Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File:                     ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier:          88aUj24tC7ZiZHE7dbyxVdBtqspDcE0nn+MxwDVs/KU=
Subject key identifier:   8B:BE:C6:61:7D:50:21:C3:BB:18:B7:78:31:41:9C:B0:3C:38:B6:95
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer:       /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number:          026E
Signing time:             Sun 15 Nov 2026 02:14:39 +0000
Manifest this update:     Sun 15 Nov 2026 02:14:39 +0000
Manifest next update:     Sun 22 Nov 2026 02:14:39 +0000
Files and hashes:         1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: +qkOaasLm3jw5BWxqoAG+gXmZh/7qpt4arr36dEUytw=)
                          2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: l6WlraQHSFxD5ZzijjCLvs/ztCHDvT/RfDgDzcuuDws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
        Validity
            Not Before: Nov 15 02:14:39 2026 GMT
            Not After : Nov 22 02:14:39 2026 GMT
        Subject: CN=6af9158f-bd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:46:59:d0:24:af:3f:5e:01:23:bf:9b:d2:5b:
                    ac:e1:ac:54:70:8f:d8:4a:4e:62:59:a6:13:7a:9a:
                    12:0c:fc:11:4a:30:90:63:07:54:f0:b3:52:66:e7:
                    24:ab:0c:8f:10:4f:1c:b7:22:d8:0a:7a:ae:23:d5:
                    c9:64:25:79:6d:7b:e1:14:4a:f1:98:fd:08:8a:f4:
                    62:a9:ea:86:23:e1:86:f6:e9:72:2f:8c:34:9a:6e:
                    e1:ab:21:37:33:95:94:6a:79:05:97:61:71:d5:df:
                    a4:7a:1c:c7:bd:5d:4c:be:83:af:67:1b:ea:cf:17:
                    f3:1e:70:89:b3:4b:7d:0f:bb:35:1d:61:d7:1e:bf:
                    60:be:fa:7c:c6:c4:e3:45:79:27:8d:a0:a7:fb:cb:
                    93:b3:2b:90:f6:7e:ec:13:aa:37:ce:7d:b8:a1:97:
                    52:9e:91:c2:8a:69:1a:82:6a:ef:e4:ce:b2:e9:d1:
                    c0:73:a0:87:b5:32:c8:1e:fa:c5:19:ed:70:aa:d4:
                    21:54:76:d3:db:35:84:32:8d:d8:37:d9:d9:24:ae:
                    c4:dc:f4:76:e3:94:32:63:a1:34:80:b9:d0:70:34:
                    8f:ad:ea:81:b5:f7:67:12:59:97:b7:d5:17:85:5d:
                    65:0f:a2:44:d9:7a:f0:d2:20:99:9c:9f:81:3b:ff:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BE:C6:61:7D:50:21:C3:BB:18:B7:78:31:41:9C:B0:3C:38:B6:95
            X509v3 Authority Key Identifier:
                keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:80:67:a1:22:04:86:f2:0d:a7:cd:19:8e:a7:17:f6:e8:a2:
         74:1f:d0:5f:d0:93:ab:75:e0:c7:c7:21:f0:a7:9e:e6:6b:d1:
         af:bc:73:f9:8f:57:45:07:73:d2:d7:56:12:d3:45:34:8e:17:
         c8:e2:e2:57:c2:91:45:87:6a:32:80:ec:08:5c:83:9b:ee:83:
         18:77:12:8d:46:00:84:8b:93:18:65:b6:07:7b:6e:9d:d3:d7:
         35:c4:6b:f3:fd:22:8d:c3:a4:fe:c6:9b:f4:52:fe:08:8d:04:
         74:f9:d5:5a:2e:15:ae:7b:18:0a:0b:aa:19:5f:c1:65:e4:70:
         5c:84:cc:0a:6b:6f:c7:b6:e3:ff:bf:a3:1d:76:72:ab:7d:8b:
         05:63:c4:39:bf:b2:88:d8:07:14:31:b6:d9:68:3f:10:52:11:
         cb:54:4d:31:c6:2d:09:b9:c8:13:1f:ce:fd:91:9b:4c:ef:8e:
         b5:4d:da:a4:86:55:7a:39:6d:b2:2d:85:b0:10:dd:03:ce:c2:
         12:1d:46:7b:fc:22:11:15:90:90:c5:7d:c3:da:6f:84:5c:4e:
         3a:b9:14:7d:0f:be:ec:f9:f2:db:0b:da:40:c7:16:a5:83:db:
         5e:e7:8b:96:a6:31:b6:32:65:ed:f5:f7:a1:23:99:c3:fd:8d:
         ce:9b:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:25:40 2026 by rpki-client