Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
File:                     5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json)
Hash identifier:          Vs0nO7CU6GvENwwYLe49jZQfuViWFEqchYqV0KLedc4=
Subject key identifier:   19:04:60:29:6C:B2:8A:45:55:24:9E:3D:77:9A:28:C7:5F:59:BB:89
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Certificate issuer:       /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial:       02C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
Manifest number:          02B2
Signing time:             Tue 27 Oct 2026 01:49:06 +0000
Manifest this update:     Tue 27 Oct 2026 01:49:05 +0000
Manifest next update:     Tue 03 Nov 2026 01:49:05 +0000
Files and hashes:         1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: mj4paUMdUTvpvvrVDK3JTiLApT3lEl6qCPD2ZJnciT0=)
                          2: 2EAD49328A4911F1B17FECC73411F970.roa (hash: 3ZUQ8ehSMmQlNLkpaHNTJuGlbh9RcIttBaWEBN6l0Q0=)
                          3: 11F334D0B7BE11F187E80DD95D11F970.roa (hash: 8zu8iMIuHPe018l2hsek77RhkvEfDsvsP7M+06oBMNg=)
                          4: 548A6700B6EC11F187F0A2D95E11F970.roa (hash: dbRqjKhb4a7qx+ur3emx5PmM5N4+y5L+XBio2qWLoRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
                          rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
        Validity
            Not Before: Oct 27 01:49:05 2026 GMT
            Not After : Nov  3 01:49:05 2026 GMT
        Subject: CN=6ae00312-0179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:32:77:f0:96:5d:1a:3b:31:80:d1:e4:89:
                    7c:fe:88:ab:c5:82:61:89:c6:11:cc:63:bb:b8:b0:
                    dc:fc:f2:90:6c:e2:83:9e:cb:03:ff:37:42:13:9f:
                    a3:60:f8:37:fb:a8:7f:11:67:20:11:da:62:20:85:
                    14:06:34:10:5c:af:ee:fa:4f:80:50:96:e0:3a:bb:
                    6d:8f:37:4a:ac:03:a7:5f:70:1c:6b:07:35:54:4d:
                    c4:13:7f:17:a4:c6:66:9d:af:0f:44:06:f2:91:a5:
                    bc:d1:59:9a:81:06:17:f9:a1:0b:e2:d5:9c:34:5e:
                    3b:c4:13:43:18:0f:b5:34:b8:58:91:da:7c:a5:bb:
                    81:5e:75:d6:8c:42:0c:66:b1:a8:11:46:ca:08:ee:
                    9e:6d:fa:55:0b:04:0b:55:ba:25:48:84:52:36:83:
                    3f:1d:a9:45:fc:c1:2e:9d:08:e2:51:9a:1f:b4:89:
                    d6:35:89:ed:eb:98:ba:2a:d3:64:d4:a9:3d:b1:49:
                    19:c9:c9:6d:0e:35:cf:68:9d:1c:59:ac:f2:85:93:
                    cf:a9:a8:d8:b6:7a:9a:55:ca:8e:af:13:bb:a7:ee:
                    f4:06:8d:cd:68:e0:48:f8:fa:a2:16:4e:37:b9:b2:
                    6c:10:de:33:b7:eb:be:a0:ea:0e:ae:3c:98:b3:cd:
                    4b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:04:60:29:6C:B2:8A:45:55:24:9E:3D:77:9A:28:C7:5F:59:BB:89
            X509v3 Authority Key Identifier:
                keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:17:78:52:c1:20:01:15:c9:90:1e:82:c7:73:f6:5b:1d:
         21:a0:f7:65:db:8a:da:84:14:d8:6f:91:6e:8c:f1:70:e4:97:
         67:c7:8c:61:98:f5:b2:f9:6b:07:93:96:ca:f2:94:f3:ab:d5:
         c5:e5:1a:7d:30:7a:b1:c0:7b:ef:0e:49:5e:50:bf:90:5b:b6:
         53:5f:ed:af:c6:8c:41:65:73:c3:f8:46:3b:cc:8c:61:95:60:
         63:c4:ad:a7:b0:22:f5:fd:19:71:6c:98:84:a6:2b:4a:28:b4:
         41:f5:82:b0:e6:0e:c1:78:24:0f:7e:c0:df:d1:bc:7d:bb:52:
         0b:63:43:aa:ef:de:2b:37:d6:b0:c7:cc:0c:bb:79:9e:68:08:
         67:2b:19:65:8f:5f:c6:db:76:a9:74:12:17:da:48:21:3b:96:
         0b:2c:42:f0:ab:31:d3:ef:5f:48:e1:72:63:83:38:64:c7:a7:
         b2:c9:e7:c7:9e:4f:25:10:ce:99:05:ad:7e:0f:6a:8f:c0:55:
         ed:c4:b8:3a:f7:78:10:c1:77:92:29:3a:82:50:2a:99:5a:ce:
         47:2a:99:f5:de:98:4f:02:49:da:9b:cb:f9:38:e1:96:d0:91:
         14:7c:cf:54:bb:21:8d:2e:4d:84:26:22:d9:a8:39:a3:0e:cb:
         e4:3f:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:34:28 2026 by rpki-client