Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          n/D6KBLLulgGBFqAIMnG+/3tbhZ5rxf5Z3k++G8vxaM=
Subject key identifier:   85:32:E2:5C:9F:C5:62:7C:95:2F:46:F8:D3:6F:65:F4:5A:74:58:8B
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0E52
Signing time:             Fri 30 Oct 2026 19:35:00 +0000
Manifest this update:     Fri 30 Oct 2026 19:34:59 +0000
Manifest next update:     Fri 06 Nov 2026 19:34:59 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: rsPtiH9ubi0v3NC56q2Ua3xaT/aHda4R6hMHoO0xHz0=)
                          2: 6DB384A8C57B11F19E205B615A11F970.roa (hash: Gphro3H5lonVKKZaKM1p9bUXGxowRCxyqqubG9UZshs=)
                          3: A5DF9454D2F811F18F0A442B1666CEF9.roa (hash: Xdgl8zsa1r7MyJcrWvoTJy156o9llPdMTY84vgrdqDM=)
                          4: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: 0zLruqLd1y3E26SuAUI5s7BI64FwkLMd9kXmrMpepI8=)
                          5: 3205C0F8D37F11F1BE4C081A0166CEF9.roa (hash: Ewur4J8TKTh5tzXNX6xmApdhHUaBRrFE8N/IRIPSVBE=)
                          6: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: lIkl2NY+Awo03/dF05stBpELHB4nLbupIltgZJsoD+k=)
                          7: B35BC30CB53211F1B42F37F15011F970.roa (hash: KSzj0LdTLAiz1FUtjk9h/u0XDwsyNspF5msQCwgzr/o=)
                          8: 0F75123EB42411F19F202BBB3E11F970.roa (hash: JNL6WqomlW19XznMLYXyyQo8z6bj0pJRq0tJqCedMSI=)
                          9: 3F3CACAAD37F11F197EAEF1F0166CEF9.roa (hash: WRly+20PfP3KcKph2Td6AEgKveCT9+D6SyIoW4Y3J2o=)
                          10: 6D2E74CE119511F18720E261383D8C67.roa (hash: 8hV+I/mqYZMZ3vIhGJc/3XoKmvvL+nj8+XqDRjhEKdk=)
                          11: EB67ED1CC3FF11F19A8340576A11F970.roa (hash: 0tXDRbicSbGhek9d3rwNiEMFpbn7Hv7iUTyK/3kVVCs=)
                          12: B49F7F56D2F111F1A7AFF9A71466CEF9.roa (hash: w4rozlAgICD7/Pt2a7v/F/lX/gnjgz3bolh3Q9if4GQ=)
                          13: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: fLAof7EN40ztkzN10YcbHQELHkhYt0IIW6Znw2IZaqs=)
                          14: 049574BAD05F11F184AD199B0866CEF9.roa (hash: lxJnUeNA/Ds48pwe8f1kFysDWApLmXTiO7Aozoo5rvQ=)
                          15: 14C3B190C48311F1918DDB415011F970.roa (hash: vCpPiz16vOX5yade1MYXHvhHDjYT8wkJ0onQZAjOo4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 19:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4608 (0x1200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Oct 30 19:34:59 2026 GMT
            Not After : Nov  6 19:34:59 2026 GMT
        Subject: CN=6ae4f163-75b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:89:ed:c1:78:a9:1a:70:95:3c:e6:ca:e2:
                    25:33:6b:8e:6c:3d:47:39:8a:0e:98:68:d0:f4:5f:
                    f4:5a:34:2c:c5:12:b8:c4:b2:6d:23:6a:30:91:a5:
                    83:0f:14:de:d9:33:f4:1c:e5:9b:6b:af:27:10:fb:
                    0c:f9:4c:3d:59:be:49:4f:3c:2b:d4:76:f1:e6:06:
                    b6:07:61:97:a8:01:32:1d:2a:0b:fa:50:8f:b0:16:
                    41:e2:43:23:80:64:3b:f0:ae:e5:f2:90:85:64:53:
                    aa:21:45:95:e0:b9:c7:15:7b:05:ae:00:1d:55:a3:
                    ad:9d:8b:90:1b:31:17:d5:ee:b6:5b:a5:4a:10:37:
                    cd:1e:03:98:7f:0d:7c:2d:9a:7c:80:03:56:45:03:
                    0f:c5:2c:a5:31:6a:df:bc:0a:3e:b2:3e:3d:d1:d7:
                    ed:3b:4f:7d:cd:12:74:c9:c6:5e:65:3c:2f:39:1b:
                    f6:3c:34:4d:63:36:f4:b0:bd:cf:b0:15:61:7d:84:
                    ee:91:2f:9d:27:af:1d:f7:21:32:eb:0b:2d:6a:15:
                    08:ac:2b:4f:42:39:6a:8d:c2:bf:92:d5:3a:4b:24:
                    c6:8b:05:db:cc:4c:ff:bb:cc:a7:2b:e9:e3:3e:27:
                    86:1d:d2:b5:57:7e:cf:10:30:30:d8:44:4c:0a:2f:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:E2:5C:9F:C5:62:7C:95:2F:46:F8:D3:6F:65:F4:5A:74:58:8B
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:08:5f:b0:62:d5:df:68:43:c1:90:59:12:a2:d4:8a:88:
         c6:e5:b5:62:89:35:00:63:ef:16:c0:92:e5:a0:a3:ae:b8:d1:
         fc:9f:86:ec:e0:fa:ac:11:d0:1f:68:7e:0b:3e:17:72:0e:ac:
         69:fb:ca:4e:9d:c9:59:ac:19:a8:41:ed:bc:95:db:eb:43:cf:
         f9:4c:ca:b2:78:8e:9b:20:44:45:7f:c5:cf:07:65:a7:c6:dc:
         e0:32:f7:89:f7:4f:d3:c1:95:f4:7c:83:f5:4c:36:a1:6b:8e:
         79:94:0f:05:5e:de:ab:a0:96:86:d7:04:6a:13:7a:74:08:ed:
         30:0d:ea:6e:e6:55:12:d4:45:af:95:45:78:32:0b:59:eb:6b:
         c5:a8:c7:e6:9e:b1:94:f0:44:dd:14:47:6d:b9:04:05:fb:0b:
         21:df:8a:99:b5:1d:43:b6:9f:7d:d4:cf:7f:22:97:50:53:68:
         99:d1:50:e9:06:a1:a5:27:4d:26:4d:19:d2:13:35:a2:cc:89:
         58:f4:f6:ac:b9:4e:aa:a8:3e:ee:b2:82:b3:72:50:59:f8:16:
         5f:f8:51:b3:79:d4:88:00:96:5b:db:68:ac:39:c1:32:6d:c9:
         51:32:24:35:48:4f:14:c4:f7:c3:8d:92:84:c3:35:97:2d:e3:
         4b:b0:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:42:33 2026 by rpki-client