Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
File:                     7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json)
Hash identifier:          ymzcefh6PGQBJp7UhBikViCUo7fZLTTuMKGoeufXxpw=
Subject key identifier:   79:59:09:3F:6F:70:C1:48:D3:13:9C:B4:BA:F4:DC:96:3E:74:3B:15
Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
Certificate issuer:       /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Certificate serial:       35DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
Manifest number:          35B9
Signing time:             Sat 14 Nov 2026 15:11:47 +0000
Manifest this update:     Sat 14 Nov 2026 15:11:46 +0000
Manifest next update:     Sat 21 Nov 2026 15:11:46 +0000
Files and hashes:         1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: ZfubQZ4IWgylfJpzQreESfB3sOlNJkoMi+oSEhXNA1I=)
                          2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 7bGtPyBGoN1SwqVRrEUHmbCfJdOGkrb5JuyAmWIVvAA=)
                          3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: 2hfGsNVUmbO2vvpF424TRAk1BpXknhQcicom2XdbcDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
                          rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13790 (0x35de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
        Validity
            Not Before: Nov 14 15:11:46 2026 GMT
            Not After : Nov 21 15:11:46 2026 GMT
        Subject: CN=6af87a33-c3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:2e:8e:46:47:f5:22:8b:f2:a5:04:f1:97:
                    91:15:90:f2:d5:64:11:f8:14:0c:4a:43:98:01:50:
                    6d:30:5a:92:39:48:43:12:8f:ad:4c:b1:6b:48:70:
                    4a:91:84:15:c8:f9:a8:51:88:f6:c9:51:5a:58:c5:
                    f6:40:80:75:10:d0:0a:9f:9b:d8:d6:63:b8:36:22:
                    85:45:90:23:65:9e:e8:22:11:03:b3:74:49:e7:64:
                    32:bf:ec:66:8a:a0:8b:fe:f6:38:0e:bf:40:ba:3a:
                    88:72:2f:41:c1:42:66:ee:b4:a1:ce:eb:ca:6f:8e:
                    14:ab:f6:4c:fe:71:9e:19:64:33:6d:ec:e2:4d:b0:
                    f6:7a:ba:7c:da:54:9a:c2:14:ee:b8:6a:20:eb:5a:
                    e2:f0:1e:2d:4f:fa:d9:30:0e:5c:a9:59:e1:5d:be:
                    2e:45:a6:5b:13:33:16:60:47:da:df:94:a9:2b:ff:
                    ea:be:81:2e:bf:e8:df:94:7a:75:3c:94:f0:06:dd:
                    1a:27:65:52:57:85:99:74:bc:9f:51:6c:92:fd:01:
                    53:2d:b0:e7:2c:31:ce:a7:54:ca:c9:ab:f2:68:3a:
                    d6:f6:06:aa:2d:2b:db:5d:b8:b5:43:62:c9:66:55:
                    5b:b7:57:83:4e:84:e5:76:88:9a:1f:7b:9c:cc:45:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:09:3F:6F:70:C1:48:D3:13:9C:B4:BA:F4:DC:96:3E:74:3B:15
            X509v3 Authority Key Identifier:
                keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:64:77:b5:45:7f:5a:fc:ab:d4:6f:36:47:67:1c:cb:0c:a3:
         1b:8b:dd:7e:29:54:35:ad:91:a4:55:b8:fd:64:79:8c:84:6c:
         13:b2:96:3b:d4:31:5d:2a:25:24:90:d9:ac:42:70:56:78:77:
         60:5e:df:d9:21:5c:1d:bf:ef:97:d6:c8:44:e0:bd:26:8f:54:
         cf:9e:06:46:07:46:3b:03:36:b0:37:8e:2e:1a:d4:00:30:90:
         1a:4b:18:49:6e:a3:95:80:0f:08:81:22:b7:5a:98:95:da:d8:
         70:07:a3:0a:16:3f:cc:1e:90:9c:9d:ff:47:40:53:47:81:09:
         3f:22:77:7c:e8:44:55:7d:25:32:02:15:03:85:19:78:e1:db:
         fa:a8:3e:bc:a6:23:ab:a2:2d:ec:cc:01:96:59:fe:c6:48:c6:
         fd:92:87:21:65:be:5d:15:6d:78:5c:c4:c1:29:d8:c9:82:00:
         67:58:3a:a3:9e:3b:32:35:49:0b:ef:27:37:8f:a8:82:1a:85:
         d7:bd:db:41:df:5f:2d:b2:e4:8c:6b:6c:3d:40:b7:82:61:c0:
         b9:a5:a7:35:92:00:cd:15:b1:75:d3:9f:c8:8f:b8:75:3c:66:
         b5:b6:ae:26:2e:5b:db:90:5a:84:d4:a3:4b:01:db:4a:4c:21:
         f4:b3:a1:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx
MzIyRjFGNzUwHhcNMjYxMTE0MTUxMTQ2WhcNMjYxMTIxMTUxMTQ2WjAYMRYwFAYD
VQQDEw02YWY4N2EzMy1jM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03EujkZH9SKL8qUE8ZeRFZDy1WQR+BQMSkOYAVBtMFqSOUhDEo+tTLFrSHBK
kYQVyPmoUYj2yVFaWMX2QIB1ENAKn5vY1mO4NiKFRZAjZZ7oIhEDs3RJ52Qyv+xm
iqCL/vY4Dr9AujqIci9BwUJm7rShzuvKb44Uq/ZM/nGeGWQzbeziTbD2erp82lSa
whTuuGog61ri8B4tT/rZMA5cqVnhXb4uRaZbEzMWYEfa35SpK//qvoEuv+jflHp1
PJTwBt0aJ2VSV4WZdLyfUWyS/QFTLbDnLDHOp1TKyavyaDrW9gaqLSvbXbi1Q2LJ
ZlVbt1eDToTldoiaH3uczEWGFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlZCT9v
cMFI0xOctLr03JY+dDsVMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE
QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ
cjQ0YkFxNGlsVm9USXZIM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmGR3tUV/Wvyr1G82R2ccywyjG4vdfilUNa2RpFW4/WR5jIRsE7KWO9QxXSol
JJDZrEJwVnh3YF7f2SFcHb/vl9bIROC9Jo9Uz54GRgdGOwM2sDeOLhrUADCQGksY
SW6jlYAPCIEit1qYldrYcAejChY/zB6QnJ3/R0BTR4EJPyJ3fOhEVX0lMgIVA4UZ
eOHb+qg+vKYjq6It7MwBlln+xkjG/ZKHIWW+XRVteFzEwSnYyYIAZ1g6o547MjVJ
C+8nN4+oghqF173bQd9fLbLkjGtsPUC3gmHAuaWnNZIAzRWxddOfyI+4dTxmtbau
Ji5b25BahNSjSwHbSkwh9LOhqw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:55:47 2026 by rpki-client