87:f3:bf:9c:13:88:73:10:44:44:88:c5:7d:ec:56:d7:d7:
         e7:85:47:74:cc:34:53:d5:81:71:b3:64:b1:c6:fa:3e:0e:a6:
         3b:10:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:25:13 2026 by rpki-client