Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
File:                     xWV5UwnochSM0g3isqQ807IEwlE.mft (raw, json)
Hash identifier:          Px7K/8HYxP5gELPkvfNix5oXKNl6fdzKJWEESNzK2BA=
Subject key identifier:   BB:5B:DF:5E:56:1F:0C:98:8D:4E:23:A8:FC:C2:BB:5A:AD:69:06:AD
Authority key identifier: C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
Certificate issuer:       /CN=A913AB2B/serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
Manifest number:          49
Signing time:             Tue 27 Oct 2026 08:42:09 +0000
Manifest this update:     Tue 27 Oct 2026 08:42:08 +0000
Manifest next update:     Tue 03 Nov 2026 08:42:08 +0000
Files and hashes:         1: xWV5UwnochSM0g3isqQ807IEwlE.crl (hash: JJscUWbCXUB3f+0fJcpJhFhEHRuCWFwUR5Gu72Pmk3I=)
                          2: E58C711C6E2111F189BF576272A30FBC.roa (hash: 2KzEYDFnfXibar/cKmNE28FNWE3E+aAr6Na8gmkWSTw=)
                          3: C2308ADC6E2111F18E37985672A30FBC.roa (hash: wptdMLkGYWCREgeRbFIexsWdbeobaprWrt9rh5ES8yE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
                          rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AB2B, serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
        Validity
            Not Before: Oct 27 08:42:08 2026 GMT
            Not After : Nov  3 08:42:08 2026 GMT
        Subject: CN=6ae063e0-3f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:69:66:d8:45:3e:72:38:4b:42:d0:ff:95:
                    99:33:01:e5:30:a5:c3:9b:b2:ae:6b:c7:83:23:c9:
                    e5:e7:e6:df:76:a6:86:b7:5a:1a:6c:46:c9:2b:94:
                    f7:92:aa:d1:08:b9:ae:7b:5b:32:de:12:90:e1:8f:
                    48:5d:70:d6:a0:a4:99:f2:93:9c:d7:b4:d5:f5:30:
                    f7:40:4a:2e:db:d0:a5:6e:83:45:91:48:bd:26:69:
                    cc:fb:87:c1:64:49:0a:f2:25:c3:6f:2c:57:ac:59:
                    67:94:a1:97:61:ae:8c:53:44:8b:68:3d:aa:34:7d:
                    26:83:dc:48:d8:55:3b:f0:22:e3:89:5a:3c:f6:0e:
                    3f:13:21:16:42:8e:af:d7:a2:33:74:57:83:ff:5e:
                    df:3e:fc:db:75:1f:bd:73:74:45:f4:d6:5a:93:07:
                    0a:92:94:35:c6:82:7d:58:af:77:de:66:7e:a2:16:
                    f8:93:c1:5a:54:48:fd:08:ad:bb:c1:99:83:75:00:
                    85:39:bd:9b:c8:d3:e1:76:c3:20:62:8e:ac:f1:2c:
                    80:03:4f:f7:12:2f:ef:8a:80:e3:02:75:da:7c:17:
                    54:e8:15:3f:f9:0a:79:21:63:1e:f2:3d:0c:e0:6f:
                    ea:8f:20:ba:85:18:d9:01:ea:55:fd:32:a0:45:d7:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5B:DF:5E:56:1F:0C:98:8D:4E:23:A8:FC:C2:BB:5A:AD:69:06:AD
