Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
File:                     5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json)
Hash identifier:          ogFT9UtHMm6fNmMqdow4UdP6FdPNlXQKgYtRS1zzEqE=
Subject key identifier:   DE:37:0E:1A:08:9B:26:B2:21:CF:C1:BC:78:E8:DB:8C:C3:22:71:5A
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Certificate issuer:       /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial:       02C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
Manifest number:          02BD
Signing time:             Thu 29 Oct 2026 01:53:37 +0000
Manifest this update:     Thu 29 Oct 2026 01:53:37 +0000
Manifest next update:     Thu 05 Nov 2026 01:53:37 +0000
Files and hashes:         1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: SVYTQqPyQNRzbNwob7mOgv3JUqMq1RhvgO7cP1zr3Yw=)
                          2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=)
                          3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 01:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
        Validity
            Not Before: Oct 29 01:53:37 2026 GMT
            Not After : Nov  5 01:53:37 2026 GMT
        Subject: CN=6ae2a721-20c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:0d:ec:e1:8b:60:d6:cd:fe:31:27:c9:12:
                    04:1d:f9:18:b0:6e:9a:38:ed:9c:fa:19:56:97:70:
                    08:85:b6:e2:64:f7:5b:33:45:2e:f0:4d:fe:07:88:
                    5b:98:22:72:f4:15:df:b4:dc:10:9c:55:cd:0e:49:
                    df:12:fb:1d:f3:b2:33:61:b2:cb:fd:97:1a:09:f0:
                    5f:6d:be:f3:55:79:e2:b6:c7:e4:23:77:89:2b:1a:
                    67:49:33:02:d3:d3:f3:b3:75:aa:2e:d1:c9:21:61:
                    59:f9:7d:62:d4:f4:15:78:67:76:91:34:13:36:ac:
                    e1:86:4f:72:3f:bf:c7:80:c9:04:4e:8d:c3:6b:2e:
                    d1:27:21:4b:01:b8:d0:d3:af:66:98:1f:95:2a:8f:
                    1d:d1:d8:25:7a:d1:92:01:55:f5:46:31:0e:cc:d2:
                    f3:e2:57:04:19:54:1f:ce:cb:a4:9a:01:b8:0e:06:
                    07:53:4e:c4:30:9b:3b:00:98:ee:95:cf:06:7e:b2:
                    a4:f7:38:c7:cd:04:96:28:91:6b:9a:5d:ba:66:35:
                    df:a5:47:3c:c6:c5:82:bb:92:17:fe:8c:3a:82:aa:
                    d2:33:e6:15:54:d9:1a:17:21:f7:44:73:b4:bf:77:
                    0e:ad:a9:df:51:02:a4:d8:91:9e:79:6d:f4:1a:c7:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:37:0E:1A:08:9B:26:B2:21:CF:C1:BC:78:E8:DB:8C:C3:22:71:5A
            X509v3 Authority Key Identifier:
                keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:72:8b:8e:9c:8f:1f:63:fb:58:b3:85:f2:bf:37:9f:9d:51:
         17:04:f7:c3:70:89:aa:1f:f4:09:ac:55:a3:66:65:3a:43:4e:
         c4:49:ae:9c:2f:a8:c6:46:09:4e:a4:9b:97:ba:05:19:b3:7c:
         dd:b9:d8:5b:d3:2a:b1:0b:d0:c7:b9:5e:91:95:c9:ea:03:37:
         0f:66:a1:d6:00:30:39:3a:26:8d:36:4a:f3:68:68:7d:8b:79:
         1e:7f:de:6b:44:c5:09:f4:0a:cd:6d:d1:63:0c:28:95:82:4e:
         19:34:64:88:5e:a7:5b:ca:b5:5f:c0:f5:ff:c9:4f:15:2b:20:
         96:9f:fe:02:11:1c:cd:c7:9a:bb:a5:7d:3f:72:c1:62:7c:4d:
         2b:72:b8:d5:1d:01:25:a8:07:61:24:78:d7:46:5a:91:3f:70:
         d0:c9:40:1d:cb:73:19:61:42:2c:4e:6d:a9:29:ea:bb:ef:22:
         8a:93:14:2a:ad:02:7a:6f:bd:b5:76:b4:5e:80:88:4a:2a:8a:
         c7:12:6c:5d:24:ee:08:9e:0e:90:63:f9:a5:fa:ec:49:74:ad:
         b2:08:7e:6f:f8:1f:6c:18:ee:07:c4:a6:ce:e8:06:63:b5:e6:
         f3:c2:54:15:2e:d4:0e:6d:0d:7d:46:45:1d:f7:1d:fe:51:6d:
         b1:14:c6:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF
RkU5OTEwQTIwHhcNMjYxMDI5MDE1MzM3WhcNMjYxMTA1MDE1MzM3WjAYMRYwFAYD
VQQDEw02YWUyYTcyMS0yMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUcN7OGLYNbN/jEnyRIEHfkYsG6aOO2c+hlWl3AIhbbiZPdbM0Uu8E3+B4hb
mCJy9BXftNwQnFXNDknfEvsd87IzYbLL/ZcaCfBfbb7zVXnitsfkI3eJKxpnSTMC
09Pzs3WqLtHJIWFZ+X1i1PQVeGd2kTQTNqzhhk9yP7/HgMkETo3Day7RJyFLAbjQ
069mmB+VKo8d0dgletGSAVX1RjEOzNLz4lcEGVQfzsukmgG4DgYHU07EMJs7AJju
lc8GfrKk9zjHzQSWKJFrml26ZjXfpUc8xsWCu5IX/ow6gqrSM+YVVNkaFyH3RHO0
v3cOranfUQKk2JGeeW30GscJzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN43DhoI
myayIc/BvHjo24zDInFaMB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz
MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTVFOC9FOUUxQkYyOEEzMDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdC
bGI2MXpaRDIySG52NlpFS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn3KLjpyPH2P7WLOF8r83n51RFwT3w3CJqh/0CaxVo2ZlOkNOxEmunC+oxkYJ
TqSbl7oFGbN83bnYW9MqsQvQx7lekZXJ6gM3D2ah1gAwOTomjTZK82hofYt5Hn/e
a0TFCfQKzW3RYwwolYJOGTRkiF6nW8q1X8D1/8lPFSsglp/+AhEczceau6V9P3LB
YnxNK3K41R0BJagHYSR410ZakT9w0MlAHctzGWFCLE5tqSnqu+8iipMUKq0Cem+9
tXa0XoCISiqKxxJsXSTuCJ4OkGP5pfrsSXStsgh+b/gfbBjuB8SmzugGY7Xm88JU
FS7UDm0NfUZFHfcd/lFtsRTGMg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 18:16:18 2026 by rpki-client