Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
File:                     RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json)
Hash identifier:          bO/4P//msT/LVPzjkJAmIKvgIwsOKzw84nX78VAwx1c=
Subject key identifier:   D7:2F:6F:29:D4:C2:96:B9:08:53:80:7C:73:2E:3C:23:BA:DA:FC:40
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Certificate issuer:       /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
Manifest number:          B0
Signing time:             Sun 15 Nov 2026 07:24:03 +0000
Manifest this update:     Sun 15 Nov 2026 07:24:03 +0000
Manifest next update:     Sun 22 Nov 2026 07:24:03 +0000
Files and hashes:         1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: zCUgCeyMkyDrSGExaddYpd1T/+h2oSBJ9rWk6vAcSRk=)
                          2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: 3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 07:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
        Validity
            Not Before: Nov 15 07:24:03 2026 GMT
            Not After : Nov 22 07:24:03 2026 GMT
        Subject: CN=6af95e13-1b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:08:57:7a:69:66:07:ca:2f:bd:a3:60:d3:
                    63:41:1f:e1:57:0d:a3:70:8d:bd:4e:45:aa:8b:26:
                    46:e6:3d:60:45:26:e1:b7:8d:e2:f8:be:16:8e:56:
                    8f:c9:e5:61:67:8a:1a:e2:4f:df:df:b8:30:0d:20:
                    51:9e:be:06:66:74:21:b3:2f:ce:03:1a:d5:d0:20:
                    18:0e:63:fb:cd:53:a4:43:97:50:e7:ea:c7:ae:d7:
                    fc:d9:e8:3b:44:f5:ae:bc:55:5d:ff:17:a0:68:86:
                    bf:29:5c:56:36:41:bd:13:65:40:8a:e5:3c:61:c6:
                    7c:a4:0e:71:23:16:c2:b6:3f:f3:aa:8d:0c:7c:f8:
                    1a:f5:63:23:62:09:4c:18:a9:1a:21:8e:79:c9:ae:
                    45:16:78:4f:7d:1d:ac:c0:b4:ac:ab:9c:02:77:45:
                    58:02:97:33:14:36:ab:9d:6a:9a:a9:b8:61:74:95:
                    ff:e5:cc:1f:3b:99:17:bb:5c:67:7a:21:dc:de:f9:
                    43:61:8e:db:6e:3c:3d:c7:10:56:86:6a:5e:d8:ad:
                    da:c7:d6:7c:ac:44:47:e0:8d:31:21:8f:04:43:90:
                    4a:75:0a:6b:26:09:43:b8:ce:78:f5:96:ab:b3:70:
                    ec:97:2f:80:c5:15:c9:70:30:73:48:c3:3e:0b:0f:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2F:6F:29:D4:C2:96:B9:08:53:80:7C:73:2E:3C:23:BA:DA:FC:40
            X509v3 Authority Key Identifier:
                keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:09:b5:05:10:36:c8:05:4d:40:6f:9c:a0:d2:03:df:3a:
         a7:be:78:c8:6c:b2:13:dc:e8:d5:de:6e:7b:f4:42:f9:de:d0:
         d6:73:20:8a:d9:cb:e9:ae:87:5c:63:40:d2:59:90:bd:fb:f6:
         d2:d2:4f:19:c6:0a:28:57:5a:6f:a2:40:d7:11:9e:a2:a3:54:
         41:f9:f7:10:67:8d:4b:4e:d5:59:ce:ee:2b:77:b1:95:6f:e8:
         cf:69:1c:33:19:61:99:1f:a6:55:9e:19:a3:4c:9e:68:f9:c5:
         ce:91:a4:d0:7b:7a:1c:f9:51:8d:38:53:04:ff:50:d0:cf:d0:
         27:5e:46:e3:dd:cc:aa:f9:b3:f0:e1:bc:c5:34:72:75:10:45:
         c5:b8:39:f4:64:40:fc:43:42:29:33:7a:c0:f1:7d:c4:48:f6:
         37:ab:50:6d:8c:d2:46:37:eb:a8:8e:bb:1e:07:69:0a:4b:00:
         01:f2:72:a6:21:dd:16:1d:b1:95:c5:b2:e7:07:98:c3:d8:7e:
         09:bc:98:39:4d:7a:fc:f3:e6:c8:30:bd:3e:6f:3d:75:7c:b9:
         e0:71:97:77:1a:1f:47:0a:d8:b2:7f:3c:f8:0a:2b:77:d2:1d:
         b8:84:ac:67:65:12:e0:82:90:e9:2d:cc:2e:14:1b:bf:21:d9:
         32:24:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:19:29 2026 by rpki-client