Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
File:                     oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json)
Hash identifier:          hBWEQc/xNYg5Oq1gN5EYO4rsAUHI4pOBHenyKw+bxTA=
Subject key identifier:   75:B7:17:5A:43:63:21:43:4A:BA:0A:95:01:7A:72:22:04:5E:99:E2
Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
Certificate issuer:       /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Certificate serial:       03A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
Manifest number:          0395
Signing time:             Wed 07 Oct 2026 00:50:23 +0000
Manifest this update:     Wed 07 Oct 2026 00:50:22 +0000
Manifest next update:     Wed 14 Oct 2026 00:50:22 +0000
Files and hashes:         1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: 4qPhGlDJJM+SJirsbz5gvThD3D08aBWJCnxeHNNIgYQ=)
                          2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: AL1NzX9lNGPHM09HP1wQ+++0IfWrYhSei2NeZGdZGpw=)
                          3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: aCy5PMuDzpryQuVwSt0E5y4Po7ZiB/Ss+uP5KTFzKkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
                          rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
        Validity
            Not Before: Oct  7 00:50:22 2026 GMT
            Not After : Oct 14 00:50:22 2026 GMT
        Subject: CN=6ac5974f-0a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:f1:9e:7f:46:65:c3:bb:1d:f7:5c:69:c1:
                    46:41:cc:9f:32:6d:60:30:65:a1:79:3f:df:82:e7:
                    1d:d2:74:e7:27:99:19:97:23:ea:d6:50:de:9f:5a:
                    07:8b:f8:5a:81:08:e0:de:47:36:57:47:50:a4:91:
                    32:53:b0:a0:62:fa:e5:c8:af:94:b1:f1:52:ae:89:
                    6c:22:20:3c:90:6b:dd:2c:80:2f:0b:5a:a8:b7:36:
                    5c:b0:4b:72:1d:24:d2:48:21:b8:09:71:42:8f:8f:
                    cd:4d:5a:e5:03:ed:a6:5a:8b:f9:77:63:4e:27:8e:
                    ad:68:45:96:62:3d:60:71:33:a7:d0:ce:30:bc:c5:
                    a5:34:a3:40:40:58:06:ad:34:40:78:1e:7d:2d:df:
                    16:14:1e:82:e4:f8:bd:b2:1a:1e:3b:2e:fa:ae:f0:
                    ef:1f:b0:c9:17:ac:72:80:fc:8c:41:4f:ce:9b:77:
                    dd:47:0c:0e:d8:bc:e1:48:9e:0f:67:57:c0:5a:af:
                    a3:7d:b0:eb:2c:fc:24:39:58:08:93:b2:b8:34:78:
                    dc:8f:a6:fb:77:1d:cc:16:9c:e9:55:c6:d9:f6:85:
                    e8:f8:f1:a0:c7:64:bf:3d:3f:56:be:1d:93:b9:3c:
                    ce:b9:36:0f:16:a6:4c:3b:ec:42:db:bf:0f:12:26:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B7:17:5A:43:63:21:43:4A:BA:0A:95:01:7A:72:22:04:5E:99:E2
            X509v3 Authority Key Identifier:
                keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:28:59:51:e5:c8:f3:e4:8c:e0:af:83:02:32:f7:57:6a:27:
         6e:5b:4e:e4:66:87:f3:50:fc:7f:83:85:87:05:9e:5d:1f:da:
         07:a8:7e:21:d1:47:df:2b:ba:c4:37:f8:15:e4:6a:14:5f:a6:
         e7:06:c6:24:c6:d3:08:8d:a2:db:2e:62:fe:02:bc:54:c9:79:
         10:55:52:09:2f:65:eb:a3:ac:2d:78:2f:db:66:93:ae:98:10:
         73:7b:d6:2b:0a:b8:0e:f7:c4:dc:2a:f8:c7:8a:f7:cd:c7:66:
         35:ba:4d:89:3e:8e:e6:b4:9a:15:d3:3f:6c:b6:09:09:10:a5:
         35:4e:4f:d7:37:59:4e:a7:31:bf:6b:4c:7d:aa:01:62:90:e6:
         6b:77:97:d5:b7:86:2a:c3:c9:61:05:f2:b5:6a:85:1a:cd:2f:
         c7:cd:1b:3e:f1:b2:3a:1e:70:15:1e:e1:c5:09:34:1a:c2:15:
         19:8e:84:e4:9f:70:d2:be:48:80:4c:e0:59:73:58:98:1e:54:
         e2:e7:23:21:83:f2:db:7c:9e:55:32:af:3d:53:ff:58:04:32:
         ed:d8:1a:00:de:5c:2e:59:7c:62:49:3e:ec:5f:d1:76:a3:86:
         c9:bc:a0:b4:83:97:3f:60:73:6b:9d:a1:03:fb:eb:fa:15:d1:
         23:8f:eb:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3
MzlBMDE1RDEwHhcNMjYxMDA3MDA1MDIyWhcNMjYxMDE0MDA1MDIyWjAYMRYwFAYD
VQQDEw02YWM1OTc0Zi0wYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArRXxnn9GZcO7HfdcacFGQcyfMm1gMGWheT/fgucd0nTnJ5kZlyPq1lDen1oH
i/hagQjg3kc2V0dQpJEyU7CgYvrlyK+UsfFSrolsIiA8kGvdLIAvC1qotzZcsEty
HSTSSCG4CXFCj4/NTVrlA+2mWov5d2NOJ46taEWWYj1gcTOn0M4wvMWlNKNAQFgG
rTRAeB59Ld8WFB6C5Pi9shoeOy76rvDvH7DJF6xygPyMQU/Om3fdRwwO2LzhSJ4P
Z1fAWq+jfbDrLPwkOVgIk7K4NHjcj6b7dx3MFpzpVcbZ9oXo+PGgx2S/PT9Wvh2T
uTzOuTYPFqZMO+xC278PEiYMOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHW3F1pD
YyFDSroKlQF6ciIEXpniMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0
MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r
dXVDTVBwTUx5djV6bWdGZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGShZUeXI8+SM4K+DAjL3V2onbltO5GaH81D8f4OFhwWeXR/aB6h+IdFH3yu6
xDf4FeRqFF+m5wbGJMbTCI2i2y5i/gK8VMl5EFVSCS9l66OsLXgv22aTrpgQc3vW
Kwq4DvfE3Cr4x4r3zcdmNbpNiT6O5rSaFdM/bLYJCRClNU5P1zdZTqcxv2tMfaoB
YpDma3eX1beGKsPJYQXytWqFGs0vx80bPvGyOh5wFR7hxQk0GsIVGY6E5J9w0r5I
gEzgWXNYmB5U4ucjIYPy23yeVTKvPVP/WAQy7dgaAN5cLll8Ykk+7F/RdqOGybyg
tIOXP2Bza52hA/vr+hXRI4/rFA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:57:23 2026 by rpki-client