Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          6AqWr2pC34WcVhzThAv63YB5BhgYFovgNTf06xA4Q4Q=
Subject key identifier:   61:34:CD:CE:3B:76:0E:F0:AD:6C:66:95:A9:BD:0B:7D:97:5B:EC:59
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1CB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1C96
Signing time:             Sat 14 Nov 2026 16:07:46 +0000
Manifest this update:     Sat 14 Nov 2026 16:07:45 +0000
Manifest next update:     Sat 21 Nov 2026 16:07:45 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: g15Gf/wj1pMnheNbsidMmZnp2yyeOgQLuEAIRIdZnFE=)
                          2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
                          3: EB6B3FFA86EF11F19E006003A7EE528E.roa (hash: DAeAFcyF/YNOKPuEFYrJ40g8SH0qo3OoC9C6ggkgmKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7348 (0x1cb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Nov 14 16:07:45 2026 GMT
            Not After : Nov 21 16:07:45 2026 GMT
        Subject: CN=6af88752-4b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:92:22:8b:a4:dd:f1:5f:83:62:d5:7b:af:
                    cd:d4:22:4b:9c:55:ad:1e:04:26:de:09:80:b4:45:
                    f7:13:d4:b7:26:45:eb:9a:2d:02:3c:df:33:dc:cf:
                    40:f2:2e:3b:60:8e:0b:76:41:21:fa:d7:0f:80:05:
                    4c:b8:4c:2e:8e:cb:61:64:b6:f6:9c:54:81:08:b2:
                    37:81:16:50:ab:b6:9b:d9:2a:1f:9f:64:7c:86:b1:
                    bd:01:b8:3e:13:9a:5d:a7:06:85:f0:33:fa:5b:70:
                    f4:87:44:f5:5c:34:64:f9:af:35:a1:db:fe:8e:cb:
                    fc:fc:13:d0:25:14:cd:f7:d7:45:29:68:2e:95:cc:
                    b6:a7:20:0f:f3:1e:81:25:ee:72:94:e7:64:6c:5d:
                    f6:38:70:9b:36:df:f9:f2:9a:ba:47:e2:66:3c:16:
                    8f:08:88:d1:bd:0c:af:92:e2:e1:64:67:bf:1f:70:
                    34:0a:f6:9e:93:8e:25:4f:62:5e:19:90:9c:c5:ed:
                    d3:8e:e6:a3:28:63:cd:b5:9a:c1:80:7e:58:04:32:
                    44:8d:73:fe:34:27:26:27:41:9e:33:84:de:06:74:
                    a3:c5:8c:da:7e:92:0e:4e:eb:49:43:ac:95:56:e2:
                    14:78:8b:51:4e:79:28:cb:43:03:13:2c:02:5b:c7:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:34:CD:CE:3B:76:0E:F0:AD:6C:66:95:A9:BD:0B:7D:97:5B:EC:59
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:04:f2:61:b3:97:8d:23:dc:59:02:96:f3:31:05:8e:6f:2e:
         62:04:ce:f3:be:78:4f:6c:ee:fe:81:4b:02:f3:c8:9e:f7:b4:
         80:44:b0:f1:32:f1:50:c1:43:b5:35:83:a6:2b:3b:e6:43:0e:
         df:87:92:d7:39:a0:7a:30:31:64:eb:b8:7e:8a:87:9e:50:f4:
         84:f1:28:95:09:b8:e5:18:93:80:43:84:2c:1e:27:fa:a8:13:
         0c:eb:57:e6:ff:37:7a:d6:92:ca:8e:a6:41:4d:29:79:e3:5b:
         78:61:95:c4:25:89:e0:bb:64:0f:ba:c6:7e:f0:37:a1:2e:1f:
         92:51:60:09:57:25:a7:99:1b:21:65:b4:8b:e8:9a:74:73:eb:
         2a:a1:7e:a2:9d:a0:8c:b6:fd:b0:ce:24:d2:5b:c3:e0:7d:11:
         6c:ba:95:9e:79:b4:32:22:0a:3c:97:64:f7:5f:92:0f:92:a4:
         ea:ee:3e:48:b3:e6:85:cb:39:75:7e:0d:c5:ee:d8:76:17:31:
         8b:5d:d8:c6:e8:df:71:dd:7f:23:64:b2:91:a0:e4:95:3d:69:
         55:d3:09:05:92:79:1b:47:9b:29:79:7b:3c:cc:d6:47:e6:ca:
         5a:3a:43:11:f9:fe:46:52:55:cd:d3:2d:35:92:4f:60:82:ba:
         6a:31:24:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3
OUQzMDUyMzQwHhcNMjYxMTE0MTYwNzQ1WhcNMjYxMTIxMTYwNzQ1WjAYMRYwFAYD
VQQDEw02YWY4ODc1Mi00YjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkhKSIouk3fFfg2LVe6/N1CJLnFWtHgQm3gmAtEX3E9S3JkXrmi0CPN8z3M9A
8i47YI4LdkEh+tcPgAVMuEwujsthZLb2nFSBCLI3gRZQq7ab2Sofn2R8hrG9Abg+
E5pdpwaF8DP6W3D0h0T1XDRk+a81odv+jsv8/BPQJRTN99dFKWgulcy2pyAP8x6B
Je5ylOdkbF32OHCbNt/58pq6R+JmPBaPCIjRvQyvkuLhZGe/H3A0Cvaek44lT2Je
GZCcxe3TjuajKGPNtZrBgH5YBDJEjXP+NCcmJ0GeM4TeBnSjxYzafpIOTutJQ6yV
VuIUeItRTnkoy0MDEywCW8fCGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGE0zc47
dg7wrWxmlam9C32XW+xZMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5
ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX
ckZQRU03bGxoRzk1MHdValEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuATyYbOXjSPcWQKW8zEFjm8uYgTO8754T2zu/oFLAvPInve0gESw8TLxUMFD
tTWDpis75kMO34eS1zmgejAxZOu4foqHnlD0hPEolQm45RiTgEOELB4n+qgTDOtX
5v83etaSyo6mQU0peeNbeGGVxCWJ4LtkD7rGfvA3oS4fklFgCVclp5kbIWW0i+ia
dHPrKqF+op2gjLb9sM4k0lvD4H0RbLqVnnm0MiIKPJdk91+SD5Kk6u4+SLPmhcs5
dX4Nxe7Ydhcxi13Yxujfcd1/I2SykaDklT1pVdMJBZJ5G0ebKXl7PMzWR+bKWjpD
Efn+RlJVzdMtNZJPYIK6ajEkbQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:33:58 2026 by rpki-client