Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
File:                     vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json)
Hash identifier:          X0TQIsisUaGyPQpQ0BbhHKZdR2HeilNGbJj7wbCC+h4=
Subject key identifier:   A3:DC:85:0B:9F:86:7A:1C:DB:DB:95:35:34:40:03:DB:34:EE:54:7E
Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B
Certificate issuer:       /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
Certificate serial:       07B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
Manifest number:          07AA
Signing time:             Sat 14 Nov 2026 21:20:18 +0000
Manifest this update:     Sat 14 Nov 2026 21:20:17 +0000
Manifest next update:     Sat 21 Nov 2026 21:20:17 +0000
Files and hashes:         1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: LIKiNE1j4PGXJJTK3VNM06HoTD7L7Bi8PyieB7o2ly0=)
                          2: 6ABBD5A685BC11F18CB8D22861A30FBC.roa (hash: VxzmPYBhXYdGlXs9+6yOToX6WdcmvG+Fn2WuQ102HHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 21:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972 (0x7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
        Validity
            Not Before: Nov 14 21:20:17 2026 GMT
            Not After : Nov 21 21:20:17 2026 GMT
        Subject: CN=6af8d092-f8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:25:3b:60:7d:ba:0d:71:fc:5d:7e:7f:6b:
                    b8:9b:5a:d2:14:49:5e:04:e6:18:54:85:20:fc:33:
                    84:57:da:89:24:01:c0:78:b9:c2:58:03:d9:49:df:
                    c0:c2:1c:d6:65:3c:2a:14:fc:e7:2c:f2:52:d3:b5:
                    2c:5e:9a:3c:36:a8:f1:40:fe:b9:8d:87:f0:5b:37:
                    49:6f:cb:b5:ae:72:34:dd:5b:e5:dd:34:81:cf:18:
                    1a:48:43:39:e4:85:21:35:59:cc:67:c9:60:71:94:
                    3a:6a:8c:ad:17:de:ae:24:c2:ee:12:a5:17:6e:bf:
                    5c:de:39:ae:46:d8:7e:db:f5:11:e3:47:80:75:4b:
                    7b:25:4a:d5:3a:c3:10:61:ec:9c:72:55:14:2b:8d:
                    0f:9b:97:75:1b:80:16:c8:33:00:2a:ba:64:0f:5d:
                    55:83:d5:43:61:d7:af:02:ae:a0:7f:03:82:1d:9e:
                    4d:a5:7a:98:45:9e:de:38:79:63:c4:28:18:23:08:
                    7b:c2:f7:fd:4e:25:24:68:4e:6a:68:b1:6b:21:c9:
                    be:1f:24:cc:17:d9:55:43:f2:1f:61:7a:76:76:84:
                    a8:f9:4b:61:36:5e:d4:f6:82:c6:0a:90:44:e4:05:
                    62:bb:8f:09:95:c3:61:5a:c4:91:78:42:f8:61:9b:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DC:85:0B:9F:86:7A:1C:DB:DB:95:35:34:40:03:DB:34:EE:54:7E
            X509v3 Authority Key Identifier:
                keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:c7:b3:73:d0:fc:be:17:82:b7:8f:81:64:d2:e8:59:21:
         04:20:78:b0:9c:e3:1b:83:5a:5b:3f:e6:45:d9:5c:21:f2:65:
         74:08:09:6a:70:82:ec:f2:09:34:e4:14:31:96:1e:14:f4:a1:
         c8:1f:48:8e:22:5e:d0:c5:3b:c0:da:ec:14:d8:4b:32:b8:32:
         5d:67:e7:ba:cc:b4:f2:b6:c1:9b:63:c4:0f:48:92:5e:d1:2d:
         24:83:7d:e0:2e:4a:67:6f:29:a9:47:59:37:d7:31:8b:7b:51:
         7b:08:2b:f8:db:82:20:ae:9c:2e:f5:71:ab:ea:58:f3:9f:16:
         b2:06:74:6d:66:79:74:bb:96:9e:00:61:e7:54:d3:f3:0a:50:
         bb:1b:cf:10:c0:45:4e:37:05:d8:f2:63:4f:e6:98:33:7f:da:
         14:36:b3:ba:f8:ca:e2:20:ab:e5:96:63:21:bc:59:f4:d5:67:
         28:62:a1:13:5b:9a:97:4b:8f:ac:a6:43:b9:f0:30:69:5d:cf:
         d0:03:ff:19:0b:81:86:b8:26:d1:b4:1f:d7:20:11:7b:aa:76:
         79:76:41:1c:62:bf:3c:a8:ab:1a:55:18:b4:82:a4:9b:8d:9d:
         ad:b0:95:fa:fb:3c:bc:08:d2:ab:70:f4:1d:0a:82:bf:09:30:
         b3:20:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:49:24 2026 by rpki-client