Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          vZIc7rA6SHkJtjvOsNRZXaIRhGfx1bichmz/G9P6in0=
Subject key identifier:   B1:CE:88:16:0A:34:C0:07:35:0A:B6:10:12:C6:5C:F6:D8:99:E0:E9
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0E38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0D2D
Signing time:             Sat 14 Nov 2026 18:40:57 +0000
Manifest this update:     Sat 14 Nov 2026 18:40:56 +0000
Manifest next update:     Sat 21 Nov 2026 18:40:56 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: ai3FowetCPb7Eld2RxR2O1NtV9/VoSgw+thh7cHzUK0=)
                          2: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
                          3: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
                          4: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          5: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
                          6: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
                          7: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
                          8: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
                          9: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
                          10: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          11: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
                          12: 0CE85BA6BE1111F18720DB3D5611F970.roa (hash: nz9vc68IV5WJ7mQXbS6rNZIjFtBJkdis8tlOkiay7Qw=)
                          13: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
                          14: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
                          15: 9DBA4E02D71411F1A6D299031A66CEF9.roa (hash: pdSyUMPpA8a/ewj/0DOaHahHB7MmG/Q6lb6CIo1RnLQ=)
                          16: D9BF0154DDD111F1A0B150D62266CEF9.roa (hash: ik76esU2Sp3ufcAWEiZZN+RiZgQjr6h0hGo6+kugDhI=)
                          17: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          18: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          19: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
                          20: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          21: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
                          22: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          23: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
                          24: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 18:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3640 (0xe38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Nov 14 18:40:56 2026 GMT
            Not After : Nov 21 18:40:56 2026 GMT
        Subject: CN=6af8ab39-4467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:32:2d:76:bf:6b:fb:51:07:f4:20:fe:20:
                    b0:9e:7c:da:6d:d6:07:90:29:7b:d8:7d:ee:9c:0c:
                    ad:7d:51:3a:21:27:3e:08:fa:bf:e2:a2:50:ed:ab:
                    25:8a:0c:10:cf:d4:c9:80:e5:0a:84:eb:91:ad:ae:
                    d2:f6:6c:ba:1d:25:09:c8:d6:89:37:43:d8:2d:77:
                    e5:65:44:5b:d6:96:85:46:80:6b:48:57:65:80:4e:
                    48:24:f3:77:11:cb:85:98:ed:50:2d:5f:ce:1e:98:
                    80:d1:9e:65:d4:d1:ad:ff:0e:d5:23:40:12:8e:c4:
                    04:bf:39:86:e5:6f:e4:e8:7d:e9:a8:78:00:8f:c2:
                    9d:12:9f:b4:d8:e9:01:dc:10:03:58:8a:7d:01:de:
                    de:ad:bc:a2:f6:97:dd:cf:36:f1:7d:4e:7c:be:a8:
                    f5:f3:e6:97:0f:4e:dc:95:1e:55:81:56:7a:4f:bd:
                    9b:4c:60:45:26:e8:d1:73:c9:81:ee:0f:5e:8c:d5:
                    d2:50:22:01:92:4f:c4:82:8d:3a:bc:e6:32:a3:47:
                    d2:a6:0c:da:c2:02:9d:da:68:fc:9d:75:41:91:93:
                    ac:29:ac:b8:ef:09:ba:63:80:ef:b3:20:b4:ff:dd:
                    62:0e:42:60:79:48:d7:a7:d4:37:b0:ae:d8:ff:60:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CE:88:16:0A:34:C0:07:35:0A:B6:10:12:C6:5C:F6:D8:99:E0:E9
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:c0:9c:16:44:7e:bf:89:3c:8a:2f:f1:d6:7f:f7:a9:0c:
         3a:c1:1b:f0:37:bb:0e:1f:94:77:20:98:bc:40:db:d7:08:cf:
         6d:10:5f:8d:c5:f8:1c:03:4c:6c:5d:ea:76:74:72:38:a6:0e:
         b1:bd:d1:9d:a6:7b:a7:e1:fb:ba:ab:1e:a0:13:f1:d8:f7:cd:
         b2:d3:3f:8d:60:ec:a0:4f:6f:47:0c:ed:fe:5f:36:13:30:67:
         58:97:81:e0:3c:85:2e:77:82:9f:77:e4:b4:03:dd:23:84:77:
         4b:3a:da:61:71:a5:1b:cc:82:56:e3:76:d6:54:06:00:32:91:
         7c:80:ba:5c:c9:7d:2f:c1:07:74:32:52:33:b6:89:42:8d:05:
         e8:2c:67:df:87:02:30:a3:76:b3:8e:a7:bd:88:a4:7c:8f:d6:
         d0:7a:d6:1d:11:09:80:92:d0:bb:19:12:5e:43:54:bb:73:fd:
         e8:16:dd:f7:ae:69:a5:c2:32:00:a0:66:c3:f9:d1:33:cc:d6:
         39:2f:82:81:ba:ba:e9:8a:69:82:02:20:dc:19:47:f3:07:fc:
         35:41:9b:d9:83:f8:90:7b:54:44:45:e5:16:de:8f:95:3c:dd:
         cf:9b:b0:08:74:50:47:0f:be:dc:66:0d:d6:05:ca:f9:2e:62:
         8c:be:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:41:29 2026 by rpki-client