Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File:                     Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier:          em/uIAguBgnEESrgMAN+83hXYvbiifU6NwW9MHCMaDI=
Subject key identifier:   94:20:86:EB:90:BF:15:08:C5:76:7E:A7:D3:91:4D:59:AD:D4:3A:2F
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer:       /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number:          E8
Signing time:             Fri 13 Nov 2026 06:41:11 +0000
Manifest this update:     Fri 13 Nov 2026 06:41:11 +0000
Manifest next update:     Fri 20 Nov 2026 06:41:11 +0000
Files and hashes:         1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: znn4TEnM1brugeEYh4cac54DmTMjS9Cwrv+82jmzyZI=)
                          2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 06:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
        Validity
            Not Before: Nov 13 06:41:11 2026 GMT
            Not After : Nov 20 06:41:11 2026 GMT
        Subject: CN=6af6b107-01af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:e3:c8:6f:f0:e4:ef:15:59:48:0a:9c:ce:
                    41:e5:bb:59:7e:94:92:ea:23:ad:68:69:6f:2f:20:
                    19:34:95:57:94:f6:b1:e7:85:8b:a8:02:69:76:4c:
                    85:c0:11:62:71:e8:42:84:96:2d:50:b3:51:ff:28:
                    a6:b1:98:89:bf:c7:d3:b5:88:5d:ee:f0:a0:42:c4:
                    83:94:06:48:3f:f9:47:c5:3e:ff:cd:d8:40:2d:f7:
                    de:25:73:a1:0b:af:04:b9:19:2f:eb:ec:82:ff:57:
                    bc:51:73:b6:b8:c4:f5:f1:8e:a7:f4:12:34:19:37:
                    b4:15:22:a0:6f:e2:0a:45:72:a1:b9:1e:b7:28:05:
                    94:2e:07:b0:b2:6e:2e:77:01:1f:46:2d:11:66:97:
                    47:1f:3f:4e:ee:13:0d:d7:48:49:f0:4b:ea:2b:a6:
                    f6:bc:30:31:9c:10:f6:e6:bb:2f:52:5c:fd:13:e5:
                    7c:a0:59:40:bc:6a:ef:0e:7d:ff:c6:1e:ba:5e:70:
                    58:30:66:c8:0a:ff:6c:4c:99:a1:ba:f3:84:51:09:
                    0a:0e:99:0b:44:17:d9:89:e5:63:4e:fa:4a:da:7b:
                    99:9a:be:63:b4:1f:f4:3a:7e:1b:59:51:1a:99:a1:
                    7d:ed:c6:50:54:49:ad:61:43:45:48:90:ff:5a:86:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:20:86:EB:90:BF:15:08:C5:76:7E:A7:D3:91:4D:59:AD:D4:3A:2F
            X509v3 Authority Key Identifier:
                keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:c8:14:66:6c:ca:f2:2a:83:9d:85:14:75:58:64:eb:9b:
         0b:4a:35:ba:48:ce:c6:77:b2:0d:f6:56:bc:e7:a9:86:5d:0b:
         72:e1:51:c8:19:58:7b:fc:07:37:17:c4:27:8c:5f:52:90:f4:
         1d:cb:28:5a:dc:53:06:ee:70:cb:83:8d:a7:1a:83:5e:c5:81:
         cc:49:7f:6f:62:01:81:8c:56:de:03:2a:25:4b:f5:44:de:04:
         f2:44:ab:03:50:29:bb:ea:94:0e:a5:84:8e:1b:71:0c:06:49:
         d5:a5:24:8d:60:3f:22:69:6f:de:12:2e:63:a8:26:2d:f2:d0:
         ca:1f:30:21:05:08:f7:44:9c:20:04:4c:c6:c5:df:43:e7:2a:
         80:e8:5d:61:22:fc:b4:d5:1f:3a:e3:5e:f5:1b:3f:b7:b7:68:
         08:79:e3:30:94:a2:03:87:70:25:e4:a5:bb:5c:f6:7e:ea:4f:
         35:ff:9e:dc:d5:db:ba:3d:f7:17:3e:ae:62:17:9f:e7:d4:23:
         43:04:0e:15:79:6f:a9:73:a8:ad:0a:69:ee:87:b3:68:01:e4:
         c1:da:5d:86:50:df:10:35:d5:d9:a3:e6:9c:5e:ae:11:e6:17:
         84:6a:77:ed:ad:86:cf:0a:7d:b0:84:d3:4d:f8:8f:be:e2:74:
         3d:1a:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:58:40 2026 by rpki-client