Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File:                     b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier:          jOA9+3qj+6aIqUrelBnAhQ7BXx0kA5PCKouyc3a2jaQ=
Subject key identifier:   CF:6E:BC:C4:DC:DB:66:64:E4:44:B4:48:E8:1F:DA:68:C3:0C:69:87
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer:       /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number:          0115
Signing time:             Wed 11 Nov 2026 06:10:18 +0000
Manifest this update:     Wed 11 Nov 2026 06:10:18 +0000
Manifest next update:     Wed 18 Nov 2026 06:10:18 +0000
Files and hashes:         1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: bSeCVK5OxPhw20xTvCRa8n3nn1/R5u4qf4XBbIg45dA=)
                          2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: THMYN1koeOfwnbK8AGxlReff3pZqD6xwEXO++zbayH8=)
                          3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: EWbmDsTGqQLpUfNOlcyjqkg7ey8/2rO6qBfbLaQNH74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
                          rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Nov 2026 06:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
        Validity
            Not Before: Nov 11 06:10:18 2026 GMT
            Not After : Nov 18 06:10:18 2026 GMT
        Subject: CN=6af406ca-9697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:cd:d4:79:be:45:51:66:83:b7:a6:e4:b4:
                    ac:43:78:5e:01:22:2a:96:e5:65:50:4a:8c:09:80:
                    9a:30:bd:22:b4:34:56:59:09:6e:48:30:cb:14:6f:
                    3a:77:02:14:41:e9:33:da:c7:0e:80:cd:ed:54:fc:
                    40:6f:58:2a:35:2d:45:07:c2:df:ac:3e:dc:52:37:
                    89:27:2f:aa:43:56:30:6c:1f:78:71:e6:e5:de:fa:
                    f7:29:01:29:b4:67:2b:e3:9e:e0:ca:da:34:62:de:
                    b6:59:ed:34:21:ed:05:58:a6:28:4b:f7:d4:bb:23:
                    e1:c9:f9:ed:55:f7:cc:6f:5a:13:41:b6:30:21:f7:
                    e0:1c:e6:e5:71:21:79:9d:b5:34:5d:a0:a2:04:d0:
                    23:62:ff:47:9c:de:68:fd:a3:d9:dd:d8:c4:e6:b2:
                    e5:30:66:7c:3a:d0:28:92:32:24:8c:19:45:33:34:
                    53:0d:82:8a:cc:06:f7:d7:3e:d8:98:9e:5c:8a:31:
                    ee:d6:04:99:22:50:2a:4f:3b:8e:9a:3d:6c:3b:bb:
                    16:dc:b4:f1:8d:48:e1:3e:00:5d:5c:46:bc:7b:5c:
                    c1:58:96:34:ac:fa:0d:29:1e:f0:4e:96:59:9e:ae:
                    89:66:57:4d:4d:f0:aa:41:45:88:85:c0:40:c8:27:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:BC:C4:DC:DB:66:64:E4:44:B4:48:E8:1F:DA:68:C3:0C:69:87
            X509v3 Authority Key Identifier:
                keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:ed:07:54:8e:0a:81:dc:a5:8c:b4:1f:aa:6e:8a:65:ee:
         58:ba:6a:42:90:f7:12:3e:a9:0e:ae:f6:8e:8f:55:92:2d:84:
         70:1c:85:85:36:b0:fb:45:81:7d:2f:ae:4c:39:45:1f:9e:f2:
         03:1d:cf:d6:14:74:be:25:f2:bd:43:ca:28:bb:ea:bd:40:fc:
         91:24:c6:16:b3:f3:7d:80:9a:6d:85:ae:42:db:dc:5c:aa:15:
         fd:39:64:9b:73:c4:c8:ef:d4:3a:b0:e1:96:da:e9:ab:a3:1c:
         8f:c0:ff:c5:9a:84:a0:62:0b:0d:04:a9:32:01:b1:6e:c1:5c:
         f6:c8:8a:fb:bd:ef:51:e2:db:97:b6:db:c1:4d:70:94:e7:6f:
         41:d5:1f:01:a2:14:bd:84:a7:e0:28:b1:6a:77:ad:16:9b:39:
         a8:27:a1:15:4f:3e:4e:7b:61:6a:92:6d:ad:b1:79:65:40:05:
         c9:fd:5b:76:5a:eb:41:80:98:98:25:4d:b4:64:cc:40:c0:57:
         f5:9f:cf:a2:de:7a:87:26:a5:28:97:15:e1:47:69:2e:14:c6:
         a8:f2:9d:3d:b2:da:ad:a7:09:ba:b0:cf:71:a2:46:01:37:ec:
         05:20:e8:0e:26:c4:db:10:ec:43:27:ec:54:66:c8:9b:2f:8d:
         4c:a0:5e:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA5MTYxMTAvBgNVBAUTKDZGQzIyRDMwRjMxOUNENjVEQjVFM0Y2RkZDNUQxNDFD
RDAxNjY4ODIwHhcNMjYxMTExMDYxMDE4WhcNMjYxMTE4MDYxMDE4WjAYMRYwFAYD
VQQDEw02YWY0MDZjYS05Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2qTN1Hm+RVFmg7em5LSsQ3heASIqluVlUEqMCYCaML0itDRWWQluSDDLFG86
dwIUQekz2scOgM3tVPxAb1gqNS1FB8LfrD7cUjeJJy+qQ1YwbB94cebl3vr3KQEp
tGcr457gyto0Yt62We00Ie0FWKYoS/fUuyPhyfntVffMb1oTQbYwIffgHOblcSF5
nbU0XaCiBNAjYv9HnN5o/aPZ3djE5rLlMGZ8OtAokjIkjBlFMzRTDYKKzAb31z7Y
mJ5cijHu1gSZIlAqTzuOmj1sO7sW3LTxjUjhPgBdXEa8e1zBWJY0rPoNKR7wTpZZ
nq6JZldNTfCqQUWIhcBAyCdqMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9uvMTc
22Zk5ES0SOgf2mjDDGmHMB8GA1UdIwQYMBaAFG/CLTDzGc1l214/b/xdFBzQFmiC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkxNi8wNDBCODdCQTM2
NEExMUYwODA0QURFNUVDNEY5QUUwMi9iOEl0TVBNWnpXWGJYajl2X0YwVUhOQVdh
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I4SXRNUE1aeldYYlhqOXZfRjBVSE5BV2FJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDkxNi8wNDBCODdCQTM2NEExMUYwODA0QURFNUVDNEY5QUUwMi9iOEl0TVBNWnpX
WGJYajl2X0YwVUhOQVdhSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXlvtB1SOCoHcpYy0H6puimXuWLpqQpD3Ej6pDq72jo9Vki2EcByFhTaw+0WB
fS+uTDlFH57yAx3P1hR0viXyvUPKKLvqvUD8kSTGFrPzfYCabYWuQtvcXKoV/Tlk
m3PEyO/UOrDhltrpq6Mcj8D/xZqEoGILDQSpMgGxbsFc9siK+73vUeLbl7bbwU1w
lOdvQdUfAaIUvYSn4CixanetFps5qCehFU8+TnthapJtrbF5ZUAFyf1bdlrrQYCY
mCVNtGTMQMBX9Z/Pot56hyalKJcV4UdpLhTGqPKdPbLaracJurDPcaJGATfsBSDo
DibE2xDsQyfsVGbImy+NTKBeDg==
-----END CERTIFICATE-----
Generated at Thu Nov 12 22:44:04 2026 by rpki-client