Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File:                     aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier:          G0d6UpwvSBU1MQL+u/LNveAegu7mXV5LPC/ozEtZe6Y=
Subject key identifier:   08:56:15:2C:82:BA:D7:39:5F:A7:2F:47:18:2B:7B:F8:0D:C5:24:5B
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer:       /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number:          02E1
Signing time:             Fri 13 Nov 2026 01:12:29 +0000
Manifest this update:     Fri 13 Nov 2026 01:12:28 +0000
Manifest next update:     Fri 20 Nov 2026 01:12:28 +0000
Files and hashes:         1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: R3EKWKW3SNUvOgHH/LkhTAFqltIPvDQ8OyzCIamif4o=)
                          2: 0A03942001B311F1BDE34C726D6F56BC.roa (hash: 4okKosxS6IEGC1+htR6SIJMkssQ9kfQRZTp5TOGcyNo=)
                          3: 95873DC401B511F1AABC9C3D6E6F56BC.roa (hash: JMpkHDzDVK/usfbHjSL6Kqnw95uZaR659+4yGn0oEJc=)
                          4: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: ALR7tiUN9OO7R8fFOreHtqwUwWbttRypaQgzgT65w2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
                          rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 01:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
        Validity
            Not Before: Nov 13 01:12:28 2026 GMT
            Not After : Nov 20 01:12:28 2026 GMT
        Subject: CN=6af663fd-fc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:52:28:ac:7e:26:38:3d:4b:24:93:59:37:
                    d9:a2:b2:62:ce:91:14:98:6a:72:42:df:54:29:bf:
                    20:df:38:fc:7a:7b:a1:75:3b:65:ed:c9:22:39:26:
                    db:0f:3b:21:a8:aa:d1:ff:e4:d4:a8:a5:36:de:73:
                    9c:ee:85:14:8b:d6:31:52:fd:76:12:b7:4a:8c:af:
                    2c:44:10:83:1b:86:87:21:6d:43:9e:20:49:d0:06:
                    3a:db:2c:c3:e6:f9:25:ba:7b:77:89:f9:29:02:82:
                    0f:32:a5:48:22:39:78:07:1e:4a:c6:80:88:c0:15:
                    81:d1:2f:fa:56:ac:3d:c9:33:18:ae:78:2f:30:f8:
                    60:b5:3b:dc:cb:36:cf:0a:b2:c2:33:91:f0:5f:8f:
                    58:88:38:99:de:50:4e:75:1e:b6:f8:ea:7f:ee:2d:
                    d8:fe:2d:e5:4c:01:2b:8b:70:95:b4:90:cd:33:03:
                    18:5d:17:02:c5:e6:dd:76:d9:01:29:04:c7:16:70:
                    34:61:52:e1:ed:18:a8:b9:c4:97:aa:da:5d:94:94:
                    ce:b8:b2:87:61:95:70:fc:00:9a:1e:66:8c:47:e7:
                    f8:ed:2a:25:0a:d2:04:72:14:1d:6e:90:5d:9f:b9:
                    2e:b7:48:46:a5:bf:1a:3a:60:1a:9b:3f:99:1a:0b:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:56:15:2C:82:BA:D7:39:5F:A7:2F:47:18:2B:7B:F8:0D:C5:24:5B
            X509v3 Authority Key Identifier:
                keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d6:71:d6:b8:1a:b5:fa:5a:aa:f6:13:c1:8d:31:1e:44:1f:
         7f:6f:67:c2:d5:e4:f5:ad:75:ea:9e:ef:81:05:96:ac:43:ed:
         c2:1d:0f:7d:77:ac:c1:93:ae:a9:43:31:72:72:6e:7e:99:1d:
         3d:0f:d6:1c:c5:fd:79:ce:65:de:4b:54:1f:75:4f:45:52:f0:
         fa:c2:77:b5:5e:c4:7a:59:b3:14:ec:e1:01:9d:5f:d5:40:73:
         23:40:d7:90:35:a9:f0:47:9e:46:b4:35:e3:8f:c4:0e:ef:d9:
         f0:c7:bc:38:ce:af:ad:2f:fd:a7:f6:29:dc:7a:67:9e:c5:d0:
         ec:c6:e6:a4:00:e9:45:32:ed:9a:5d:7e:8b:3a:54:25:39:7d:
         a1:d7:6f:ba:76:15:85:ed:a9:fa:90:76:6c:e7:d8:98:e0:08:
         dc:5a:34:44:81:e0:b0:a6:bc:65:7d:ce:d3:06:b6:03:c5:11:
         58:42:cb:d8:68:c2:cf:b3:91:87:69:99:d8:68:a0:5d:30:1e:
         86:c6:0e:16:f5:a4:4a:4d:6f:d6:b3:88:df:24:ee:e9:ab:eb:
         ca:44:de:57:e5:5b:cf:1d:d0:89:9e:be:9d:30:a6:26:98:02:
         95:f6:e5:bb:1c:df:58:41:7c:f6:78:eb:d6:52:af:e4:55:91:
         4a:96:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:42:00 2026 by rpki-client