Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
File:                     kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json)
Hash identifier:          SQMLrbniJ+b87C65REz9bJ93kpUmi04bGepRRyoDIBg=
Subject key identifier:   2E:21:73:F1:F4:FC:AC:3A:88:14:1D:48:EB:56:40:03:17:1B:5C:77
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Certificate issuer:       /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial:       0CB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
Manifest number:          0C7E
Signing time:             Sat 14 Nov 2026 18:36:53 +0000
Manifest this update:     Sat 14 Nov 2026 18:36:53 +0000
Manifest next update:     Sat 21 Nov 2026 18:36:53 +0000
Files and hashes:         1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: rk1uKzaZoopun7IgooKNFR1HPulnBywtoeE3q/3iPC8=)
                          2: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: j5PopsmOwZFXKKisotFRY1R3qhxNhXf+mgbfOulCpEE=)
                          3: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: GS1ZWCrOmI/wzMrtSy23rOps4nyG5A3UiWlzO5POe50=)
                          4: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: nI/6MDunIRDvmHBfJBx95Y0vV2wSohzwNZEZUy5WKGA=)
                          5: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: nim0r8cX0AWo+u+y8biXKnG294pD1aj3IrEpuP3v1ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 18:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
        Validity
            Not Before: Nov 14 18:36:53 2026 GMT
            Not After : Nov 21 18:36:53 2026 GMT
        Subject: CN=6af8aa45-43ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:31:9e:5e:9d:7f:03:9e:8f:e8:eb:b3:88:
                    e4:0f:df:6b:46:d2:79:b8:e2:fc:29:91:25:45:9c:
                    e7:10:ee:53:0d:36:5a:78:2e:70:e0:40:25:8b:54:
                    30:c9:45:bb:73:de:82:f9:e6:7a:7d:e3:7a:77:22:
                    02:82:e2:84:39:53:6a:db:76:e6:92:7f:6f:41:86:
                    54:03:93:28:85:04:8e:c2:be:78:95:8a:28:cc:3a:
                    ef:d3:9a:4a:0c:f4:67:3b:22:c1:7c:0f:65:18:17:
                    f9:71:5a:5b:49:29:a5:a2:16:2c:8d:ab:b3:b0:e0:
                    c4:7f:e8:8d:3b:9d:ef:6b:51:31:9f:c2:50:e9:bb:
                    c1:b7:01:78:4a:3f:85:a5:8c:f6:38:37:5e:72:f7:
                    d1:82:4a:cb:aa:ba:ab:1e:52:e9:2e:07:1a:6d:61:
                    ca:fe:86:b2:c3:7d:1a:82:2a:58:65:ff:78:2a:3c:
                    8b:c8:ea:f2:12:82:a6:d1:2c:76:ee:01:d8:a7:2f:
                    83:b0:9e:0b:52:a8:54:4d:6d:34:35:8c:1d:80:58:
                    f3:bd:a9:67:2e:74:62:b9:da:4b:d7:33:89:96:2f:
                    b7:24:a9:1b:98:f7:ab:6d:f4:dd:03:5a:44:46:7c:
                    84:f7:6a:b6:26:51:bd:89:77:3a:74:12:5e:de:70:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:21:73:F1:F4:FC:AC:3A:88:14:1D:48:EB:56:40:03:17:1B:5C:77
            X509v3 Authority Key Identifier:
                keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:c1:b9:71:e7:50:5d:28:90:08:71:f6:3d:04:dd:d2:40:f6:
         7d:ae:cb:b9:fb:57:33:33:8e:20:bb:3d:bb:9e:46:8b:49:7f:
         73:89:b7:ea:33:26:fe:9f:e2:7f:15:26:41:92:9a:9d:82:64:
         37:fb:40:d9:b4:e2:72:53:2f:20:59:71:cc:1d:d1:6b:26:97:
         11:b8:ae:34:dc:02:61:1c:8a:43:d7:eb:77:40:af:76:e6:f8:
         4a:68:d5:c7:0d:53:e1:58:43:b1:11:85:2e:3a:83:86:87:26:
         7c:1c:dd:f2:55:ee:84:f6:2f:1b:63:36:0e:b1:19:86:a3:51:
         87:d3:27:1e:ec:78:e7:5b:21:e6:44:a0:68:3d:a0:78:ef:21:
         e5:f2:dd:d9:64:e5:38:2b:cd:4b:54:6b:6a:2c:54:49:5c:96:
         d6:a6:51:fa:27:46:28:2e:95:86:55:a7:90:69:84:47:8f:9a:
         58:21:7d:55:34:b9:6d:8e:5f:10:21:ee:3c:eb:b0:b3:ee:77:
         f3:b1:5f:6c:18:93:a0:2c:85:23:06:91:b0:b9:35:61:7c:53:
         ba:27:e4:8b:d1:a1:8d:b2:44:5e:52:53:74:e4:39:be:60:7a:
         16:48:59:d4:d7:f3:ed:8c:1d:76:4c:75:4d:c0:e2:ea:32:a1:
         f5:96:6f:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC
RkJBREE1N0UwHhcNMjYxMTE0MTgzNjUzWhcNMjYxMTIxMTgzNjUzWjAYMRYwFAYD
VQQDEw02YWY4YWE0NS00M2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAixkxnl6dfwOej+jrs4jkD99rRtJ5uOL8KZElRZznEO5TDTZaeC5w4EAli1Qw
yUW7c96C+eZ6feN6dyICguKEOVNq23bmkn9vQYZUA5MohQSOwr54lYoozDrv05pK
DPRnOyLBfA9lGBf5cVpbSSmlohYsjauzsODEf+iNO53va1Exn8JQ6bvBtwF4Sj+F
pYz2ODdecvfRgkrLqrqrHlLpLgcabWHK/oayw30agipYZf94KjyLyOryEoKm0Sx2
7gHYpy+DsJ4LUqhUTW00NYwdgFjzvalnLnRiudpL1zOJli+3JKkbmPerbfTdA1pE
RnyE92q2JlG9iXc6dBJe3nCOvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4hc/H0
/Kw6iBQdSOtWQAMXG1x3MB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1
REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS
X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4cG5cedQXSiQCHH2PQTd0kD2fa7LuftXMzOOILs9u55Gi0l/c4m36jMm/p/i
fxUmQZKanYJkN/tA2bTiclMvIFlxzB3RayaXEbiuNNwCYRyKQ9frd0Cvdub4SmjV
xw1T4VhDsRGFLjqDhocmfBzd8lXuhPYvG2M2DrEZhqNRh9MnHux451sh5kSgaD2g
eO8h5fLd2WTlOCvNS1RraixUSVyW1qZR+idGKC6VhlWnkGmER4+aWCF9VTS5bY5f
ECHuPOuws+5387FfbBiToCyFIwaRsLk1YXxTuifki9GhjbJEXlJTdOQ5vmB6FkhZ
1Nfz7Ywddkx1TcDi6jKh9ZZvXA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:33:35 2026 by rpki-client