Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File:                     0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier:          +EN2nRhmqKd0PTNTheqz+/AMMiXxKww9IhXn3WsXfEo=
Subject key identifier:   5C:7A:F5:41:B9:BE:21:78:B8:21:4C:90:E9:A0:DE:ED:74:59:47:B3
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer:       /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number:          02C4
Signing time:             Sun 15 Nov 2026 01:28:08 +0000
Manifest this update:     Sun 15 Nov 2026 01:28:08 +0000
Manifest next update:     Sun 22 Nov 2026 01:28:08 +0000
Files and hashes:         1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: xcvjLf0Wk/M5dpYpimaf4jo8+PflnII3Egdz2Q/JxG8=)
                          2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
                          3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
                          rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 01:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
        Validity
            Not Before: Nov 15 01:28:08 2026 GMT
            Not After : Nov 22 01:28:08 2026 GMT
        Subject: CN=6af90aa8-0b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:99:01:59:0a:02:dc:1e:ff:8c:52:e2:21:
                    18:43:46:8a:35:42:4e:84:33:8b:fd:d1:be:e3:35:
                    01:96:a1:c7:e7:28:3e:e5:3a:9f:ca:9c:c0:6b:fd:
                    75:3c:b8:87:09:d5:ff:33:a3:7f:57:8d:30:e5:30:
                    41:28:43:8f:2c:7c:91:30:ce:f9:58:e7:7b:b2:27:
                    93:b9:85:24:83:b4:f9:9a:b4:8c:48:ef:4f:9c:c4:
                    d5:34:82:05:75:a6:91:be:d9:4a:59:0b:ec:7d:ad:
                    c2:2c:6d:d9:8f:7e:fc:94:8d:c3:1e:31:18:18:1d:
                    eb:4a:f9:2c:14:75:35:09:a6:78:c1:11:ff:db:9e:
                    77:b8:80:1e:bd:71:42:39:a8:f4:a9:77:db:1c:56:
                    ab:88:1e:35:61:13:11:d6:68:1e:64:9d:49:33:c0:
                    1a:24:50:ff:11:35:95:f5:6c:16:95:15:90:80:36:
                    c3:a0:35:cf:ec:2b:f4:ee:9d:23:2f:d3:e2:ef:38:
                    11:28:ff:b2:a2:5e:95:a2:ae:57:64:16:56:67:1d:
                    1c:69:72:21:db:7d:72:cb:2c:2f:79:d0:1b:01:01:
                    3d:bf:32:37:c8:7a:53:e1:c4:69:80:70:0a:aa:00:
                    95:ab:8f:1f:f0:03:7d:ea:e8:ee:70:84:08:0c:68:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7A:F5:41:B9:BE:21:78:B8:21:4C:90:E9:A0:DE:ED:74:59:47:B3
            X509v3 Authority Key Identifier:
                keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:f5:78:cc:bd:ac:a1:44:cb:4a:59:9f:eb:ab:8e:fb:39:c2:
         f6:92:25:9d:39:73:ee:3c:78:23:53:e9:97:ba:a3:2a:32:41:
         7d:62:a4:02:76:d6:46:fc:0b:3a:67:82:bb:f0:5a:9f:c4:08:
         64:26:44:12:65:6e:25:17:c3:18:05:d8:a0:1b:e9:b2:d0:a5:
         0e:e0:e2:15:b4:2e:74:f8:13:7d:68:55:c7:96:24:8a:11:26:
         65:8d:c0:72:a2:a1:53:46:e7:3a:e6:ad:9c:1f:c9:9f:a3:1b:
         df:f9:dd:36:3a:7e:ac:98:ad:25:02:8a:7f:54:40:4e:b1:17:
         32:72:6c:22:8e:dd:fe:2e:d3:ab:8a:16:0a:00:2f:eb:91:6b:
         18:21:21:9f:74:71:27:c0:f7:80:e6:b3:5f:8c:33:40:f3:d0:
         71:30:3a:ed:a9:c8:3c:1d:67:50:c7:61:54:66:aa:65:d4:4d:
         48:ff:c3:5e:18:10:9f:6f:13:86:dc:77:47:e7:f9:1a:80:fd:
         8b:71:6c:fd:61:19:e5:0a:b8:3d:47:90:f2:79:6c:b7:0d:8b:
         b0:80:8e:61:93:e2:86:e4:85:c0:ee:2d:1b:d3:7b:60:d2:ab:
         8d:5d:b9:7a:35:36:41:0e:fb:78:55:46:dd:af:56:4d:66:47:
         38:c9:fd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:03:52 2026 by rpki-client