Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier:          5ICzlDw3MUPw/wZUaubPhVX+de2STXnb3fD8CwGfOe8=
Subject key identifier:   DD:7B:5A:1E:8E:14:77:39:FE:99:1F:EE:97:DD:0C:29:56:62:A7:3D
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       02CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number:          02B6
Signing time:             Fri 13 Nov 2026 01:49:09 +0000
Manifest this update:     Fri 13 Nov 2026 01:49:08 +0000
Manifest next update:     Fri 20 Nov 2026 01:49:08 +0000
Files and hashes:         1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: aCUYvX5Tb/JfRfAs4PY3FYzy/c6i6mO3Cyjwo44/wMs=)
                          2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: EM/KOkF5SIj09EIDJvtomVdUlaIY1tXE0xhdTGi6p4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 01:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Nov 13 01:49:08 2026 GMT
            Not After : Nov 20 01:49:08 2026 GMT
        Subject: CN=6af66c94-e033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:d1:78:68:d9:91:97:4f:76:65:55:8e:8a:
                    bf:43:97:41:5c:7d:0e:b3:71:85:7e:66:fc:52:ff:
                    ad:bc:40:c7:cf:fb:7a:df:12:45:9f:f3:ed:f6:c2:
                    10:5b:48:cc:b9:3f:95:14:e2:eb:62:66:61:72:e5:
                    26:a9:7b:f9:c3:fa:cb:70:b9:eb:b8:2f:65:03:2d:
                    2e:c4:82:29:a4:24:77:f0:91:ea:07:8d:60:a8:d2:
                    72:91:3b:7e:4e:a6:83:4e:3c:8f:15:47:c6:8d:6e:
                    bc:8b:a1:24:c3:c0:51:f9:91:35:97:24:15:16:f2:
                    6f:d0:e3:5b:b0:10:f0:53:54:55:22:91:fa:f0:da:
                    6a:8c:6a:ea:dc:e6:b4:5b:c9:aa:e4:91:c6:98:9a:
                    96:36:e1:84:e8:03:83:a7:a8:e1:3c:92:8b:ce:f6:
                    18:0c:0c:77:22:5b:2a:8d:63:81:fe:f3:f5:32:6c:
                    bc:f6:1e:85:4a:bf:a4:3a:bd:75:32:5d:6a:af:e2:
                    c8:3d:f2:eb:9c:79:b1:9f:b6:d0:93:03:71:e7:f6:
                    74:20:f6:ff:4e:e2:fd:08:c3:07:e3:a2:e3:8b:ca:
                    2f:09:77:46:c8:74:f6:a6:c9:18:fc:6f:84:ab:62:
                    6a:42:57:0c:71:0d:91:7e:26:18:d3:84:fb:9a:c5:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7B:5A:1E:8E:14:77:39:FE:99:1F:EE:97:DD:0C:29:56:62:A7:3D
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a6:74:b5:57:3d:95:c2:60:7e:e6:29:83:c6:fb:5b:d8:08:
         f5:d8:88:3c:b8:ec:fa:8d:4a:6c:06:35:fd:d2:a0:46:da:23:
         f5:51:6d:f5:45:7a:d2:78:41:d4:5d:84:ff:f0:f5:c3:e8:ba:
         eb:e1:7c:f2:4f:e8:26:c1:b4:20:49:86:e8:6e:e2:dc:00:cb:
         7d:2b:de:a0:23:5e:87:5f:6c:51:31:d4:b4:2b:38:bd:53:44:
         29:6b:f0:38:db:c4:85:e7:71:e9:cd:0f:5d:ce:d8:4d:0b:b8:
         47:30:30:25:9d:06:5c:35:cd:31:3c:0a:39:a3:f8:5a:ea:0f:
         6f:01:18:c7:9f:de:a7:4f:69:11:83:82:79:16:90:2b:95:05:
         4e:7a:5f:30:e3:89:22:35:54:a5:f7:fc:60:85:a3:2e:81:3b:
         c2:e7:9a:bc:4a:e0:77:43:c9:06:d0:04:fc:47:67:f2:61:43:
         e0:d2:0e:da:4f:89:e1:c0:ca:af:b5:d1:ba:e8:52:ab:e4:72:
         e9:da:82:9b:51:4c:4a:ef:eb:0a:8a:62:4d:2d:fa:05:0c:dd:
         e6:06:84:76:d8:71:60:fd:cf:99:9e:06:95:67:00:26:80:c5:
         82:3b:df:9c:20:3f:28:13:dc:44:41:e9:ad:49:05:2e:8d:66:
         ee:ff:41:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw
RDU5MjNCNjEwHhcNMjYxMTEzMDE0OTA4WhcNMjYxMTIwMDE0OTA4WjAYMRYwFAYD
VQQDEw02YWY2NmM5NC1lMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiqzReGjZkZdPdmVVjoq/Q5dBXH0Os3GFfmb8Uv+tvEDHz/t63xJFn/Pt9sIQ
W0jMuT+VFOLrYmZhcuUmqXv5w/rLcLnruC9lAy0uxIIppCR38JHqB41gqNJykTt+
TqaDTjyPFUfGjW68i6Ekw8BR+ZE1lyQVFvJv0ONbsBDwU1RVIpH68NpqjGrq3Oa0
W8mq5JHGmJqWNuGE6AODp6jhPJKLzvYYDAx3IlsqjWOB/vP1Mmy89h6FSr+kOr11
Ml1qr+LIPfLrnHmxn7bQkwNx5/Z0IPb/TuL9CMMH46Lji8ovCXdGyHT2pskY/G+E
q2JqQlcMcQ2RfiYY04T7msUXYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN17Wh6O
FHc5/pkf7pfdDClWYqc9MB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF
MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF
X0lQSWlDb0NWNTBOV1NPMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhKZ0tVc9lcJgfuYpg8b7W9gI9diIPLjs+o1KbAY1/dKgRtoj9VFt9UV60nhB
1F2E//D1w+i66+F88k/oJsG0IEmG6G7i3ADLfSveoCNeh19sUTHUtCs4vVNEKWvw
ONvEhedx6c0PXc7YTQu4RzAwJZ0GXDXNMTwKOaP4WuoPbwEYx5/ep09pEYOCeRaQ
K5UFTnpfMOOJIjVUpff8YIWjLoE7wueavErgd0PJBtAE/Edn8mFD4NIO2k+J4cDK
r7XRuuhSq+Ry6dqCm1FMSu/rCopiTS36BQzd5gaEdthxYP3PmZ4GlWcAJoDFgjvf
nCA/KBPcREHprUkFLo1m7v9B+A==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:34:07 2026 by rpki-client