Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
File:                     L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json)
Hash identifier:          vZGHhg2G/7gqe3oaxWlKtvNcykSPEzqnPmH0Z9rSOUw=
Subject key identifier:   0A:02:D1:32:F2:7B:BA:6F:61:DE:DE:05:2F:ED:DF:2C:A7:E6:B8:95
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Certificate issuer:       /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
Manifest number:          011A
Signing time:             Fri 13 Nov 2026 06:04:17 +0000
Manifest this update:     Fri 13 Nov 2026 06:04:17 +0000
Manifest next update:     Fri 20 Nov 2026 06:04:17 +0000
Files and hashes:         1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: 6dxvTsZa7Dafrx2J9N+/Ukq4wKpI6JnE7my7kyWp/fc=)
                          2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xJYWdy3vw+vjD1PJdLPXMUN2+mPgPI/QMzbJ06GDJ8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 06:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
        Validity
            Not Before: Nov 13 06:04:17 2026 GMT
            Not After : Nov 20 06:04:17 2026 GMT
        Subject: CN=6af6a861-80e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:e0:f3:46:d5:23:64:33:2f:77:cf:c4:9b:
                    5d:83:94:80:8d:ba:a3:b4:66:e7:53:75:cf:f0:71:
                    f3:8b:e6:96:66:68:ac:1c:0b:38:c6:48:6c:2d:f5:
                    7a:05:a0:20:23:8b:84:32:d9:f4:13:df:fb:e5:6c:
                    75:68:cf:26:e4:ba:09:95:4c:d1:0e:42:e6:c4:9f:
                    84:e5:c0:d5:4b:36:96:42:c4:46:c9:ec:85:2f:71:
                    1e:bd:0b:e8:4d:35:01:f2:05:78:12:7a:0d:4e:16:
                    3f:c6:ca:aa:2d:a6:fe:85:a6:32:29:d2:c8:d4:b2:
                    e2:a9:c6:7c:48:fa:92:35:35:07:19:8b:5b:e3:2c:
                    23:a2:de:fc:19:fa:c0:17:de:12:97:7c:dc:52:89:
                    ab:9c:a0:b1:bb:15:51:bc:53:d5:00:a8:ca:90:e2:
                    d9:72:53:68:92:1e:ad:1a:11:59:1d:af:c7:ae:13:
                    46:7c:72:52:d9:85:e9:5f:7b:dd:63:ba:87:7c:ed:
                    63:b1:72:12:1b:54:51:dd:f4:c5:49:64:cf:82:08:
                    ba:f9:50:b9:5e:3d:17:d4:fc:21:86:4b:d9:cd:6c:
                    27:95:48:c4:41:ea:d0:15:8d:24:21:b7:79:1c:68:
                    b3:32:2e:39:b0:ee:dc:a8:f8:fb:17:25:83:55:53:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:D1:32:F2:7B:BA:6F:61:DE:DE:05:2F:ED:DF:2C:A7:E6:B8:95
            X509v3 Authority Key Identifier:
                keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4f:eb:6e:af:21:bf:44:ea:31:f9:f8:67:36:51:b5:26:b7:
         8b:76:bf:60:1e:94:32:3d:fa:d0:22:a6:5c:49:45:a2:0a:47:
         01:82:ad:f3:0a:7f:07:1e:67:b1:81:94:e7:dd:7a:2d:b2:61:
         d4:64:ad:5e:14:7b:69:10:ba:a3:cc:e1:d6:a8:54:fa:e5:3d:
         93:ca:76:06:65:72:b2:4b:1a:f7:74:2a:57:cc:a0:5c:fa:1d:
         75:95:18:c6:ce:78:b3:75:21:d7:b5:fe:96:2c:67:ed:a0:2c:
         69:5a:1e:f6:6e:21:06:b1:ec:ee:97:fd:b1:66:35:de:85:48:
         60:4e:38:5f:f9:1c:71:b5:dd:9c:0d:42:31:9b:2d:14:47:a8:
         fa:5d:ed:44:68:5b:aa:eb:cd:2b:36:c3:45:50:14:27:e5:bf:
         65:8d:52:2f:7e:d6:9b:2f:5e:a0:36:3a:b3:df:bb:88:55:0b:
         82:db:45:04:3d:a8:e5:b0:79:26:7e:8a:3b:88:64:0d:0f:36:
         6f:7e:18:3b:e4:15:cf:53:dc:b8:12:15:0e:56:35:c4:15:1a:
         f2:ee:70:11:bf:f0:21:d3:9f:60:54:31:14:b7:af:af:17:89:
         16:1f:b5:74:93:80:4d:61:67:2c:4c:6c:91:f1:b5:4d:9f:50:
         16:2e:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:57 2026 by rpki-client