Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
File:                     hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json)
Hash identifier:          Lap53z7PobcFuKhbswB3EGhV+xbv9LBxnY3QWzZlmg8=
Subject key identifier:   2B:E4:87:E6:7B:76:AC:C6:0B:FE:9B:83:36:29:4A:FF:8A:A5:A6:30
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Certificate issuer:       /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial:       030E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
Manifest number:          0302
Signing time:             Sun 15 Nov 2026 00:55:24 +0000
Manifest this update:     Sun 15 Nov 2026 00:55:23 +0000
Manifest next update:     Sun 22 Nov 2026 00:55:23 +0000
Files and hashes:         1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: aV+LXsKVEfO4MPNt4v5eOFHdT2xUS+scPOO97TU3tZY=)
                          2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: 7p4rLHYnygUc3vxsznjWwl4rW0fbM1D6EfxyvZyU7Rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
        Validity
            Not Before: Nov 15 00:55:23 2026 GMT
            Not After : Nov 22 00:55:23 2026 GMT
        Subject: CN=6af902fc-1ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:e8:6b:bf:c7:bd:b9:38:7b:f6:c9:45:25:
                    71:ba:2e:1f:9a:d7:fd:c5:86:49:b5:ac:e5:e5:e6:
                    bc:4b:95:f7:40:b5:4a:3f:00:38:f0:c7:a8:23:da:
                    cc:83:ee:09:36:a2:0f:ba:44:ce:c3:a6:a0:ef:36:
                    c7:7d:15:45:e8:36:b9:a9:62:7e:ea:6c:76:26:4b:
                    52:b4:c3:d5:31:99:86:a6:5b:4e:47:30:fd:64:63:
                    14:9d:95:9b:eb:50:ea:6e:7f:21:9b:4c:7d:9f:df:
                    51:b7:5f:b4:62:83:5e:6c:1c:9a:f9:ce:a0:88:1e:
                    6b:33:28:38:cc:2c:8f:48:2d:02:86:22:7c:08:59:
                    ca:1b:9d:d8:83:e2:8a:fe:02:33:e0:c5:a9:ef:10:
                    ab:8b:2a:54:34:ea:c9:89:c5:ea:3a:97:be:77:7d:
                    e4:07:6f:57:ad:06:7f:e6:f5:4c:f6:ce:f3:2a:3e:
                    04:51:69:36:42:69:a8:36:65:20:8b:59:cd:d6:40:
                    00:f9:7c:9b:05:22:15:b0:60:14:a0:ff:14:23:e7:
                    f9:89:ad:a7:6d:e0:c5:b3:8f:56:df:6a:02:95:f7:
                    b7:f1:b3:69:59:d4:d8:92:49:45:c1:97:1b:0c:fb:
                    b8:e1:7d:d7:8b:eb:87:9a:40:1b:27:60:bc:f0:46:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E4:87:E6:7B:76:AC:C6:0B:FE:9B:83:36:29:4A:FF:8A:A5:A6:30
            X509v3 Authority Key Identifier:
                keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:72:de:da:54:6d:50:3f:de:c9:37:23:48:ad:d9:ee:49:
         8c:61:55:ee:57:9d:d1:1b:30:d4:40:d3:6e:1d:d2:fc:8e:44:
         c0:ad:4f:0c:49:32:54:e9:49:9c:a4:2d:c3:29:6d:cc:6d:44:
         f0:5c:64:16:b9:f8:a6:4e:83:f7:fe:50:5b:9b:39:da:51:88:
         62:a0:25:83:27:14:08:74:ad:c0:aa:e3:27:51:57:76:f4:b4:
         85:17:c9:fd:15:28:4e:85:9d:38:11:6a:fb:da:a0:2f:dd:dd:
         c3:9f:2b:34:69:09:75:d8:fa:9a:e3:ef:f2:5f:1c:49:fb:ed:
         d8:6f:a5:b4:b6:a4:57:03:6e:b9:41:69:49:aa:7b:b4:85:b5:
         b5:6e:92:29:36:11:0e:17:91:4d:aa:26:d2:61:c8:96:5b:f0:
         da:6a:a2:87:81:92:74:c1:c4:f9:13:3c:33:7b:5f:ee:06:b2:
         bf:38:98:7f:51:bc:7d:f5:3c:a9:33:64:46:18:93:61:3c:28:
         23:59:a6:3e:02:2c:70:79:09:0c:52:79:dd:cd:48:31:dd:46:
         14:4d:31:42:61:d1:ac:6d:0b:64:9a:d5:1a:10:af:e9:1d:f1:
         92:c3:11:34:ff:d6:06:54:eb:48:c5:46:04:38:2d:17:7e:ff:
         70:56:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:45:19 2026 by rpki-client