Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
File:                     SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json)
Hash identifier:          D9gMtWDDk4MdhSh8/ePv7Dkp1TZ8iu5k4f00bcNy7U4=
Subject key identifier:   05:16:C0:0F:66:EA:54:6A:B4:BD:2D:DA:3F:C4:4E:FE:2B:05:3F:BF
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Certificate issuer:       /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial:       0D24
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
Manifest number:          0D18
Signing time:             Mon 26 Oct 2026 17:01:15 +0000
Manifest this update:     Mon 26 Oct 2026 17:01:14 +0000
Manifest next update:     Mon 02 Nov 2026 17:01:14 +0000
Files and hashes:         1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: s+zUY4Qa15VwYTpnyanZPZ/wZpVaQvRlWwyXC+wB/cI=)
                          2: 16572A3CEB3511F08C2D5B303F6F56BC.roa (hash: EYjWGbva1pZVNsTwphYUGW3QU2qMX7vEwKRCgoGqRuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
        Validity
            Not Before: Oct 26 17:01:14 2026 GMT
            Not After : Nov  2 17:01:14 2026 GMT
        Subject: CN=6adf875b-f0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:61:27:75:09:b1:35:ad:d9:4f:41:69:91:1a:
                    45:6d:a3:26:a6:6d:39:7e:00:d3:0c:1c:42:19:1d:
                    5e:af:a9:fa:17:c8:b1:71:38:43:81:e1:8f:c0:04:
                    cb:01:34:df:b5:6b:dc:01:5e:14:8f:06:1d:c2:e5:
                    30:9e:fd:5f:66:38:f1:31:66:61:89:3a:9c:59:c1:
                    43:44:71:c4:bd:43:53:ae:46:78:03:cc:b8:61:16:
                    d5:15:be:8f:cc:ea:11:90:6b:24:aa:cd:75:c1:92:
                    1d:8e:80:52:42:6c:e4:32:62:b8:71:92:4d:f2:e6:
                    cc:68:42:5d:d2:ee:68:9b:f6:8f:e9:dc:12:67:e5:
                    8b:bb:98:22:99:31:a2:a0:5b:7a:45:f8:4d:dc:23:
                    2b:2c:29:7c:0a:e4:b9:f6:b9:0a:e3:aa:7f:d5:c4:
                    ef:e7:4c:58:2d:8d:b0:de:8b:a8:da:b1:cf:29:17:
                    93:f3:e3:6b:f2:64:41:c9:c5:0c:e6:e0:33:90:6f:
                    f7:0e:d0:30:36:a2:74:a9:a9:33:87:3b:34:27:c4:
                    74:a7:c8:26:4b:8c:d2:c9:ab:17:15:df:40:96:f4:
                    18:a5:bb:fb:09:64:fb:07:2d:69:2c:b1:24:a8:a7:
                    7b:ce:23:36:29:fe:01:4a:89:79:c2:bf:3d:91:e1:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:16:C0:0F:66:EA:54:6A:B4:BD:2D:DA:3F:C4:4E:FE:2B:05:3F:BF
            X509v3 Authority Key Identifier:
                keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:52:eb:41:b6:b6:e4:25:71:68:3b:90:9e:5e:49:54:79:1e:
         e6:bd:e6:f2:2a:1c:91:44:10:ec:2f:56:10:42:8f:0e:95:5f:
         43:a1:82:c0:bd:1a:e4:dd:0b:1e:aa:00:b5:ff:7b:99:e5:29:
         b3:fa:84:3a:d9:f9:ab:64:89:23:b5:9b:a4:ab:b0:35:62:97:
         3e:d3:a7:44:5f:6d:3e:af:05:31:2c:be:f5:e0:f3:49:20:34:
         65:24:2d:2c:74:23:b9:1e:6a:50:8c:cd:70:82:cf:9c:02:8a:
         1e:4a:28:bf:27:0d:e5:4c:85:84:3f:88:2d:7e:f8:54:27:24:
         0b:76:07:ae:b9:2a:3c:90:33:63:dd:29:d0:fe:a4:7c:8d:4b:
         80:da:61:20:04:3e:f4:f3:8a:c7:f7:3c:4f:e1:b5:3f:1f:fd:
         8e:5a:2f:f2:19:40:81:b2:b0:d9:b6:af:ea:c3:9c:53:da:45:
         33:92:01:57:0c:e4:cb:89:95:60:7e:3b:a4:ac:21:59:3b:50:
         9a:db:3b:de:05:b6:97:8d:2c:46:ac:ae:f5:ff:a3:66:a1:28:
         72:45:c0:a7:20:b2:e7:06:f4:3b:4d:f2:2f:48:c4:99:56:f7:
         fd:ef:2f:af:aa:3e:4b:97:7e:59:4f:48:1c:40:32:4a:85:63:
         d4:42:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:09:45 2026 by rpki-client