Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File:                     M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier:          I9gRLrmWoNYhAP2KhLOb5XcpkgrsrvP7O9rN+hsyWyo=
Subject key identifier:   8C:EC:F8:F7:CF:B3:88:CA:6A:BE:F6:5A:8D:EF:AE:6B:53:3D:98:45
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number:          01BE
Signing time:             Thu 05 Nov 2026 04:41:07 +0000
Manifest this update:     Thu 05 Nov 2026 04:41:06 +0000
Manifest next update:     Thu 12 Nov 2026 04:41:06 +0000
Files and hashes:         1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: VITJQFAWb3pnIDCHlopSfe3RLIG3HFG7DxgzY4kMkDA=)
                          2: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: 8IuopY47+jC5fpO4yB/mgjJBuoiM2BBuM5j++8YQWHA=)
                          3: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: DkaWQMkaE5vWQ9UkMjaqB0efcfb37G5TJ9A0Ez8ePPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 04:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Nov  5 04:41:06 2026 GMT
            Not After : Nov 12 04:41:06 2026 GMT
        Subject: CN=6aec08e3-c753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:2b:5f:37:82:cb:5f:40:02:0c:ff:d5:de:
                    9e:59:a0:9a:57:26:dc:45:03:b4:87:82:18:65:b8:
                    3e:6a:a4:d3:c0:bf:6f:45:89:88:d3:8d:79:fd:be:
                    15:27:eb:a2:48:a5:c3:cf:13:cd:ae:19:cf:1c:e5:
                    46:70:79:09:a7:9b:16:7e:13:ec:4a:7c:0b:93:15:
                    5a:90:f9:1b:56:b9:fd:a9:ad:25:98:d7:d6:0a:06:
                    4b:e7:83:ff:81:f3:fa:aa:c3:60:8b:e9:6a:bd:5b:
                    cf:24:8f:da:10:77:8a:2b:8d:04:76:d5:28:ae:a0:
                    8c:32:0b:1f:d2:a0:b6:f9:a9:88:09:05:6e:5f:5a:
                    3e:66:43:a1:17:a2:2b:95:f2:bb:cc:13:a7:ec:1c:
                    48:15:30:9f:8d:26:54:a6:a5:2b:41:9e:50:34:d4:
                    68:ae:b1:a7:69:2b:a7:27:1d:d2:51:91:6f:9f:9c:
                    e8:f7:a0:0f:8c:fe:cc:f6:58:f0:ce:81:93:5c:06:
                    18:0c:54:47:86:14:fb:1f:7a:ab:58:e4:ce:bd:f9:
                    fa:ca:96:cc:f5:4f:f1:be:a0:3d:60:b6:59:7a:c9:
                    13:8b:17:ec:03:4e:93:29:ec:76:41:53:b5:fa:c3:
                    a4:12:d4:33:fa:7d:67:41:4e:6f:d2:ed:cd:af:ed:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EC:F8:F7:CF:B3:88:CA:6A:BE:F6:5A:8D:EF:AE:6B:53:3D:98:45
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:fa:9f:d3:11:22:db:4f:0e:4e:54:f0:d7:d7:e0:82:a5:37:
         aa:34:fa:51:0b:f0:90:59:85:73:50:85:d1:60:73:6b:19:16:
         9d:32:02:17:96:db:31:9c:dc:07:d0:36:23:ca:51:17:f0:ac:
         c7:07:3c:80:33:58:68:e9:24:bb:ec:34:19:1c:28:c5:5a:b4:
         9f:ab:a5:5d:55:6a:3a:df:98:ab:45:08:53:8b:47:35:49:df:
         a6:23:76:3d:75:f6:54:7e:e5:f8:66:f5:bd:05:5d:48:f3:73:
         cc:27:8d:f9:23:ae:56:70:52:b5:ea:12:62:33:4a:c3:15:d3:
         bf:32:98:83:4b:eb:95:d1:87:2e:c2:6c:b9:37:30:e0:e1:64:
         ee:48:b1:53:89:fb:d3:9e:00:39:9d:41:1a:f7:94:78:9d:ab:
         40:8d:fe:f7:57:b9:90:3d:37:51:6b:2a:7e:68:34:ba:ba:8e:
         12:c0:e5:6c:58:e9:3b:69:de:76:12:f0:65:5d:6b:f7:eb:b7:
         7b:62:6c:43:e4:c0:14:96:7c:c8:09:7a:bf:4f:9b:60:62:c4:
         2c:c2:41:fb:a2:89:22:19:24:c1:f1:49:4f:84:04:2d:81:74:
         37:7d:8c:b7:1e:d1:7e:06:c9:f7:83:65:b1:20:b8:4e:68:c4:
         6b:e5:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:41:54 2026 by rpki-client