Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
File:                     exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json)
Hash identifier:          V1Q46KLqweFKUBow9gLaRuR5WBPTUiWgV/0AVzCe5yI=
Subject key identifier:   CC:8F:22:F3:55:6C:DF:FC:95:C2:BD:CA:79:8A:B1:F4:58:32:75:A9
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Certificate issuer:       /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial:       04C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
Manifest number:          04B6
Signing time:             Sat 14 Nov 2026 23:39:44 +0000
Manifest this update:     Sat 14 Nov 2026 23:39:43 +0000
Manifest next update:     Sat 21 Nov 2026 23:39:43 +0000
Files and hashes:         1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: S1UJ0oVslauiTY5ivhrV3BiZFddbIbFNueiAhMWWoiw=)
                          2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: cbgFwuJsaQfvpKjS6OYVwgTJIz46R1Gj8ZHc8UQN4gQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
        Validity
            Not Before: Nov 14 23:39:43 2026 GMT
            Not After : Nov 21 23:39:43 2026 GMT
        Subject: CN=6af8f140-98fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:c6:2b:d9:1e:c5:2c:80:85:86:a4:0d:87:
                    81:a3:33:bd:bc:ef:89:1b:f3:d4:14:31:5a:27:29:
                    e5:97:21:39:70:a9:a7:12:bb:b3:a5:3b:30:70:85:
                    40:6e:e9:9f:5a:eb:31:e7:31:1d:d5:a1:79:82:4e:
                    57:7b:a0:54:a9:99:0a:6e:76:af:08:54:65:ef:63:
                    df:db:31:4a:7d:33:71:be:4a:b4:05:6f:3c:d1:2e:
                    8f:84:7a:a1:98:1e:8a:5f:f3:54:fc:8f:5f:6e:56:
                    0d:5d:c8:ea:fc:d8:4d:58:41:70:64:59:85:db:31:
                    0a:14:94:86:4a:c5:3f:66:91:cb:48:ed:77:85:84:
                    9e:1d:f6:60:ae:43:2c:14:6c:41:69:f9:c3:89:87:
                    b2:04:1a:6f:61:fb:ed:8b:b7:3f:04:10:20:63:23:
                    1e:c1:78:04:29:9c:89:17:49:d2:a6:d9:6c:05:aa:
                    3f:72:6b:9d:be:cb:dc:56:8c:59:27:ec:ac:00:9f:
                    3a:68:db:49:c7:af:90:29:ee:4f:99:47:a8:a0:a3:
                    3c:a6:d8:02:17:b9:1e:41:26:3f:d4:4c:41:61:7b:
                    79:68:f2:e9:0f:b4:0f:2a:db:06:04:ef:ca:28:d8:
                    2f:6e:62:8d:d8:fe:33:32:3e:2d:61:22:45:10:4b:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8F:22:F3:55:6C:DF:FC:95:C2:BD:CA:79:8A:B1:F4:58:32:75:A9
            X509v3 Authority Key Identifier:
                keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:08:4a:fd:d6:09:03:3c:33:68:3d:ea:74:b3:29:45:e2:c7:
         2c:b9:e4:ab:00:1f:8d:04:8e:9f:c4:5a:ae:94:82:fa:34:26:
         8c:b0:e3:15:37:6b:06:57:7b:d0:13:42:21:d8:5c:67:cd:d1:
         ed:7e:38:65:4a:f8:c5:ec:6e:6f:cf:e2:5e:15:e3:66:aa:f1:
         d9:b0:50:7a:0e:7f:a8:b2:ab:7e:51:d9:b7:72:5d:8d:f2:e2:
         fd:7f:87:a9:c6:fe:e0:9e:32:85:97:a4:e9:8f:95:9a:df:62:
         68:18:58:e1:4a:0b:fd:9c:38:2f:a8:29:c2:36:1c:6b:b2:6a:
         7f:65:7e:25:67:31:76:42:95:4d:38:c7:1b:53:e9:fc:cf:f4:
         61:b6:c3:ce:65:6f:e4:eb:5b:d9:cd:32:7c:41:30:c1:e7:3a:
         3b:af:2c:8c:ee:d3:97:dd:f0:99:a0:a4:af:f3:1c:1b:9f:e5:
         a9:95:77:f4:15:53:0d:5f:eb:c9:98:3e:b9:6b:6e:f8:1d:ef:
         cc:2a:9a:9d:80:5d:85:a5:f2:d3:02:39:77:50:e4:1f:fa:bb:
         b1:0f:61:e2:3f:27:91:11:43:d9:26:f6:c5:b7:05:87:06:4a:
         5a:52:b2:28:43:f5:d2:9b:75:69:3a:af:e5:12:98:b9:be:75:
         dc:1d:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:45 2026 by rpki-client