Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
File:                     0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json)
Hash identifier:          KVk7YANfAvo227MjTXRBIl6ZoTamqL1hrU+xFdyEuLs=
Subject key identifier:   93:77:4D:00:32:D6:C8:34:08:52:04:89:0C:3F:B3:43:A0:66:E8:34
Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Certificate issuer:       /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Certificate serial:       05E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
Manifest number:          05DC
Signing time:             Wed 04 Nov 2026 19:38:04 +0000
Manifest this update:     Wed 04 Nov 2026 19:38:03 +0000
Manifest next update:     Wed 11 Nov 2026 19:38:03 +0000
Files and hashes:         1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: G1C9vZmBGoCPUYCg1cAaMS2iWMko3O3rCRiJ1h2tIlA=)
                          2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: y/RhPkVawSLf+7/JutT935tMP9izv7b3n4uLlLkmRJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
                          rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 19:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508 (0x5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
        Validity
            Not Before: Nov  4 19:38:03 2026 GMT
            Not After : Nov 11 19:38:03 2026 GMT
        Subject: CN=6aeb899c-7748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:99:d6:c6:dd:55:b5:8d:35:7a:fe:e7:38:
                    0d:aa:08:dc:2c:db:c4:b0:e2:36:7a:fb:f8:da:88:
                    ad:b9:19:1c:ee:68:20:03:cc:4e:56:d6:c6:a2:35:
                    a3:d6:83:6f:cb:85:b3:27:55:8a:fa:c8:7e:52:fc:
                    f1:8a:9f:02:05:ab:70:ce:fc:75:12:31:2c:12:3d:
                    da:38:83:5e:cb:fc:ec:df:7d:9b:59:b1:c6:c4:1d:
                    06:dc:7b:40:a1:63:4c:4e:a3:19:6f:15:59:e4:61:
                    51:78:92:4f:58:c9:ac:ed:fe:08:58:0f:70:b2:f0:
                    25:4a:88:33:4b:8b:97:f8:3a:c7:fa:b0:ce:ee:2e:
                    e2:1b:15:ba:c0:9d:af:7e:36:1e:1e:f7:32:0d:c1:
                    94:ed:73:5c:51:e2:4f:e3:42:92:4b:86:b3:a5:ca:
                    0f:53:5f:bf:41:44:66:b3:86:ab:dd:4b:4c:df:df:
                    b1:b7:94:7a:2e:6a:c6:ea:3e:a8:e2:02:9f:8f:b1:
                    d6:76:b9:5b:bc:a6:48:1a:f4:3e:64:5a:03:03:1d:
                    e4:50:bc:42:e4:66:1b:3e:71:b3:0a:6a:1d:24:50:
                    1b:15:73:b3:46:09:3b:20:2c:6b:9e:77:1c:73:40:
                    26:f1:99:aa:5a:01:6f:0c:8b:b6:77:46:b1:9a:39:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:77:4D:00:32:D6:C8:34:08:52:04:89:0C:3F:B3:43:A0:66:E8:34
            X509v3 Authority Key Identifier:
                keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:98:1e:24:85:73:0d:8c:39:52:d7:54:66:24:bf:ed:53:cd:
         28:69:ec:c5:76:a5:b6:46:fa:dc:69:2d:57:57:d3:6e:cf:27:
         c1:bb:56:aa:8f:8a:7b:66:32:ba:d2:96:47:e0:15:0b:db:94:
         c3:78:ea:1f:64:d0:34:f7:d4:d7:f8:59:2b:c7:c1:08:64:ad:
         ac:2e:dd:fe:9f:8f:bb:dd:03:ab:fa:57:1b:31:6b:99:6d:84:
         21:19:7b:b1:26:c6:de:c7:b7:f8:7d:a6:88:4c:cb:87:9a:f6:
         39:bd:0e:57:04:61:3d:bf:11:38:11:bd:09:64:dc:db:dc:18:
         27:9b:5b:58:da:0c:e1:61:97:e6:47:be:2a:1a:df:c7:a7:42:
         41:65:ab:97:23:df:0f:00:54:2c:ab:6a:81:c3:dc:d9:64:1b:
         84:18:4c:1d:f1:48:c3:eb:f7:00:53:15:ba:ce:89:15:aa:2a:
         5b:30:18:f8:19:29:20:97:ab:2b:a2:b6:49:89:da:40:f9:a1:
         b4:ca:1a:07:da:2f:56:b5:be:8e:1d:33:19:82:d6:d2:52:b0:
         1c:7f:1e:7a:c6:c5:86:4d:cd:59:12:a9:18:fe:fc:3c:ad:b7:
         1e:60:62:e5:26:4b:1c:1d:be:a5:77:3d:e8:7e:93:fd:2a:be:
         32:a8:de:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVDMkUxMTAvBgNVBAUTKEQyOTlCQ0EzOUM5OTNEQjgwRDExMzdCOTk5QjIyMTg0
NkFDRjU1NkIwHhcNMjYxMTA0MTkzODAzWhcNMjYxMTExMTkzODAzWjAYMRYwFAYD
VQQDEw02YWViODk5Yy03NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlaZ1sbdVbWNNXr+5zgNqgjcLNvEsOI2evv42oituRkc7mggA8xOVtbGojWj
1oNvy4WzJ1WK+sh+Uvzxip8CBatwzvx1EjEsEj3aOINey/zs332bWbHGxB0G3HtA
oWNMTqMZbxVZ5GFReJJPWMms7f4IWA9wsvAlSogzS4uX+DrH+rDO7i7iGxW6wJ2v
fjYeHvcyDcGU7XNcUeJP40KSS4azpcoPU1+/QURms4ar3UtM39+xt5R6LmrG6j6o
4gKfj7HWdrlbvKZIGvQ+ZFoDAx3kULxC5GYbPnGzCmodJFAbFXOzRgk7ICxrnncc
c0Am8ZmqWgFvDIu2d0axmjkfnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJN3TQAy
1sg0CFIEiQw/s0OgZug0MB8GA1UdIwQYMBaAFNKZvKOcmT24DRE3uZmyIYRqz1Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS85NTI3RTZCNDI2
OEUxMUVDOEVEMEJBNkVDNEY5QUUwMi8wcG04bzV5WlBiZ05FVGU1bWJJaGhHclBW
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBwbThvNXlaUGJnTkVUZTVtYkloaEdyUFZXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NUMyRS85NTI3RTZCNDI2OEUxMUVDOEVEMEJBNkVDNEY5QUUwMi8wcG04bzV5WlBi
Z05FVGU1bWJJaGhHclBWV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG5geJIVzDYw5UtdUZiS/7VPNKGnsxXaltkb63GktV1fTbs8nwbtWqo+Ke2Yy
utKWR+AVC9uUw3jqH2TQNPfU1/hZK8fBCGStrC7d/p+Pu90Dq/pXGzFrmW2EIRl7
sSbG3se3+H2miEzLh5r2Ob0OVwRhPb8ROBG9CWTc29wYJ5tbWNoM4WGX5ke+Khrf
x6dCQWWrlyPfDwBULKtqgcPc2WQbhBhMHfFIw+v3AFMVus6JFaoqWzAY+BkpIJer
K6K2SYnaQPmhtMoaB9ovVrW+jh0zGYLW0lKwHH8eesbFhk3NWRKpGP78PK23HmBi
5SZLHB2+pXc96H6T/Sq+MqjeCg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:00:59 2026 by rpki-client