            X509v3 Authority Key Identifier:
                keyid:C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:94:5e:00:18:f1:c6:aa:30:ec:7e:03:c3:22:11:01:91:4f:
         b6:be:51:b2:2b:f7:8f:23:bc:51:59:ee:a0:33:fa:fe:f9:78:
         fb:90:6a:03:ea:a6:4b:6d:a9:a6:27:7b:14:80:eb:f9:02:9c:
         0e:49:5e:dd:bb:83:b7:b1:bb:65:74:63:88:d3:b0:6d:de:9b:
         b7:c9:07:69:ac:df:d4:c9:d1:b5:c2:9f:ea:a1:40:4d:fe:60:
         55:29:4b:d7:42:a2:d1:a3:b7:07:3a:b9:ef:d0:25:e6:5e:09:
         52:33:49:a6:38:9f:50:5c:46:3f:a9:39:e4:13:f1:5e:cf:e2:
         36:16:c1:ca:61:99:3f:cb:58:c9:a8:5b:ff:d9:a1:f5:2e:b0:
         34:eb:41:55:e9:31:a0:6d:66:02:29:ba:6e:be:0c:14:05:e1:
         d3:7d:59:1c:5a:a4:7f:ea:67:f5:49:2b:14:35:e1:6b:ea:f4:
         84:29:38:dd:0a:72:64:9b:84:79:60:10:fc:b7:6a:fc:ce:67:
         8e:db:75:bb:63:b6:b3:5f:d3:76:6e:b9:02:d6:d3:ed:ef:df:
         57:79:3a:b4:12:24:35:c7:f2:a5:6c:e9:0d:92:4c:20:dc:ff:
         7c:57:06:c5:4d:ef:b6:c2:02:30:28:00:bb:18:89:e8:48:49:
         1f:33:8d:da
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QUIyQjExMC8GA1UEBRMoQzU2NTc5NTMwOUU4NzIxNDhDRDIwREUyQjJBNDNDRDNC
MjA0QzI1MTAeFw0yNjEwMjcwODQyMDhaFw0yNjExMDMwODQyMDhaMBgxFjAUBgNV
BAMTDTZhZTA2M2UwLTNmOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4omlm2EU+cjhLQtD/lZkzAeUwpcObsq5rx4MjyeXn5t92poa3WhpsRskrlPeS
qtEIua57WzLeEpDhj0hdcNagpJnyk5zXtNX1MPdASi7b0KVug0WRSL0macz7h8Fk
SQryJcNvLFesWWeUoZdhroxTRItoPao0fSaD3EjYVTvwIuOJWjz2Dj8TIRZCjq/X
ojN0V4P/Xt8+/Nt1H71zdEX01lqTBwqSlDXGgn1Yr3feZn6iFviTwVpUSP0IrbvB
mYN1AIU5vZvI0+F2wyBijqzxLIADT/cSL++KgOMCddp8F1ToFT/5CnkhYx7yPQzg
b+qPILqFGNkB6lX9MqBF15StAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUu1vfXlYf
DJiNTiOo/MK7Wq1pBq0wHwYDVR0jBBgwFoAUxWV5UwnochSM0g3isqQ807IEwlEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBQjJCLzQ5QzE5RjQ4Njcy
MTExRjE4REQyNDgyMTc2NDdBODg4L3hXVjVVd25vY2hTTTBnM2lzcVE4MDdJRXds
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIveFdWNVV3bm9jaFNNMGczaXNxUTgwN0lFd2xFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB
QjJCLzQ5QzE5RjQ4NjcyMTExRjE4REQyNDgyMTc2NDdBODg4L3hXVjVVd25vY2hT
TTBnM2lzcVE4MDdJRXdsRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC1lF4AGPHGqjDsfgPDIhEBkU+2vlGyK/ePI7xRWe6gM/r++Xj7kGoD6qZLbamm
J3sUgOv5ApwOSV7du4O3sbtldGOI07Bt3pu3yQdprN/UydG1wp/qoUBN/mBVKUvX
QqLRo7cHOrnv0CXmXglSM0mmOJ9QXEY/qTnkE/Fez+I2FsHKYZk/y1jJqFv/2aH1
LrA060FV6TGgbWYCKbpuvgwUBeHTfVkcWqR/6mf1SSsUNeFr6vSEKTjdCnJkm4R5
YBD8t2r8zmeO23W7Y7azX9N2brkC1tPt799XeTq0EiQ1x/KlbOkNkkwg3P98VwbF
Te+2wgIwKAC7GInoSEkfM43a
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:45:40 2026 by rpki-client