Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
File:                     O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json)
Hash identifier:          Xgo0hIzghWQ5oA9cJBjpO14IEx1brVxKECQy1tdeqnM=
Subject key identifier:   E7:9A:48:CD:BE:FD:BC:32:14:D4:F8:F1:2E:4E:52:B0:D7:CF:9F:87
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Certificate issuer:       /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial:       034B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
Manifest number:          033D
Signing time:             Fri 13 Nov 2026 00:42:28 +0000
Manifest this update:     Fri 13 Nov 2026 00:42:27 +0000
Manifest next update:     Fri 20 Nov 2026 00:42:27 +0000
Files and hashes:         1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: 5JdJL9SNPgfKAqoTLXKoEjAVO9jv2QggseZoxXnY2eE=)
                          2: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: oMJnsHEpWXXhDLwnF6dufDjEuC/WH5wJQLw5rJAWOBE=)
                          3: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: Ip48cdazW4hM6iIWRAVgf+gNfgujxIpBb+M6ahRdDTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 00:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
        Validity
            Not Before: Nov 13 00:42:27 2026 GMT
            Not After : Nov 20 00:42:27 2026 GMT
        Subject: CN=6af65cf4-80b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:f2:e9:5f:b0:61:d4:42:27:02:aa:23:93:
                    8b:22:68:d0:6a:42:8b:5e:36:0e:8e:b4:0e:4e:ce:
                    9a:49:2a:1d:1e:a8:cf:10:be:c0:c7:bd:55:95:88:
                    62:31:5e:69:8b:86:99:f4:46:a3:1b:53:df:71:82:
                    ef:f0:17:57:dd:c8:44:94:ee:51:b5:5e:20:d0:58:
                    21:79:91:7e:f7:17:a9:ac:a8:b4:c9:16:41:0b:7b:
                    c4:90:53:de:18:6e:da:df:7d:66:29:59:93:8e:6e:
                    25:09:a7:88:3b:f9:25:12:2f:71:9e:07:da:ea:bf:
                    c2:fc:15:b8:9a:97:25:f5:55:cc:49:33:61:e6:8c:
                    7e:af:05:9a:1d:07:e6:ef:d0:4d:d5:20:8d:45:8c:
                    e8:9b:5e:14:34:fb:1b:cf:b4:01:07:a1:0b:f2:85:
                    7f:ab:bc:67:3f:5a:12:31:49:d3:f1:33:d1:77:d0:
                    2a:82:06:26:fa:83:b4:11:bd:ee:1e:e3:e0:bb:bb:
                    d9:5e:40:85:da:5f:d2:44:b1:7c:35:03:1a:2b:13:
                    5e:73:cb:a2:61:84:65:ec:ce:b7:31:82:0a:84:c0:
                    58:76:7c:59:3b:78:13:21:7a:4b:07:bc:11:2e:43:
                    5e:c5:46:d1:f9:62:18:a2:81:a2:d6:39:3a:72:a1:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:48:CD:BE:FD:BC:32:14:D4:F8:F1:2E:4E:52:B0:D7:CF:9F:87
            X509v3 Authority Key Identifier:
                keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:3d:e5:d0:ee:dc:80:d5:69:4a:d6:12:f8:33:51:78:01:
         d2:67:6f:37:7b:8e:e4:0b:bf:90:e5:24:13:96:74:f2:0e:24:
         20:22:c6:4a:20:e7:44:b9:b2:d9:d1:fb:8f:91:44:fe:55:a3:
         f8:60:29:ea:44:51:ac:ac:34:e1:7d:90:78:c0:87:51:18:73:
         07:60:1b:aa:c6:63:c6:10:25:89:8d:a2:1a:34:5c:78:a4:a9:
         25:e4:92:8c:de:26:05:80:eb:4a:c8:46:98:29:74:c7:c4:a1:
         02:9c:28:ea:e3:e5:92:c4:03:2d:f5:78:7e:0b:83:c5:e1:18:
         4a:09:6f:92:03:85:43:03:54:3f:f6:bd:f3:88:78:a1:aa:66:
         4d:df:f9:66:26:55:71:3c:ac:3b:89:34:e9:78:1d:97:b8:60:
         b3:d4:c1:00:55:5d:30:b3:bc:34:be:bf:01:0f:e1:ef:c2:c1:
         05:b1:a1:a2:e3:a3:4a:47:5e:ba:c7:de:76:cc:00:82:81:43:
         34:8b:9f:f0:49:78:06:c9:16:a6:e8:f6:78:d0:4f:89:f5:27:
         09:61:d7:3c:11:38:de:ea:87:70:59:fd:dd:06:c1:73:dd:85:
         1d:35:e8:51:54:5f:c6:1d:77:20:a6:92:aa:b7:ee:e5:33:8d:
         9d:cd:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:36:28 2026 by rpki-client