Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
File:                     mpJehowmrjzn4Iztb8MRL2QPLM8.mft (raw, json)
Hash identifier:          h5TU64Mh1Rkh3/YJNkggbRoUsQA925z9MFOtxOtUIYQ=
Subject key identifier:   91:66:7C:61:5A:20:57:66:5A:2D:9B:0B:B8:2E:56:1B:E5:01:B8:BC
Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Certificate issuer:       /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
Manifest number:          95
Signing time:             Fri 13 Nov 2026 07:47:02 +0000
Manifest this update:     Fri 13 Nov 2026 07:47:02 +0000
Manifest next update:     Fri 20 Nov 2026 07:47:02 +0000
Files and hashes:         1: mpJehowmrjzn4Iztb8MRL2QPLM8.crl (hash: qQ7pA7tE0XT4xmEG0zG67E/4mQeDJjU91agUxJY99n8=)
                          2: 198EDB1034E511F1828F838E91833773.roa (hash: 5rQyQHbY+5t3PI7uWTPeIpLhKz0IBw52hEVYsHCpwMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 07:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
        Validity
            Not Before: Nov 13 07:47:02 2026 GMT
            Not After : Nov 20 07:47:02 2026 GMT
        Subject: CN=6af6c076-3da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:a5:2e:d0:38:70:5d:5d:56:3b:8a:d5:ea:
                    e1:da:b1:c3:1e:b5:60:90:25:e4:bc:c6:1a:9f:18:
                    a0:a6:65:8a:74:e1:31:38:e6:81:2e:8a:ca:62:d2:
                    86:56:3c:03:9b:53:5f:85:b1:fa:7b:b0:ec:d6:a5:
                    13:fe:96:52:61:71:8c:67:e5:aa:2c:e5:de:0c:ff:
                    64:26:29:85:1b:d6:44:72:fb:4d:a7:fe:cc:52:ab:
                    03:8d:55:00:53:c3:90:82:9e:a6:12:d4:d7:4b:5c:
                    82:57:94:3b:ad:6b:cd:3e:3c:07:84:ef:97:8f:af:
                    30:7e:08:14:9d:1c:e9:d4:95:de:ac:05:81:11:1d:
                    4f:3a:8b:f3:d5:c4:fa:41:f9:fd:bc:26:ab:b3:10:
                    cd:e0:1a:4a:91:d6:ab:80:71:9f:c4:5f:8a:97:ec:
                    97:9c:54:26:db:1d:da:83:cf:3a:62:ea:78:bf:91:
                    2a:98:ce:ba:5f:62:ea:cd:fc:63:e9:b3:ce:55:43:
                    1b:32:67:f8:0a:59:8c:ad:68:5e:b1:2b:a2:e1:a4:
                    9c:89:8c:a2:7d:cf:19:37:22:08:9d:0c:7d:61:70:
                    52:4f:b3:51:52:39:1a:cb:1e:2d:65:96:56:a4:01:
                    7b:59:ba:3e:86:9e:d5:88:0b:6e:53:cd:96:f3:7d:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:7C:61:5A:20:57:66:5A:2D:9B:0B:B8:2E:56:1B:E5:01:B8:BC
            X509v3 Authority Key Identifier:
                keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:a2:ad:77:6b:66:d6:5f:bb:8d:6b:f6:b9:0b:f6:a0:db:
         f0:fc:f2:31:60:12:61:d4:68:75:2e:ac:a5:7f:7c:0b:45:3d:
         8e:04:b7:72:e0:6a:40:07:59:af:49:03:68:25:86:40:44:b3:
         aa:79:7c:4f:7a:f0:9e:8f:9d:19:a4:0e:72:8f:96:a2:7d:f8:
         1e:19:19:f2:4b:4f:e3:14:11:f9:9a:da:ca:81:be:82:0f:5e:
         5c:12:bc:2e:a7:f9:ac:49:6a:d2:be:04:b5:eb:65:9f:11:65:
         7d:2a:76:6e:77:62:3e:a9:a7:bd:dc:64:5e:0f:12:22:5b:d0:
         b8:f5:59:32:cd:8c:13:cc:8d:e6:07:38:8d:20:bf:41:cc:0c:
         a4:0b:bf:4f:0d:45:e5:2a:b1:c1:14:fa:23:cb:ff:2d:d1:06:
         32:1a:da:2d:a4:fd:b0:35:67:22:95:6f:a1:55:5f:5a:60:67:
         2b:9a:87:7b:ae:9d:e0:b4:4c:90:e5:f5:98:dc:d2:ee:15:f1:
         3d:56:a4:6b:0f:eb:0b:ce:57:92:4b:4c:93:52:63:90:cd:20:
         23:a3:8e:6a:11:7c:37:4a:a8:74:ec:a3:e1:86:74:87:a1:35:
         d3:04:80:18:4a:8e:1a:c0:af:2a:ac:11:2c:4f:ce:79:94:59:
         cb:e2:f3:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJDOUYxMTAvBgNVBAUTKDlBOTI1RTg2OEMyNkFFM0NFN0UwOENFRDZGQzMxMTJG
NjQwRjJDQ0YwHhcNMjYxMTEzMDc0NzAyWhcNMjYxMTIwMDc0NzAyWjAYMRYwFAYD
VQQDEw02YWY2YzA3Ni0zZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqOOlLtA4cF1dVjuK1erh2rHDHrVgkCXkvMYanxigpmWKdOExOOaBLorKYtKG
VjwDm1NfhbH6e7Ds1qUT/pZSYXGMZ+WqLOXeDP9kJimFG9ZEcvtNp/7MUqsDjVUA
U8OQgp6mEtTXS1yCV5Q7rWvNPjwHhO+Xj68wfggUnRzp1JXerAWBER1POovz1cT6
Qfn9vCarsxDN4BpKkdargHGfxF+Kl+yXnFQm2x3ag886Yup4v5EqmM66X2Lqzfxj
6bPOVUMbMmf4ClmMrWhesSui4aSciYyifc8ZNyIInQx9YXBST7NRUjkayx4tZZZW
pAF7Wbo+hp7ViAtuU82W831cbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFmfGFa
IFdmWi2bC7guVhvlAbi8MB8GA1UdIwQYMBaAFJqSXoaMJq485+CM7W/DES9kDyzP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkM5Ri83RkQ5NkJGNjBE
ODAxMUYxOTIwQjNBMEUyNDNEOEM2Ny9tcEplaG93bXJqem40SXp0YjhNUkwyUVBM
TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL21wSmVob3dtcmp6bjRJenRiOE1STDJRUExNOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkM5Ri83RkQ5NkJGNjBEODAxMUYxOTIwQjNBMEUyNDNEOEM2Ny9tcEplaG93bXJq
em40SXp0YjhNUkwyUVBMTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALuairXdrZtZfu41r9rkL9qDb8PzyMWASYdRodS6spX98C0U9jgS3cuBqQAdZ
r0kDaCWGQESzqnl8T3rwno+dGaQOco+Won34HhkZ8ktP4xQR+ZrayoG+gg9eXBK8
Lqf5rElq0r4EtetlnxFlfSp2bndiPqmnvdxkXg8SIlvQuPVZMs2ME8yN5gc4jSC/
QcwMpAu/Tw1F5SqxwRT6I8v/LdEGMhraLaT9sDVnIpVvoVVfWmBnK5qHe66d4LRM
kOX1mNzS7hXxPVakaw/rC85XkktMk1JjkM0gI6OOahF8N0qodOyj4YZ0h6E10wSA
GEqOGsCvKqwRLE/OeZRZy+LzRA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:12 2026 by rpki-client