Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File:                     fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier:          30sBXoSULHo49pmkOoW0HMjX5iRWRiptIMto3aHovDI=
Subject key identifier:   55:35:D7:CA:83:CD:6C:F9:F7:53:34:78:FC:4F:87:06:87:DC:AF:B8
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0B09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number:          0ACC
Signing time:             Sat 14 Nov 2026 19:21:15 +0000
Manifest this update:     Sat 14 Nov 2026 19:21:15 +0000
Manifest next update:     Sat 21 Nov 2026 19:21:15 +0000
Files and hashes:         1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: QmHTBWgT+5a5bGOhdoPp2V4/C6ewZRQpzL5ginb7FeI=)
                          2: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: YKB5eXYXJ+b4d9GmkKE4qqb7+srssCNwDwAdrBix020=)
                          3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: DezM2t0ex2ivS9gcJ+2Q8DrPxU26a0peSNDJOM8KwQ4=)
                          4: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: pkAfBicS1xoE+XvgOEnkzo1bk8OIaDY2M85wJQOULGw=)
                          5: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: men7X/DqEw3JTb53TCBtI6CiH6LH5rwCaun8ONR3b98=)
                          6: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: fwxKJmrDtHzrccVSlKE8KANRlhroTy3TIj65FcZuDLY=)
                          7: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: bQOcse5lzSlY8bMOZjQBpyhKLx9EaPheTtDg2oHqHp8=)
                          8: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: /ZZ7Pe5945UIWeSF8m8GaepiTXqFI4hqaPmrO33/zQQ=)
                          9: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: /hZI+ULL53DSV8wAWDri/JwEvOKCY0Zm6CdyU6LE3cQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2825 (0xb09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Nov 14 19:21:15 2026 GMT
            Not After : Nov 21 19:21:15 2026 GMT
        Subject: CN=6af8b4ab-19a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:a9:b7:94:93:76:05:f5:94:29:25:b8:d4:
                    71:bb:be:93:0b:6e:cf:7f:fa:c0:00:1f:56:9a:6b:
                    51:30:1b:0c:be:58:1b:32:fb:76:88:d9:b1:59:fc:
                    9e:a7:d8:56:62:6c:8a:a1:1c:94:f1:54:ab:38:a0:
                    34:b7:1f:9d:5c:6c:b2:1f:f4:3e:23:38:90:44:e6:
                    7e:cd:3b:bb:60:bf:f3:34:46:3b:e1:5f:68:72:0a:
                    64:26:3d:79:cb:88:d9:63:64:46:57:af:f1:80:2b:
                    75:df:58:e1:03:f7:92:4a:8d:fe:42:d1:4f:e0:9a:
                    4d:07:2e:c2:68:bc:a1:17:56:fc:14:4a:61:5c:c3:
                    76:44:d7:0b:10:bc:c6:0e:a1:a0:b2:58:73:49:55:
                    c0:e9:f0:9f:64:e9:b6:c7:44:26:8c:ec:05:5d:5d:
                    4d:f9:2a:da:e1:a6:78:63:26:6d:29:6d:af:8f:f5:
                    c9:8a:46:40:9e:bf:79:06:89:8f:4c:e3:15:e1:86:
                    1d:ac:ca:a9:2a:69:cc:a6:b1:84:88:04:4a:89:5e:
                    f1:80:2a:9e:52:9a:98:2c:5a:3e:a7:98:3f:df:cc:
                    81:f5:49:1c:f2:55:39:ba:8d:6b:07:c6:4e:83:e2:
                    ad:fc:91:fd:e1:93:7e:eb:b9:c9:dd:9a:ee:2a:c1:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:35:D7:CA:83:CD:6C:F9:F7:53:34:78:FC:4F:87:06:87:DC:AF:B8
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:c7:44:32:ef:24:e8:35:8e:36:5e:43:b3:3f:b1:28:ed:
         46:91:1e:fb:f3:3c:3a:9c:a0:c5:b9:bb:55:2f:87:76:a8:a3:
         ef:94:53:1d:2d:43:14:bb:5d:1e:3d:a9:06:0a:4d:1e:34:53:
         a0:b0:17:32:c0:a3:9d:15:8c:58:37:77:91:be:bb:dd:43:ad:
         48:06:ee:84:10:07:01:d4:9a:3e:cb:67:7f:53:e0:58:da:73:
         55:a8:65:42:bf:4a:4b:2f:2e:ee:f4:3e:b2:25:f3:89:91:74:
         45:da:45:24:57:0f:4c:fe:7f:19:a9:e9:19:5d:43:3e:ad:5a:
         87:c0:fa:92:19:49:65:1f:09:f2:63:be:46:b4:5f:92:7e:88:
         73:50:61:43:56:c9:f6:92:66:c1:d5:a4:f9:44:26:10:da:ba:
         d3:c5:1f:35:04:13:a1:1d:aa:a9:d2:9a:62:24:aa:ea:df:4b:
         36:ff:98:95:af:21:61:3b:21:51:f8:60:11:4f:29:71:b0:f8:
         61:29:e5:a8:71:b7:c9:e7:36:75:2d:d2:01:ed:f0:9e:23:10:
         1c:d9:27:e3:e7:46:30:4e:3c:12:0b:3e:54:1a:6d:31:53:09:
         6d:6b:47:e2:e1:73:01:5c:76:7f:31:fd:91:5a:98:24:06:ee:
         22:e0:d9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:22:31 2026 by rpki-client