Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File:                     R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier:          jwHZuVX+o2g9R/6FBBmBWgUBUf0Cqp/43pyvz+Knw5I=
Subject key identifier:   03:F1:81:A7:0C:E0:31:7A:DD:8B:0E:F7:33:79:5D:72:C8:53:E0:3A
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1E93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number:          1E7A
Signing time:             Sat 14 Nov 2026 16:00:07 +0000
Manifest this update:     Sat 14 Nov 2026 16:00:07 +0000
Manifest next update:     Sat 21 Nov 2026 16:00:07 +0000
Files and hashes:         1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: P1CJ36I/H4FLlXFuRJs2fRZE5QtSedlrXCgyn5zpz20=)
                          2: B842F0DEDB8A11F09F03163163D3641D.roa (hash: jXyFKKhv3NiyhdxhvyOkChDU44D4bw0UZftZE74S4M8=)
                          3: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: QTVpa4t8F6ebvlprgzU0m7JUeVHvQbd1I09gZUbnt0Q=)
                          4: B7BA9860DB8A11F09F03163163D3641D.roa (hash: tko+/h36KBIN5Mky2JAjS3z0hpFeYGsUcN3Jcbzdi3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7827 (0x1e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Nov 14 16:00:07 2026 GMT
            Not After : Nov 21 16:00:07 2026 GMT
        Subject: CN=6af88587-5cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:90:78:08:02:03:c3:7d:8d:ad:68:29:5a:
                    b4:54:42:a3:30:37:91:32:9b:3c:c9:16:1f:af:9e:
                    28:54:24:d4:5e:db:56:f7:fc:56:69:ea:3c:e2:93:
                    09:eb:ae:26:25:1a:56:00:8c:6a:d9:90:35:a5:9c:
                    dd:e9:d1:d0:fe:00:38:e1:61:70:94:73:3f:28:eb:
                    6a:8b:45:56:05:85:2e:fd:42:de:7e:d1:90:55:0c:
                    b2:88:61:d1:e1:35:6a:6a:75:df:5a:85:e8:dd:73:
                    fe:a8:73:49:98:18:b2:58:b0:f5:4a:65:32:92:4e:
                    ba:92:ae:83:fd:f6:0c:0a:62:13:72:16:63:49:9c:
                    a9:a0:8b:06:81:02:7f:dd:9b:70:14:88:29:84:66:
                    50:2f:59:db:7c:99:6a:2f:1b:5d:1a:8b:a1:8c:68:
                    e6:53:7b:93:9e:fd:e2:f1:7b:c1:4e:3f:04:0d:10:
                    cc:3a:c1:b9:97:35:23:7d:3d:81:cf:8f:f9:39:08:
                    ff:d0:ca:42:44:09:14:4e:f4:8d:a4:f2:85:ed:b7:
                    29:3e:62:88:42:14:d5:e9:b3:6d:11:93:ab:cd:b5:
                    5c:69:39:cb:62:37:39:45:69:f7:08:66:26:06:d8:
                    31:4f:89:94:68:a0:69:ca:8c:58:87:a9:63:82:94:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F1:81:A7:0C:E0:31:7A:DD:8B:0E:F7:33:79:5D:72:C8:53:E0:3A
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:91:33:77:78:b3:89:ff:08:1c:f5:2d:91:07:c8:e5:0a:cf:
         db:c1:8d:3f:c6:db:86:b2:84:bb:a0:34:43:eb:2e:ff:71:ca:
         72:be:a4:7d:7c:81:bb:5c:a7:14:98:ee:87:ff:b5:3e:eb:44:
         e2:22:52:7b:c1:46:72:f5:81:13:6a:0f:6d:82:bf:8e:3b:82:
         31:cb:db:6b:4b:73:84:e7:42:27:5d:b6:8f:ac:9a:a9:62:36:
         95:ae:d9:fb:f6:9b:e7:31:b8:82:ea:fe:49:e5:54:fd:c3:80:
         65:80:d1:a0:e8:25:12:ce:52:08:e0:1f:ec:57:43:2c:22:27:
         f4:8b:f5:0f:bc:c3:3d:d4:68:f9:ba:8c:58:18:bc:2d:9c:f1:
         bf:fa:9e:c5:e4:c0:95:d1:96:7d:06:c4:d7:1b:c1:79:84:52:
         02:01:cf:8c:0a:12:0d:c0:e8:0e:ea:4d:cb:b4:89:e4:dc:72:
         d9:3c:a6:b2:db:23:f3:c9:cd:4e:ba:a4:8d:cc:bf:38:2a:e3:
         f6:34:b6:81:bc:ab:d1:f9:22:2a:df:9a:33:bc:e4:0f:66:e3:
         11:3c:4a:b6:34:c8:32:5b:d4:88:a3:ab:24:9c:d5:ea:48:2a:
         e3:22:b1:5c:2e:fb:1a:e6:cc:d0:62:5f:b1:dc:bd:ff:4d:4d:
         8c:0e:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:48:24 2026 by rpki-client