Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File:                     tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier:          xHZ3HdgUe0YFvWEibbOFDQ4EmAi/Mlu+ob6/jjSy0eE=
Subject key identifier:   59:39:A0:33:A4:22:98:F2:4C:F3:C2:A2:58:03:34:B6:41:31:38:EC
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0C2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number:          0C23
Signing time:             Sat 14 Nov 2026 18:45:18 +0000
Manifest this update:     Sat 14 Nov 2026 18:45:18 +0000
Manifest next update:     Sat 21 Nov 2026 18:45:18 +0000
Files and hashes:         1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: Vx0j/GZO2X8/fQHYZm/o+L0+SwdRxoPMF2gtqWfWR3Y=)
                          2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: nDxmW75XsnkkvR0/lsX99gyZXa0q7ERrzbEjSla7UOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 18:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3118 (0xc2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Nov 14 18:45:18 2026 GMT
            Not After : Nov 21 18:45:18 2026 GMT
        Subject: CN=6af8ac3e-8f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:e4:de:1e:9a:be:5b:88:87:90:ce:d4:99:
                    26:99:af:4a:8b:65:dd:45:d1:bf:75:de:6d:b8:d2:
                    94:0b:d6:a4:13:59:54:f7:13:43:76:b5:24:93:86:
                    90:bc:bc:99:ee:cb:4c:6a:e4:7a:38:f5:32:ba:0a:
                    7b:ad:a6:f5:c3:56:0a:56:d9:11:13:e4:91:c4:e8:
                    db:c7:85:3c:32:88:4f:00:b6:50:c8:c0:b9:07:08:
                    7f:65:09:b8:30:4f:d9:a7:82:1b:2d:6b:f8:ee:b9:
                    c7:13:25:cb:37:44:71:8a:17:0c:2d:c6:06:31:16:
                    03:46:2d:6a:f4:08:75:e6:60:20:4e:56:61:90:69:
                    f9:3f:da:58:c2:77:c4:a3:e4:54:b7:2e:e4:11:d4:
                    f5:7a:f1:28:66:f3:44:d9:ee:24:ac:77:d5:76:48:
                    c0:ea:99:6f:cc:8a:ae:06:0d:95:62:e4:2d:25:85:
                    4e:5b:aa:df:97:d3:37:52:73:38:f1:b6:5e:47:07:
                    6c:09:3b:3b:18:c9:fc:bc:83:50:b7:e7:ea:e5:7e:
                    01:0b:24:2f:71:5e:ea:29:35:28:eb:37:16:d5:75:
                    18:94:ca:6f:89:3f:ca:f0:52:9b:ed:4e:2f:09:ff:
                    e5:51:a8:75:00:57:71:7d:ad:6d:ce:39:71:d9:91:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:39:A0:33:A4:22:98:F2:4C:F3:C2:A2:58:03:34:B6:41:31:38:EC
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:40:3d:c7:a1:a3:4e:e5:04:23:e4:e0:f2:0a:53:c6:a9:2c:
         99:43:5a:bb:a3:47:9c:5c:ee:1c:63:8b:f8:11:22:5f:25:99:
         94:5b:5b:7d:a5:da:ba:9b:6e:06:54:35:df:ca:8a:c3:d8:52:
         22:1d:8f:2e:6c:7c:96:ce:fd:73:c1:87:46:61:d0:c8:ee:e4:
         03:c5:a8:43:c3:88:fb:5d:fa:91:d6:eb:f6:f2:bf:ff:9d:57:
         9c:49:7c:a0:35:8c:a9:56:99:f1:94:00:0a:e0:8b:ed:2a:29:
         ec:70:75:18:54:ac:77:df:f5:67:b8:78:f0:b6:47:af:04:0e:
         8d:9a:c7:72:83:a3:a9:65:a0:04:a0:0a:15:0d:7b:26:81:d2:
         e0:01:3e:23:8e:77:9d:a5:6d:35:6f:21:b5:4b:41:5d:75:96:
         15:46:c1:bf:5d:cc:cc:30:b6:bb:4b:c3:b9:42:88:22:07:a7:
         6a:a1:e2:e8:cd:29:b9:42:ba:8f:e5:fd:8f:ea:fe:b0:8b:98:
         e3:7a:79:0a:29:64:f3:74:75:19:ad:0c:5a:22:40:14:54:26:
         a8:ec:ce:31:f3:9c:ac:11:87:bd:18:e7:5c:26:bc:f3:81:3a:
         8c:56:ea:be:2d:9d:3e:81:f2:8e:8d:7e:51:34:e6:88:c5:07:
         de:ec:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:31:48 2026 by rpki-client