Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File:                     M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier:          ubVPLkIom5ZKqMJeirD5U6YKdZlbzCcZd4l/0DwD7H8=
Subject key identifier:   1D:D8:12:ED:36:D5:34:A9:B0:B4:48:01:E7:AE:38:99:B9:BC:D7:95
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer:       /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial:       0464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number:          044E
Signing time:             Sat 14 Nov 2026 23:59:18 +0000
Manifest this update:     Sat 14 Nov 2026 23:59:18 +0000
Manifest next update:     Sat 21 Nov 2026 23:59:18 +0000
Files and hashes:         1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: tmtTVkqW2dzQPJLHM8ytmmO11z04SDmN6H43GRcQE0s=)
                          2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: k2Tm+VECAOkqgz18jDdhRYGz/UVnU5T68kA32PJlYJ8=)
                          3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: SiaKfWh20onDMNEmqxmOZpPd2+52s+o/XbL2Uti7Li8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
                          rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
        Validity
            Not Before: Nov 14 23:59:18 2026 GMT
            Not After : Nov 21 23:59:18 2026 GMT
        Subject: CN=6af8f5d6-ef56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:05:a8:79:66:bb:71:56:3a:7a:40:e0:7a:
                    24:17:0e:57:57:eb:c0:47:64:85:9d:07:42:07:6e:
                    af:42:e7:ee:cf:4f:a4:5c:0a:5b:91:40:87:2c:d5:
                    ee:aa:16:99:3f:37:b8:bc:33:87:03:42:5a:fb:14:
                    91:a5:89:a7:74:d6:e9:27:5e:f7:dd:9c:e2:de:7d:
                    f9:ac:b8:48:8c:df:e7:64:29:d1:71:fd:48:c0:ba:
                    4e:7f:79:c2:b3:0a:8d:ad:07:3f:73:c5:6d:cb:2a:
                    e5:1c:f8:f4:4b:95:e1:04:65:ff:b0:86:15:0d:2e:
                    a9:f0:06:2f:a7:66:a7:64:c0:57:a7:6c:b1:aa:75:
                    b5:bc:2d:ff:42:29:21:04:d5:52:5f:c4:ff:d0:39:
                    85:92:9d:ac:5a:d9:a7:39:de:e4:af:41:5e:13:8d:
                    d5:8a:93:d4:26:18:4f:69:f4:1f:54:9d:50:7b:92:
                    9d:e2:50:aa:fe:00:d8:6c:b8:e6:56:f4:74:2c:6d:
                    52:8d:6a:c7:de:d7:da:cf:4b:0f:00:f8:e3:a9:ef:
                    c3:1e:b9:9d:d3:07:bb:fa:75:3a:17:9f:b0:ab:77:
                    5e:44:ab:90:30:6b:1f:9e:81:5e:33:97:11:71:3e:
                    c3:c3:51:ec:a8:bc:c5:ba:76:f0:e3:a6:36:7e:8c:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D8:12:ED:36:D5:34:A9:B0:B4:48:01:E7:AE:38:99:B9:BC:D7:95
            X509v3 Authority Key Identifier:
                keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:68:fc:3f:aa:fc:6a:b2:8a:86:69:e1:99:8f:d5:35:01:99:
         92:68:2e:54:15:ee:e1:11:85:0d:fa:68:94:5d:d9:b0:16:86:
         cd:3d:00:8b:74:b8:d8:de:a6:64:b4:c6:2a:77:0c:95:96:6c:
         a0:da:db:63:de:41:74:99:35:0c:46:03:51:cc:2d:5d:c0:14:
         6d:94:1f:e6:6f:e5:41:83:d6:e9:33:4d:33:38:e2:38:8d:7d:
         6e:2d:91:92:73:ee:1a:8a:d6:86:9b:ae:43:f9:c1:94:b1:13:
         a2:24:cf:22:e7:95:2a:65:87:40:cc:ea:5a:50:e7:e2:f3:57:
         5a:c3:77:b1:21:0c:c6:52:a6:b7:e6:e6:34:8f:3a:db:02:85:
         93:af:17:a4:7e:7e:5f:81:f9:c4:b5:d5:71:ac:9e:27:c5:ca:
         52:a4:50:ab:d2:6f:c3:91:ea:6e:6e:18:76:68:fe:77:3b:fa:
         dd:e7:98:4d:30:8b:2d:ad:ca:45:3a:95:72:71:44:19:27:28:
         73:bd:21:29:7e:a7:c6:27:98:b3:be:5f:18:4b:f7:65:f6:f6:
         3e:4a:89:ed:07:c0:f8:d2:d2:89:e9:48:75:d4:60:97:92:a3:
         ce:20:c7:23:8d:e7:2b:80:a3:99:29:df:a5:46:0c:4c:1d:83:
         82:0a:83:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB
NUNDNzcyQzAwHhcNMjYxMTE0MjM1OTE4WhcNMjYxMTIxMjM1OTE4WjAYMRYwFAYD
VQQDEw02YWY4ZjVkNi1lZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJ4FqHlmu3FWOnpA4HokFw5XV+vAR2SFnQdCB26vQufuz0+kXApbkUCHLNXu
qhaZPze4vDOHA0Ja+xSRpYmndNbpJ1733Zzi3n35rLhIjN/nZCnRcf1IwLpOf3nC
swqNrQc/c8VtyyrlHPj0S5XhBGX/sIYVDS6p8AYvp2anZMBXp2yxqnW1vC3/Qikh
BNVSX8T/0DmFkp2sWtmnOd7kr0FeE43VipPUJhhPafQfVJ1Qe5Kd4lCq/gDYbLjm
VvR0LG1SjWrH3tfaz0sPAPjjqe/DHrmd0we7+nU6F5+wq3deRKuQMGsfnoFeM5cR
cT7Dw1HsqLzFunbw46Y2foxa+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3YEu02
1TSpsLRIAeeuOJm5vNeVMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2
MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE
andGX3BsMUhCNEdsekhjc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALmj8P6r8arKKhmnhmY/VNQGZkmguVBXu4RGFDfpolF3ZsBaGzT0Ai3S42N6m
ZLTGKncMlZZsoNrbY95BdJk1DEYDUcwtXcAUbZQf5m/lQYPW6TNNMzjiOI19bi2R
knPuGorWhpuuQ/nBlLEToiTPIueVKmWHQMzqWlDn4vNXWsN3sSEMxlKmt+bmNI86
2wKFk68XpH5+X4H5xLXVcayeJ8XKUqRQq9Jvw5Hqbm4Ydmj+dzv63eeYTTCLLa3K
RTqVcnFEGScoc70hKX6nxieYs75fGEv3Zfb2PkqJ7QfA+NLSielIddRgl5KjziDH
I43nK4CjmSnfpUYMTB2DggqDHA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:40:44 2026 by rpki-client