Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
File:                     wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json)
Hash identifier:          BQKQlUqan+KCto32qCnc/rxcJ/Ks7akcFN5Az8lmO5o=
Subject key identifier:   C7:33:02:A9:0D:FF:98:23:C6:18:FC:7B:D9:AD:FD:7C:93:9D:C0:4D
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Certificate issuer:       /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial:       0617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
Manifest number:          0600
Signing time:             Sat 14 Nov 2026 22:43:17 +0000
Manifest this update:     Sat 14 Nov 2026 22:43:17 +0000
Manifest next update:     Sat 21 Nov 2026 22:43:17 +0000
Files and hashes:         1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: r1wjkF0SjTGhnzCm91Ef+Zd7xjzwQI1YewxgY56Cc2o=)
                          2: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: s5fv8+mRtDfk9pBCVUtbj2gLrpPbAQoXM65ky14VMGs=)
                          3: 7273624619B511EC98D2A883C4F9AE02.roa (hash: Kaozs8h4pIYSgZ9O9f8LDiLe5q3PUamTtuYzvZlkZeE=)
                          4: 387C18C819B811EC841B010DC4F9AE02.roa (hash: L5vGSVGO41KMXF9sp4oGTqgrktqUFc1qDcDjO8qNjRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
        Validity
            Not Before: Nov 14 22:43:17 2026 GMT
            Not After : Nov 21 22:43:17 2026 GMT
        Subject: CN=6af8e405-7554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:24:8d:bb:02:b4:63:6f:74:93:b9:4b:9b:
                    c5:59:78:d5:8c:6a:31:17:41:9d:06:d8:71:f5:8d:
                    87:37:68:68:b5:40:0e:74:a5:b3:3e:eb:19:73:6f:
                    93:a2:2a:6f:d9:ea:5b:a0:b7:43:1a:73:9a:74:4b:
                    11:54:cf:00:aa:2b:82:73:54:3b:fd:32:f6:5e:9b:
                    14:0f:5d:4f:64:df:cc:a0:7c:00:28:a5:33:ae:a7:
                    5e:e5:d8:d2:7f:d8:8d:10:00:dd:f2:6e:2b:33:03:
                    71:f8:17:f5:0d:48:8e:7e:62:03:9e:f4:be:42:dc:
                    22:dc:7e:6d:63:19:46:dd:a3:41:63:cb:61:e2:32:
                    3c:17:a2:7c:e4:d9:5b:4b:cc:21:70:76:a5:1b:05:
                    d8:53:b6:06:14:87:52:0e:0e:c4:91:9d:03:e1:03:
                    7b:f0:7e:4e:10:b7:5d:21:60:a3:89:13:60:1b:e0:
                    cc:a9:10:2c:69:03:b3:f0:d7:db:17:27:5e:b4:e9:
                    41:ea:36:8d:74:76:e6:5a:96:7a:f6:cb:32:6f:b8:
                    25:dd:42:25:9f:59:68:44:7d:a6:60:f6:99:4c:90:
                    f2:e9:fb:e5:61:67:13:7e:f1:9b:74:25:80:0e:fe:
                    3f:f4:d5:8f:2e:38:2b:66:6a:4f:26:64:88:2e:ae:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:02:A9:0D:FF:98:23:C6:18:FC:7B:D9:AD:FD:7C:93:9D:C0:4D
            X509v3 Authority Key Identifier:
                keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:97:de:78:9b:d7:db:8e:fa:d2:42:c0:0f:fb:6b:8e:40:
         0a:16:02:d0:50:32:e7:fd:35:7c:70:80:c9:a4:55:ce:a7:70:
         d4:0f:04:f9:50:a2:d7:cc:73:62:47:92:3c:ba:e8:e2:11:cb:
         c5:1d:8c:e5:26:14:eb:3a:9c:40:93:82:b8:b9:9b:10:85:7a:
         26:d1:d0:e8:3b:7f:c2:a9:61:7e:b9:d0:15:de:13:00:2d:84:
         b2:61:b6:d4:bd:3f:0d:77:00:32:27:a8:a8:b0:6c:c8:9d:b4:
         d0:dc:c2:6c:1a:84:4e:df:b2:55:7c:bc:65:5c:e2:45:3c:bb:
         95:ea:74:66:dd:e8:10:42:72:a1:56:f2:5a:de:49:20:cf:25:
         b5:5c:04:d6:bc:84:8b:58:09:c3:ba:3e:b9:3a:05:7d:7f:4b:
         33:bf:24:50:95:83:e3:a5:09:41:91:5a:9f:a3:c0:17:70:4e:
         03:d1:13:7f:40:fd:18:67:93:43:87:a1:69:e5:04:00:e6:7a:
         14:2c:e8:9a:ba:42:74:ca:66:e7:77:99:89:38:8f:e1:f5:44:
         8a:7c:fb:54:a5:b1:0b:49:17:f7:46:ac:17:7e:57:92:8e:cf:
         be:f0:01:e3:27:90:7c:29:0f:c9:95:45:16:a0:6e:90:b8:32:
         50:b6:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:49:36 2026 by rpki-client