Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File:                     f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier:          5hFNAkAz8F1DoxRWYHlohWy1UlyqgeogB+Ky3WtfXhU=
Subject key identifier:   5E:74:E7:75:95:D1:8C:AE:FE:6F:49:9B:B6:32:78:D5:B3:BD:4C:FC
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer:       /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number:          0269
Signing time:             Sun 15 Nov 2026 02:15:19 +0000
Manifest this update:     Sun 15 Nov 2026 02:15:19 +0000
Manifest next update:     Sun 22 Nov 2026 02:15:19 +0000
Files and hashes:         1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: TQxzGVOHFQsYYnUPqglqiFQLGm4VCBCQMs09c1toJNY=)
                          2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: eZZ6OFwcrcrXTZgOQDhlIiXfyLs/tMt4GT83cZsLk+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
                          rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
        Validity
            Not Before: Nov 15 02:15:19 2026 GMT
            Not After : Nov 22 02:15:19 2026 GMT
        Subject: CN=6af915b7-de7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:97:8b:74:6f:6e:1b:7f:fb:5b:27:74:be:
                    3a:e5:37:ff:22:75:04:38:c3:8f:79:62:6e:41:47:
                    0f:92:d1:a0:4e:22:05:d6:c5:14:af:a6:49:55:6e:
                    d6:3e:7c:9f:bd:94:ac:5c:8b:4a:f3:05:d6:bf:56:
                    0e:8f:9b:39:d4:c5:4e:1b:67:28:af:dc:5e:1a:12:
                    35:60:df:e7:04:b8:70:04:77:ed:ba:67:07:36:06:
                    50:48:d9:a1:6d:3d:e9:77:45:13:24:b7:67:9c:b1:
                    85:8f:bd:60:33:7d:dd:da:a9:5d:16:32:72:d7:6a:
                    fb:4b:c7:0b:60:94:1e:69:63:ba:bb:1f:0a:33:88:
                    82:ab:2f:ed:82:be:be:9a:45:08:c6:44:37:92:bc:
                    b7:d7:9b:45:21:a3:0c:f0:5d:b1:ba:b4:78:df:49:
                    9d:9f:79:81:89:8e:bf:9a:79:92:4d:b1:b4:af:86:
                    cb:02:54:c7:13:91:b7:a0:28:5b:e0:44:91:8d:d3:
                    d9:43:66:03:9e:39:e6:f4:aa:92:8d:0c:c5:99:f0:
                    2d:ca:b2:60:07:cd:0f:de:8d:8e:02:68:f6:cf:10:
                    f4:f1:ca:8c:f0:a1:81:ab:90:96:4e:b7:25:71:15:
                    0e:05:33:9e:3f:bb:26:05:dd:02:19:96:f0:9a:94:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:E7:75:95:D1:8C:AE:FE:6F:49:9B:B6:32:78:D5:B3:BD:4C:FC
            X509v3 Authority Key Identifier:
                keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:5f:ea:e0:b8:d2:53:93:34:41:aa:a4:20:1f:7d:61:97:44:
         f5:4f:df:7f:65:83:ba:b3:ec:67:e3:1f:a9:0b:e8:96:c2:e2:
         46:91:12:df:18:19:e8:65:d3:17:15:90:4a:ad:de:b3:5a:ae:
         36:0e:b6:10:05:25:eb:b6:ca:57:d4:ac:cc:6e:49:ad:f1:34:
         e4:52:f3:c2:da:4e:6a:d8:c3:de:d6:c5:64:72:e1:f2:5c:e9:
         e9:d1:b4:6e:ab:16:ae:f1:b4:ef:98:fd:53:e9:98:25:49:05:
         3d:91:1b:3c:c1:ab:9f:1b:04:12:8e:59:c9:09:7f:c5:28:3c:
         29:6d:08:39:3b:91:86:78:4c:48:72:4b:84:2c:72:55:d8:8f:
         d3:ff:09:30:e2:55:9b:1f:f9:57:93:92:1c:d2:67:75:29:10:
         68:b7:95:d3:73:ff:2c:b1:fc:b6:05:92:e6:b5:eb:8e:d8:d1:
         c2:d9:6a:8e:ec:df:4d:b3:92:63:56:0c:2d:3f:6b:f6:1f:e5:
         fe:d5:9d:b5:41:d6:a3:7f:a8:ed:da:94:a4:5d:15:a1:00:d2:
         7b:38:ad:ad:fd:6a:23:6b:2b:c4:7a:fa:04:62:12:e4:81:73:
         ad:9b:73:4e:64:c1:47:a1:5d:ad:d4:12:b8:b1:1f:68:67:ad:
         d2:e7:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:01:53 2026 by rpki-client