Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File:                     9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier:          HljGFTegvaga3rjsqpRQk6tNTABwEzjtOwWbb+rJ9Os=
Subject key identifier:   B5:BE:CD:F0:4D:DB:FC:E3:80:20:63:BF:2B:24:3D:2B:39:0B:C8:63
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       09FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number:          09C2
Signing time:             Sat 14 Nov 2026 19:50:46 +0000
Manifest this update:     Sat 14 Nov 2026 19:50:45 +0000
Manifest next update:     Sat 21 Nov 2026 19:50:45 +0000
Files and hashes:         1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: 3gd02t6F2I0DiU94IITaW5DvEuvhGJQO/QOS6NVBSAs=)
                          2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: 557V948ytFkQmXJP+v3O6OYFApLgKOKU4oIchZma6K0=)
                          3: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: KabuLJ2jMh9Q4wRFwssFjvelmr/DGXwkhCP7WPPdCU0=)
                          4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: y7JlO2eVn5CGG014i1w2l8zlQaUpGUw0Z7qDmj0ckcI=)
                          5: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: YKr4LPiv+8zUeK31cb16siUqLk0ccykz6GVFETQcSkM=)
                          6: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: PWpc1YrCi7YtcELVVhl8DbjOytPByeC79d1ZomEe97A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: Nov 14 19:50:45 2026 GMT
            Not After : Nov 21 19:50:45 2026 GMT
        Subject: CN=6af8bb96-0606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:64:f6:07:44:1f:fd:6a:1a:7f:af:c5:15:
                    a7:f5:2b:e3:97:53:31:58:b0:9c:ca:4d:32:fa:3e:
                    03:45:5b:06:c7:ee:49:de:5d:f4:d9:6d:82:92:50:
                    d0:21:cb:d2:f2:3c:5d:b5:64:81:df:ea:65:79:b8:
                    1a:aa:5d:2d:ec:e8:4d:30:48:42:7c:f2:aa:cf:10:
                    5d:f2:e1:94:f5:a6:9a:db:30:a2:f9:e3:c9:6f:b1:
                    f7:34:89:69:15:35:94:18:e6:65:aa:6a:25:97:7f:
                    a3:3f:cd:a7:f0:f2:4d:79:e6:b5:02:f9:db:9e:5f:
                    f5:6f:b9:49:60:16:9d:21:90:ab:10:62:7b:b8:54:
                    5a:ee:b7:67:4a:86:e6:bf:f2:c8:f6:83:12:57:a7:
                    4c:a9:07:70:c4:9f:ed:b0:4a:ff:f4:08:29:8c:25:
                    0e:f1:54:48:08:e2:12:eb:6b:53:63:45:41:d8:0d:
                    60:7d:cc:67:60:09:31:e8:8e:7e:be:74:0d:e4:c7:
                    ba:11:fc:e1:83:f3:a9:99:ad:c4:77:67:7b:cc:52:
                    3e:83:72:86:77:2f:3b:f0:83:5f:9b:ce:79:db:f7:
                    70:a3:c2:1e:54:4b:a4:f0:8c:54:c9:21:46:5e:c1:
                    0d:c8:ae:82:b4:f0:d7:c2:c3:d4:67:9e:82:fb:8b:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BE:CD:F0:4D:DB:FC:E3:80:20:63:BF:2B:24:3D:2B:39:0B:C8:63
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:10:98:b0:a8:b1:a8:e1:05:8c:a5:86:b1:8f:5c:db:2b:
         b7:73:8e:b4:ac:80:77:5a:dd:be:66:19:13:55:a0:0b:19:51:
         22:a8:80:de:72:9c:e6:a1:93:1e:ef:27:8a:ca:13:f5:dc:82:
         9a:62:70:50:7c:72:e3:58:08:91:47:4b:cb:cb:7d:69:6f:6f:
         58:64:a4:ba:d8:c1:88:5c:cc:c4:10:18:37:7c:de:ce:a7:2d:
         6b:a2:2f:a4:fc:f4:13:e4:89:13:c3:0b:92:24:f8:96:fc:80:
         2c:bb:f7:be:ea:bc:21:c1:ed:07:40:59:14:67:7a:b4:48:70:
         80:70:80:99:e8:a9:64:1e:30:b9:8c:05:66:eb:7a:22:a1:70:
         c6:8f:3c:19:d4:2e:c6:3b:be:52:08:7d:95:f7:d9:fe:6c:96:
         e9:8f:8f:be:db:e9:f4:d5:03:6d:4e:38:cf:d1:d8:01:54:9b:
         bd:da:5e:58:9f:08:9d:87:45:c6:f6:ef:bb:59:25:80:8f:57:
         a5:29:74:88:2e:6b:72:32:64:9a:31:53:65:84:1d:82:92:d2:
         20:3b:59:b9:22:c0:b9:ac:34:00:06:61:c5:de:9a:0d:fe:25:
         d3:e2:02:b2:43:58:fc:64:dc:79:ef:a0:89:65:de:ce:81:30:
         f2:72:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:54:16 2026 by rpki-client