Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          +fHrfZM0L5Q9Y/TtzOQVCAitOjKNJxYizSREBbclKZA=
Subject key identifier:   55:28:3C:A0:73:DC:01:54:83:B4:05:76:0A:A0:B9:69:7F:00:53:A7
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       288E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          281E
Signing time:             Sat 14 Nov 2026 15:35:32 +0000
Manifest this update:     Sat 14 Nov 2026 15:35:31 +0000
Manifest next update:     Sat 21 Nov 2026 15:35:31 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: 6jCQAmOiMmymxknieg+Uqf0eBT+HST5MTObRae2Tz+I=)
                          2: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
                          3: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
                          4: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
                          5: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: 7d89IoO7oSE4BWIA1+3nLNGX3bTaRyu/ngtSyVYUEVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10382 (0x288e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Nov 14 15:35:31 2026 GMT
            Not After : Nov 21 15:35:31 2026 GMT
        Subject: CN=6af87fc3-f638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:c3:69:cf:70:8a:95:56:d9:41:f2:e3:93:
                    3a:83:02:75:dd:05:e4:86:ec:53:40:ac:c8:be:81:
                    7e:fd:eb:31:47:0e:f1:4f:0c:b2:5c:f6:87:05:f0:
                    dd:36:69:18:0a:f6:98:b6:ec:ff:7c:51:45:f2:06:
                    56:8c:3f:a7:15:50:8c:b1:24:2f:54:87:81:ac:a4:
                    eb:42:f4:10:6b:b5:95:6f:93:18:ed:e9:65:f8:35:
                    24:fa:c5:9d:43:21:6a:cf:51:92:94:8a:be:8e:b0:
                    82:47:5d:2e:de:06:23:5a:26:65:07:c2:6d:58:32:
                    65:18:67:9d:a9:65:d6:a0:59:64:8d:25:6a:1f:d7:
                    fe:06:7f:3b:96:5c:b0:1d:33:c2:a2:79:5a:11:a0:
                    fd:dc:21:07:09:c2:a1:7b:3a:bc:76:64:31:8b:07:
                    3b:55:05:c1:ef:4d:a8:54:35:f0:a5:f5:9b:83:75:
                    5b:19:a2:8a:a5:c8:b6:7d:df:be:e8:3a:d8:80:9b:
                    01:59:b9:69:89:52:89:ce:06:19:e4:10:90:45:4e:
                    bc:80:56:dd:1c:61:a9:6f:aa:68:f2:ef:11:c1:94:
                    f5:57:a9:2a:b8:0a:16:f4:31:8f:56:ca:7b:8f:af:
                    e3:dc:73:e0:99:d5:64:a5:5c:65:d0:92:5c:ff:d1:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:28:3C:A0:73:DC:01:54:83:B4:05:76:0A:A0:B9:69:7F:00:53:A7
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:27:7d:0c:fb:ac:9b:a6:21:ec:31:d3:64:4e:ed:b7:e4:
         9d:8b:d1:8a:49:8b:ea:a3:40:71:83:d8:51:9f:17:2a:08:b5:
         b7:85:b4:c8:03:e0:0f:b5:70:ed:0c:41:13:d0:46:9f:b1:aa:
         9e:d0:72:0f:d4:dc:8a:9f:6b:92:17:77:0c:47:d3:da:eb:98:
         04:95:82:4b:e0:00:eb:e4:2c:3f:ef:9b:3b:a8:40:0e:ca:64:
         cc:b8:e0:a4:9a:ef:c4:94:fd:58:fb:60:2f:d7:77:d1:74:71:
         99:22:db:e3:95:bb:20:79:3d:cd:87:ea:16:64:aa:98:9d:6c:
         de:ff:d8:1c:9a:4a:b4:26:33:04:c0:ef:5b:cc:62:7e:61:ba:
         cb:90:25:aa:f5:66:4a:95:84:4e:d0:03:05:0a:1c:95:d6:f6:
         73:bd:b3:e2:b2:5b:83:1d:09:78:3f:bb:70:e1:35:c6:d5:47:
         50:9a:64:ab:81:5e:23:0d:3f:18:a3:9e:d6:69:65:d1:00:10:
         77:a9:82:36:0a:0c:af:ed:c2:ea:f3:ba:f8:55:99:e4:12:32:
         9b:03:4a:1e:b7:e7:1e:b8:3d:0a:c8:24:2d:bc:a6:16:f5:96:
         e8:16:ac:19:d9:c9:de:9a:30:9d:7a:56:47:3c:02:35:db:7a:
         19:ec:5d:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE
MEFCOTRCRTUwHhcNMjYxMTE0MTUzNTMxWhcNMjYxMTIxMTUzNTMxWjAYMRYwFAYD
VQQDEw02YWY4N2ZjMy1mNjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQLDac9wipVW2UHy45M6gwJ13QXkhuxTQKzIvoF+/esxRw7xTwyyXPaHBfDd
NmkYCvaYtuz/fFFF8gZWjD+nFVCMsSQvVIeBrKTrQvQQa7WVb5MY7ell+DUk+sWd
QyFqz1GSlIq+jrCCR10u3gYjWiZlB8JtWDJlGGedqWXWoFlkjSVqH9f+Bn87llyw
HTPConlaEaD93CEHCcKhezq8dmQxiwc7VQXB702oVDXwpfWbg3VbGaKKpci2fd++
6DrYgJsBWblpiVKJzgYZ5BCQRU68gFbdHGGpb6po8u8RwZT1V6kquAoW9DGPVsp7
j6/j3HPgmdVkpVxl0JJc/9EyEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUoPKBz
3AFUg7QFdgqguWl/AFOnMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB
Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ
X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFT4nfQz7rJumIewx02RO7bfknYvRikmL6qNAcYPYUZ8XKgi1t4W0yAPgD7Vw
7QxBE9BGn7GqntByD9Tcip9rkhd3DEfT2uuYBJWCS+AA6+QsP++bO6hADspkzLjg
pJrvxJT9WPtgL9d30XRxmSLb45W7IHk9zYfqFmSqmJ1s3v/YHJpKtCYzBMDvW8xi
fmG6y5AlqvVmSpWETtADBQocldb2c72z4rJbgx0JeD+7cOE1xtVHUJpkq4FeIw0/
GKOe1mll0QAQd6mCNgoMr+3C6vO6+FWZ5BIymwNKHrfnHrg9CsgkLbymFvWW6Bas
GdnJ3pownXpWRzwCNdt6Gexddg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:58 2026 by rpki-client