Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File:                     cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier:          koV324HLMHxn8kW/j4+UU26kE5Kjw8hbLxdAAhtvONI=
Subject key identifier:   08:A6:9C:B6:69:CF:25:A3:F3:56:AB:F0:BC:8E:D9:C0:30:12:74:ED
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0B80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number:          0B64
Signing time:             Sat 14 Nov 2026 19:06:59 +0000
Manifest this update:     Sat 14 Nov 2026 19:06:58 +0000
Manifest next update:     Sat 21 Nov 2026 19:06:58 +0000
Files and hashes:         1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: 4sN3rWe4hFU5QKpliGVKQepx/u7J26p+N+k5J3olJ44=)
                          2: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1r78Cw9IeJC6CpYd3j+dPo0qxllZkMG1MVsCtdbq0zU=)
                          3: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: sINMj23Mnz79lCdA9OJZlqI7V5V8Fa2R7qiAutiBw64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2944 (0xb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Nov 14 19:06:58 2026 GMT
            Not After : Nov 21 19:06:58 2026 GMT
        Subject: CN=6af8b153-fe31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:01:ac:c1:a4:c7:09:f6:59:db:c0:28:65:
                    e0:77:0d:50:0f:d8:fb:29:40:a7:61:08:53:a6:39:
                    26:07:7d:17:2c:92:7b:16:20:45:ea:a3:1d:45:08:
                    ee:eb:dd:59:0e:e8:c3:71:cf:1d:d7:49:42:bf:9b:
                    1e:00:85:2b:5c:4a:b0:e3:68:22:84:90:a5:5a:de:
                    14:78:aa:a8:ca:56:10:b0:7f:bb:9a:e8:ac:b5:d0:
                    87:93:5e:b3:fb:b5:52:91:d7:b0:c0:94:4b:a3:f8:
                    73:07:41:6b:2c:da:c6:49:9c:fd:f8:dd:bf:a6:ac:
                    22:69:d6:66:36:22:96:49:a2:47:52:f8:4f:65:50:
                    9b:a4:7c:75:05:df:02:67:19:6d:c6:ed:af:a7:8c:
                    22:b0:83:fb:19:0a:6c:c5:94:d0:0b:1d:0a:20:ae:
                    9b:c9:23:34:2a:b9:ed:2b:30:4e:2e:99:77:2a:48:
                    c5:d1:75:e2:34:c1:aa:b6:88:5f:7c:01:28:02:4d:
                    fc:7d:42:2a:a4:5b:da:dc:84:ec:d0:9f:0f:40:16:
                    f9:6d:d4:18:13:98:31:6f:52:e4:78:d4:e1:ef:3c:
                    98:dd:ec:ed:46:48:22:c1:9b:94:84:77:3c:e1:62:
                    b7:a7:39:8e:94:da:50:f2:47:55:db:2e:94:be:a5:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A6:9C:B6:69:CF:25:A3:F3:56:AB:F0:BC:8E:D9:C0:30:12:74:ED
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:97:40:27:21:91:07:6c:bc:7a:8b:5f:f9:ad:f4:33:cc:75:
         fe:ac:1f:0c:38:89:91:87:5c:7b:ac:0d:f3:ca:b3:77:f9:e6:
         43:90:53:60:fd:3c:ab:a2:7b:c7:8c:aa:7d:43:f5:2e:97:ad:
         0c:56:7a:ab:a1:0c:06:5b:e6:db:07:19:d8:ea:aa:31:a3:26:
         70:f7:a2:70:a4:f7:b2:0d:c0:75:99:b2:79:b1:2a:a8:73:10:
         51:95:6e:ea:6e:b0:b3:d7:bd:af:3d:20:6c:6e:3d:4e:55:42:
         f8:96:ef:03:1d:d9:16:f7:48:db:05:2a:85:5d:ce:3d:cd:2f:
         58:e1:66:34:9d:3c:17:09:6e:e4:1e:57:a7:11:a0:2e:a3:b7:
         a3:5d:fc:2b:57:8f:29:fd:e2:ab:89:a6:db:ce:75:83:d1:d2:
         e7:f2:e3:0f:6d:b0:23:0d:d0:0a:c1:ff:69:7f:7c:bf:51:c5:
         a7:57:a3:94:53:a2:a1:3b:75:01:aa:74:e6:68:b3:f7:00:b4:
         fb:e2:dd:e7:7d:cb:2f:96:61:ef:5b:61:3a:34:3d:2a:d5:f7:
         d0:c2:b9:59:48:91:66:cf:fe:81:6c:8d:2f:44:fb:82:c4:16:
         05:10:2a:38:2d:c9:7f:1e:04:1b:bb:6d:20:b8:11:f3:75:3b:
         7c:02:24:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:57:07 2026 by rpki-client