Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File:                     ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier:          YfCV6lSl5VO9eQOShCpTmYtr/+30A8/5rVqiZr4/LCU=
Subject key identifier:   62:A1:13:10:E3:CD:18:15:82:48:FC:BA:04:C2:E5:52:73:70:14:48
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer:       /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number:          0486
Signing time:             Thu 12 Nov 2026 23:48:06 +0000
Manifest this update:     Thu 12 Nov 2026 23:48:05 +0000
Manifest next update:     Thu 19 Nov 2026 23:48:05 +0000
Files and hashes:         1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: Jsb9u9G0nZwgzeYISjJDH2i9kPWYo2S/LDadt3g6fu8=)
                          2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: EDtbFOZ30qxpy27dyAdV7M2WWSG7NvMRonEndm53RCk=)
                          3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: rnGgn8k/c8Zid4oEdERz/qcES9MxLTZSwdtdf5qqEqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
                          rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Nov 2026 23:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
        Validity
            Not Before: Nov 12 23:48:05 2026 GMT
            Not After : Nov 19 23:48:05 2026 GMT
        Subject: CN=6af65036-7735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:c2:0a:85:0f:7f:11:f4:d3:7f:93:94:51:
                    3d:81:b8:c6:5c:ac:7e:68:87:91:e5:21:f8:bd:40:
                    30:e1:74:0c:52:0b:eb:1f:93:d2:36:dd:21:b5:42:
                    29:2a:d6:3d:07:07:cc:28:b3:70:d7:dd:7b:b8:6e:
                    d2:18:0d:7d:ba:a2:3d:33:10:27:b1:3e:90:90:0c:
                    0b:ba:be:91:02:71:f3:f2:22:3d:92:04:f9:85:cf:
                    ee:a5:0b:86:8c:17:87:d0:ef:a3:5a:36:0b:8f:50:
                    52:fd:5f:f1:3c:7e:79:a9:41:ba:10:e8:08:da:4d:
                    d7:05:e9:9f:7b:f9:8d:14:db:3a:42:22:e7:f4:03:
                    2f:a6:a6:1d:7e:5c:72:40:0c:15:28:d0:55:e4:7d:
                    eb:62:42:6b:cb:ec:6a:14:f7:ca:b7:bb:93:0d:70:
                    f9:0d:73:88:37:36:f2:cf:e3:0b:ae:80:7b:46:b5:
                    97:2b:2b:cd:ab:0e:e1:3f:04:45:c8:73:38:5b:af:
                    3c:5d:55:3e:17:a9:10:e4:48:1b:2e:6d:d4:2d:c9:
                    7e:db:8b:bf:76:f5:a8:17:99:fe:4d:ca:86:8d:3e:
                    92:ea:c3:56:9d:a1:1c:50:03:1f:66:fd:09:eb:a3:
                    70:37:d1:00:d9:38:26:5f:15:40:a3:b1:18:6a:f9:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:13:10:E3:CD:18:15:82:48:FC:BA:04:C2:E5:52:73:70:14:48
            X509v3 Authority Key Identifier:
                keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:07:88:04:64:63:9c:9e:9e:a6:9a:cf:e5:8b:16:f9:f6:77:
         6c:fa:c9:9c:c1:88:75:a4:3a:52:e0:0d:de:83:8d:ed:e6:1f:
         00:8f:80:25:09:90:e7:d4:4d:61:11:7b:44:09:c2:47:ce:9a:
         b8:25:69:78:74:b1:c9:5c:c7:ec:f5:df:fc:d4:38:bd:82:1e:
         0f:ed:b1:20:99:56:8d:42:d4:5d:10:85:2b:b5:05:55:ba:ae:
         f7:ad:2d:e1:55:ec:2e:fc:53:40:28:71:d5:96:9c:6a:f0:f3:
         ea:3f:7e:30:35:36:a2:19:49:e7:ad:78:fe:31:90:9c:f5:2d:
         6f:8a:df:d3:4a:1b:1a:c5:ff:63:25:d1:c9:4e:5a:28:2a:f9:
         27:ce:5e:71:83:79:c0:2d:ee:db:29:b8:05:25:90:db:31:3e:
         48:21:60:31:46:83:12:f3:ad:16:3b:93:8a:6c:cc:a4:fc:9b:
         ed:f1:c3:df:51:1d:5b:9f:a4:42:67:32:80:4f:c3:aa:41:5a:
         0f:4d:03:45:51:7a:00:cc:14:24:ae:ae:29:72:cd:29:3c:c1:
         73:97:b1:26:1c:1e:3a:e8:bd:73:3b:27:3c:9f:86:41:6d:38:
         d3:4a:e8:b1:6d:12:c2:b7:fb:e8:df:9e:46:ad:0c:6f:7f:5e:
         c6:38:8a:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF
QzExODVCMTEwHhcNMjYxMTEyMjM0ODA1WhcNMjYxMTE5MjM0ODA1WjAYMRYwFAYD
VQQDEw02YWY2NTAzNi03NzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4rCCoUPfxH003+TlFE9gbjGXKx+aIeR5SH4vUAw4XQMUgvrH5PSNt0htUIp
KtY9BwfMKLNw1917uG7SGA19uqI9MxAnsT6QkAwLur6RAnHz8iI9kgT5hc/upQuG
jBeH0O+jWjYLj1BS/V/xPH55qUG6EOgI2k3XBemfe/mNFNs6QiLn9AMvpqYdflxy
QAwVKNBV5H3rYkJry+xqFPfKt7uTDXD5DXOINzbyz+MLroB7RrWXKyvNqw7hPwRF
yHM4W688XVU+F6kQ5EgbLm3ULcl+24u/dvWoF5n+TcqGjT6S6sNWnaEcUAMfZv0J
66NwN9EA2TgmXxVAo7EYavlaKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKhExDj
zRgVgkj8ugTC5VJzcBRIMB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF
MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX
eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv
Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMAeIBGRjnJ6epprP5YsW+fZ3bPrJnMGIdaQ6UuAN3oON7eYfAI+AJQmQ59RN
YRF7RAnCR86auCVpeHSxyVzH7PXf/NQ4vYIeD+2xIJlWjULUXRCFK7UFVbqu960t
4VXsLvxTQChx1ZacavDz6j9+MDU2ohlJ5614/jGQnPUtb4rf00obGsX/YyXRyU5a
KCr5J85ecYN5wC3u2ym4BSWQ2zE+SCFgMUaDEvOtFjuTimzMpPyb7fHD31EdW5+k
QmcygE/DqkFaD00DRVF6AMwUJK6uKXLNKTzBc5exJhweOui9czsnPJ+GQW0400ro
sW0Swrf76N+eRq0Mb39exjiKHg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:27:11 2026 by rpki-client