Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
File:                     rDKuLAwq1FPHzruPsoyhI5ov5aU.mft (raw, json)
Hash identifier:          YbCApKtCo/mN1GwctAUSu41ahiQMowAW7daYh/Sf6EU=
Subject key identifier:   3A:58:3C:90:1A:2D:C6:AD:64:65:73:74:A7:5A:CE:E5:CA:0B:DA:EA
Authority key identifier: AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5
Certificate issuer:       /CN=A91FDC31/serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
Manifest number:          63
Signing time:             Fri 13 Nov 2026 08:16:40 +0000
Manifest this update:     Fri 13 Nov 2026 08:16:39 +0000
Manifest next update:     Fri 20 Nov 2026 08:16:39 +0000
Files and hashes:         1: rDKuLAwq1FPHzruPsoyhI5ov5aU.crl (hash: PkKFeNeb21Avpe3olQilxjNNZsuLC/nnIA5bywPHR3I=)
                          2: C2E7AA224A3211F1BD5DF90392833773.roa (hash: GcwDkPymz7zW7+vsuIsz6xXHjXAVw/W3Kds1cjW9Iiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 08:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC31, serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
        Validity
            Not Before: Nov 13 08:16:39 2026 GMT
            Not After : Nov 20 08:16:39 2026 GMT
        Subject: CN=6af6c768-46b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:94:71:50:17:f8:8c:ff:67:dc:b0:ba:ff:
                    53:bf:21:23:18:ee:63:26:95:26:a2:04:a7:ec:16:
                    db:66:24:b3:32:32:01:75:65:99:16:95:a3:c9:97:
                    91:eb:41:9f:ad:3d:ce:80:08:af:76:db:2f:d6:5f:
                    ac:ba:e6:d4:36:f7:23:65:83:5c:b8:86:d9:4c:af:
                    1a:9d:72:d3:b1:f6:d3:fc:2b:ca:43:2f:65:c5:73:
                    15:06:06:c0:2f:a8:f0:f3:88:3c:9a:3e:fa:da:1d:
                    16:e3:c7:0a:d2:28:22:36:ea:e8:ce:3a:56:e9:06:
                    80:1c:cc:65:0b:20:14:82:86:0a:1c:4e:99:f5:1a:
                    5f:c4:a7:dc:e9:a7:3b:76:1c:f5:b8:e5:8b:39:87:
                    16:97:51:b3:59:0b:4e:6f:41:30:ed:89:85:ca:37:
                    84:f5:f7:7b:64:47:87:06:06:45:e8:65:75:25:e6:
                    23:e1:a9:a3:a9:22:7a:bf:5f:47:a5:61:0e:24:ad:
                    c6:44:11:5c:1d:5a:ba:18:77:26:41:18:28:6e:bd:
                    66:41:34:67:df:0c:db:d5:37:d5:4a:50:b1:81:50:
                    b7:3a:fc:62:cb:6b:9c:bc:e7:47:90:0d:1a:43:e6:
                    93:a6:12:ae:35:a4:9b:ce:51:da:4f:77:d1:83:68:
                    ed:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:58:3C:90:1A:2D:C6:AD:64:65:73:74:A7:5A:CE:E5:CA:0B:DA:EA
            X509v3 Authority Key Identifier:
                keyid:AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:45:fb:35:38:d5:1a:a0:0d:cb:5c:0d:5c:a3:c6:03:94:
         49:cc:f4:8b:5c:64:fc:3d:10:c5:39:54:fd:ea:b3:ac:45:f7:
         ba:50:48:51:58:28:73:37:c2:4d:4d:7f:ef:d9:e0:e4:8a:0f:
         b2:e9:4d:68:57:08:c2:95:7c:61:cf:43:c0:05:07:f4:f5:f1:
         f3:cf:37:69:ad:a6:9f:34:74:eb:24:7b:5d:04:0d:5f:d3:64:
         4e:1f:44:68:6a:48:a0:ed:c1:e4:28:0b:fb:af:f5:be:6e:ea:
         fb:e4:c1:29:34:45:4a:4f:83:1e:42:79:b2:d5:be:28:75:90:
         32:01:2c:ba:5a:d9:24:66:57:8e:15:ef:ec:43:a5:ab:8e:aa:
         f8:be:67:84:41:e6:23:db:c8:db:3a:8b:37:d2:3c:bb:1b:4d:
         be:07:da:f8:92:28:52:f3:74:c6:3a:f1:5d:84:4b:12:76:97:
         e9:a0:b9:04:40:53:af:41:84:b1:6a:04:44:c1:33:a5:2f:0d:
         30:06:c5:33:3d:35:09:97:31:6d:da:08:8d:ab:0d:2a:c5:58:
         b8:cb:2e:42:4c:b8:57:c0:69:1e:1a:f4:a0:f6:70:78:42:74:
         e9:ec:cc:93:d3:53:02:2c:d8:9f:5e:2a:85:0f:84:b9:1a:94:
         c9:69:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:38:24 2026 by rpki-client