Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
File:                     pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json)
Hash identifier:          2TduM37nUE/PHXeARMR4wTzBqQo5tZtugNuh7VwjtvY=
Subject key identifier:   41:13:9D:03:60:9C:C1:B7:1C:C2:22:01:83:3B:E8:F0:D1:78:E1:58
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Certificate issuer:       /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial:       034C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
Manifest number:          033E
Signing time:             Sun 15 Nov 2026 00:43:59 +0000
Manifest this update:     Sun 15 Nov 2026 00:43:59 +0000
Manifest next update:     Sun 22 Nov 2026 00:43:59 +0000
Files and hashes:         1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: JqGLfJqosTByJ0GcU6+sEWpJMzkvqLgSixzXYGVgo0A=)
                          2: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: GVC6U610pMHMcyKuQxjCHiThOxCsNHGHebCuK1HMVfM=)
                          3: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: WwNN5yiX17Hff/LWCCJhPsAOtcMIwoaI7KVP5Zs7sOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
        Validity
            Not Before: Nov 15 00:43:59 2026 GMT
            Not After : Nov 22 00:43:59 2026 GMT
        Subject: CN=6af9004f-a90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:17:1a:6f:94:4f:4f:3d:53:55:78:70:9e:
                    c1:6c:3c:65:58:a9:99:55:1d:d0:49:ba:ea:89:91:
                    a3:bc:92:cb:79:08:38:dc:a3:ef:32:b6:89:54:a6:
                    44:38:c3:2e:07:c3:3a:c8:b7:f1:53:47:6d:0d:27:
                    55:af:92:60:b4:84:1c:11:b0:da:d6:c0:00:ca:fc:
                    19:aa:b2:83:5d:33:19:d1:b0:d4:c4:13:76:1d:c0:
                    cb:e7:2a:ee:9e:3f:f9:48:4d:28:87:b8:1a:fe:19:
                    21:52:5f:3b:af:54:16:bc:95:5a:14:c1:b4:0c:67:
                    4d:08:70:79:ac:ab:cd:1a:ab:e4:13:5f:4f:1b:84:
                    c5:9f:f6:be:a3:ed:07:d5:01:7a:50:6a:c3:8e:7b:
                    09:81:81:72:86:a1:16:4b:69:0f:50:c2:90:34:96:
                    f0:79:47:4b:df:1a:c8:bf:be:7a:05:cc:b5:70:b7:
                    e7:b9:14:81:cf:69:1b:fa:7d:01:2d:1a:be:e2:de:
                    3d:c9:4d:06:91:d0:44:3d:c7:b8:7b:de:c8:52:a7:
                    ae:07:d0:51:c9:e8:94:87:7e:76:86:80:47:a2:1b:
                    9b:d6:76:c9:d6:6f:0b:9e:c4:b9:d9:ea:4c:f8:9e:
                    ae:89:b1:39:e1:2e:6f:53:a0:22:c5:cb:11:74:cc:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:13:9D:03:60:9C:C1:B7:1C:C2:22:01:83:3B:E8:F0:D1:78:E1:58
            X509v3 Authority Key Identifier:
                keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:9b:39:f7:9c:63:cf:da:96:e6:36:94:03:1d:77:52:49:
         3c:f5:a1:b1:e5:d3:d9:d5:49:9a:fb:57:b5:21:c4:45:e4:15:
         eb:bb:aa:c1:44:b5:21:3f:16:74:3c:8e:a6:22:45:ed:63:c5:
         59:2e:ec:0b:78:54:98:5b:f5:d7:fd:aa:fa:e1:53:58:af:a4:
         f4:a1:11:b8:d0:ab:02:53:87:d7:b0:c5:c7:e8:37:32:72:39:
         f2:a9:a4:cf:14:80:e4:d4:5c:1e:4d:00:8e:00:88:ab:ef:f8:
         1b:69:85:8b:59:d6:fa:a0:f4:19:fc:52:cd:27:17:ca:1e:d6:
         cf:f1:93:e8:5e:08:02:75:43:f0:41:0b:e1:43:c5:3b:bc:8a:
         01:d5:b2:ed:28:40:cf:78:1c:8f:d4:65:db:a1:2d:19:3d:f2:
         6b:8a:33:9e:05:b5:15:af:9b:83:d5:0e:18:29:dd:17:f2:0c:
         94:45:9a:15:72:e0:62:17:7e:5f:39:1c:3d:27:02:4d:a3:20:
         59:3e:46:2b:ee:a9:8b:59:3a:1f:54:12:f5:80:6e:26:f4:79:
         22:61:b0:20:43:3a:26:7b:67:f0:eb:37:44:36:83:61:c6:a4:
         b0:d8:30:2d:7a:01:ca:bd:c1:ba:38:c3:7a:08:eb:a7:74:9b:
         29:d0:51:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:01 2026 by rpki-client