Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File:                     rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier:          LgAq30HcC4kiBLZoNzJBwpf0TBOpUJvpYws8F0XLF5M=
Subject key identifier:   DA:5A:E9:DA:1F:01:21:34:84:1F:F7:DC:43:33:2E:28:FB:D5:2E:6F
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       028A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number:          0273
Signing time:             Sun 15 Nov 2026 02:16:47 +0000
Manifest this update:     Sun 15 Nov 2026 02:16:46 +0000
Manifest next update:     Sun 22 Nov 2026 02:16:46 +0000
Files and hashes:         1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: V004t5N9gBOJokiNIqSvUl3JP67DbKYh1kCkArmxAks=)
                          2: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: tr7WXU9f6CtqcovZLq0HIZHw7MPhtACp8RCBWvYQ4w8=)
                          3: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: bc09Q0qDl4JRKTKdrE27msOGAJTz68IMapWBCLEOpeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Nov 15 02:16:46 2026 GMT
            Not After : Nov 22 02:16:46 2026 GMT
        Subject: CN=6af9160f-51eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:ee:f3:40:35:85:a4:75:1a:5b:6e:8f:85:
                    de:3c:85:6d:b2:2a:d4:f2:a0:19:b8:cd:79:53:e6:
                    42:74:b9:90:39:d1:60:38:73:56:94:72:56:30:02:
                    f9:09:65:63:50:d3:65:24:e0:68:ab:bb:ba:74:73:
                    5d:9a:d9:4d:37:1e:3b:27:60:20:64:1b:40:39:f6:
                    f5:07:ad:4d:28:32:fb:cf:e3:22:02:d9:36:93:8e:
                    4b:7a:37:c8:bf:f5:41:ca:66:44:67:82:34:9c:96:
                    09:15:05:a4:d6:47:dd:6e:5c:35:67:78:7e:c2:61:
                    c5:7c:5e:67:c5:00:b3:a1:7b:46:83:df:61:2e:c2:
                    ce:04:ba:eb:79:8c:ec:99:83:68:3f:92:fe:40:ab:
                    32:d3:f1:ff:80:fe:16:b3:2c:a0:c5:82:b7:72:9b:
                    c8:4a:51:d2:30:68:65:e2:cd:27:ce:d1:4d:c9:fd:
                    aa:60:15:3b:80:a5:15:d5:2f:aa:3a:7f:53:94:6e:
                    cc:5e:f7:70:3d:cc:80:92:3d:4f:5c:2f:1f:c9:01:
                    15:62:9e:90:86:ea:e5:80:db:23:bf:dc:e8:40:9c:
                    25:79:31:47:f4:3a:50:95:c9:1b:4e:cb:e4:c3:c2:
                    13:02:17:72:3a:6e:0e:10:12:14:c0:cd:b2:3f:88:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5A:E9:DA:1F:01:21:34:84:1F:F7:DC:43:33:2E:28:FB:D5:2E:6F
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9f:ce:db:3d:fd:a5:a4:96:d4:63:74:41:99:d2:5f:22:d5:
         44:10:59:85:cf:89:d7:e2:ce:a9:5b:ce:da:56:d5:cd:31:cb:
         87:96:59:ed:ca:e4:1c:d8:24:ba:88:a6:ec:c5:e8:3b:1f:15:
         60:eb:a2:be:c5:be:6e:ac:98:b6:ac:58:60:53:d5:d9:c2:7c:
         f0:c3:6f:f9:77:0f:e5:03:c0:3e:29:06:1c:6c:56:11:3a:9f:
         5b:27:08:ec:30:8e:6b:18:a2:4c:d6:46:15:fc:89:26:1c:e3:
         60:ce:aa:84:16:3d:7c:b7:e2:6b:ee:7a:0a:3c:4e:05:f3:f1:
         8b:c5:35:64:1e:86:ad:a0:cf:ee:29:c4:b1:e9:ec:60:ce:5c:
         ac:cd:b1:8e:60:28:92:aa:e4:9a:36:05:98:db:15:bf:a5:c5:
         a9:b4:c7:19:af:03:e5:c5:9c:81:c1:83:b6:8e:bf:99:e4:94:
         9a:40:a0:c6:9c:01:e8:57:ae:69:55:b8:f7:4d:7e:1b:87:30:
         69:75:30:74:7e:89:4f:53:51:1f:f8:fd:eb:7d:9c:4e:f5:f2:
         d4:64:e6:4d:3b:14:c1:4f:61:98:60:28:81:9e:19:8d:85:46:
         88:3a:9a:e1:f9:2b:8a:7a:02:13:44:03:bd:31:40:de:3e:d9:
         52:db:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:05:50 2026 by rpki-client