Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
File:                     4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json)
Hash identifier:          yqnAYkz2cTWEKdegh9bXuRTbTbRt7gYi0EeOmJktIxQ=
Subject key identifier:   68:2C:F5:C0:41:02:9C:07:8A:FB:08:9E:5C:69:B0:9A:13:88:36:43
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
Manifest number:          0242
Signing time:             Sun 15 Nov 2026 02:42:04 +0000
Manifest this update:     Sun 15 Nov 2026 02:42:04 +0000
Manifest next update:     Sun 22 Nov 2026 02:42:04 +0000
Files and hashes:         1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: olZ/7b4+eejeIhk3jxV5lnwGGIf/dpf2MTEqwLW3IHo=)
                          2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: Uq2HpSv3F80zWwHJM5Iy2Qx5noXEmcrVO1BmBcMyXEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: Nov 15 02:42:04 2026 GMT
            Not After : Nov 22 02:42:04 2026 GMT
        Subject: CN=6af91bfc-532a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:b0:ec:12:40:6f:00:a5:83:5a:05:33:28:
                    d2:f4:c1:14:b7:a4:fe:f0:ad:4d:47:d1:57:c8:b9:
                    5a:5b:a4:a9:e2:a6:90:a0:af:4f:0e:b3:d8:75:1e:
                    af:bf:76:a9:a7:c4:f8:0c:d4:4b:86:eb:8d:c4:3d:
                    50:67:81:c8:19:34:f4:c2:59:d0:da:1d:28:cb:6c:
                    1e:8a:37:d1:d3:02:fd:8f:74:4f:80:3f:a3:30:6a:
                    1b:13:2a:d8:6f:56:42:b6:b5:b9:c8:7a:cc:43:b7:
                    1b:62:cb:c9:94:fe:10:62:4e:c6:f7:54:a1:30:14:
                    55:e7:18:2b:e4:56:66:72:8b:67:28:99:1f:8b:8b:
                    09:0d:38:f5:ac:78:18:8c:40:38:bb:d4:c9:aa:c1:
                    e5:dd:1e:7a:c5:8d:31:45:ef:ce:98:dd:1d:ae:0b:
                    53:7e:01:50:db:9c:57:91:57:c2:5c:6f:21:31:91:
                    54:fd:64:65:b3:e7:bb:b4:2c:5e:52:a4:2b:32:a1:
                    ff:84:ee:bc:98:bd:a7:b2:d3:81:be:d4:d4:8d:41:
                    8c:ea:3f:31:ba:49:ec:85:be:26:dc:a4:1a:30:f6:
                    5c:01:b4:91:32:4f:ac:96:74:a2:3a:06:3e:75:4d:
                    91:17:63:2c:49:fe:46:4a:3e:4e:62:9a:54:d2:17:
                    fd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2C:F5:C0:41:02:9C:07:8A:FB:08:9E:5C:69:B0:9A:13:88:36:43
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:61:3d:c3:3b:d0:bb:92:68:d5:a7:7b:15:e4:ff:18:43:35:
         c3:f3:1a:36:c4:26:85:dd:9e:d4:42:34:aa:fa:17:8f:ea:c1:
         89:8c:7c:03:5e:6e:d7:a7:02:a1:98:0a:16:85:99:e5:8f:e1:
         18:7c:66:e8:f6:16:28:de:21:d3:c0:11:7d:de:dd:64:17:53:
         83:c1:d5:72:12:b2:8d:4b:ae:a4:f6:c5:63:9f:c5:a5:28:6b:
         6f:ae:0d:0e:5c:e6:49:79:dc:93:04:62:17:25:6f:3f:ee:d0:
         8c:48:85:5a:d4:5e:4b:e6:b0:2d:ad:53:5c:6c:03:a7:09:9c:
         35:69:c4:c0:87:df:8c:49:fd:54:37:2b:9e:e4:6f:db:53:7c:
         11:f1:7a:e8:a4:73:f7:ae:73:c9:70:8d:bb:c9:c7:8c:90:b5:
         41:71:37:4b:43:9e:b3:ab:a6:e1:93:a8:31:7b:88:9a:f9:3c:
         70:66:88:24:d2:a0:3e:68:25:96:b3:96:77:94:cd:55:2c:67:
         27:1c:01:c8:78:b7:cf:0f:17:4a:4a:75:2b:dc:77:82:1f:55:
         c0:24:f1:79:1c:05:d8:ee:2d:03:16:b8:22:bb:c0:5c:f8:91:
         ef:a4:68:97:b8:f1:88:9e:97:94:d2:43:6c:8e:43:9d:53:80:
         10:52:d1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:12 2026 by rpki-client