Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
File:                     SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft (raw, json)
Hash identifier:          HjX89G4zu1F5C8CMdRJw+9FY0t2AbUXP7xnn9MMMEfg=
Subject key identifier:   06:1D:83:5B:B6:C9:DD:1A:C4:C6:15:7E:C8:FC:C5:FD:AA:83:8F:4C
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Certificate issuer:       /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial:       0D1A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
Manifest number:          0D0F
Signing time:             Mon 12 Oct 2026 17:05:38 +0000
Manifest this update:     Mon 12 Oct 2026 17:05:38 +0000
Manifest next update:     Mon 19 Oct 2026 17:05:38 +0000
Files and hashes:         1: SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl (hash: rvH+vaWYlz3hdu86SRsWaH+Vk6ZhO7bu8gdmKI+LIDI=)
                          2: 16572A3CEB3511F08C2D5B303F6F56BC.roa (hash: 1y/5rrZjiZi/wou/2ExgTOGyybm/GQapVPwAdz5lbX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
        Validity
            Not Before: Oct 12 17:05:38 2026 GMT
            Not After : Oct 19 17:05:38 2026 GMT
        Subject: CN=6acd1362-de1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:ea:0d:49:71:6f:32:9a:79:b3:11:a6:fa:
                    51:c2:23:d6:d6:91:ed:33:0b:37:e8:60:c8:ba:ff:
                    55:ef:0d:a6:7e:2d:47:5a:4e:1d:24:a7:1b:d5:fc:
                    2f:54:c2:48:36:ea:38:82:34:09:6f:f5:c3:f4:b9:
                    0e:55:0e:82:f5:d7:8b:5e:a7:1f:f6:31:cd:35:28:
                    e5:2a:be:42:c1:eb:b5:8a:71:c5:bd:5d:ce:5b:28:
                    92:eb:45:f7:a1:88:cb:39:f1:aa:71:d3:0e:b8:ed:
                    92:11:4e:51:47:ad:c7:83:11:58:a6:cd:97:de:c1:
                    70:1d:a7:4c:f1:0a:c9:bb:46:ba:bd:75:37:3a:6b:
                    22:ca:c5:2d:1c:2e:fd:c1:66:2f:e7:ce:10:4d:14:
                    31:56:66:63:08:48:4b:4d:b4:48:ee:1c:2c:ab:ec:
                    94:15:34:55:b7:3e:7f:b3:5b:5b:46:61:9c:8e:2c:
                    86:f4:7d:8f:0d:71:3b:8b:b9:15:35:02:06:54:2e:
                    0e:28:65:48:91:bd:ba:ae:39:47:42:14:fe:32:52:
                    f0:68:b5:1b:ed:2e:a6:11:64:99:24:86:ae:2c:f8:
                    f8:4d:01:43:f6:b3:ff:af:cc:ee:b6:ee:e0:7d:f8:
                    a9:1a:79:dd:2f:ed:03:cc:ee:30:d6:48:4b:1a:88:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1D:83:5B:B6:C9:DD:1A:C4:C6:15:7E:C8:FC:C5:FD:AA:83:8F:4C
            X509v3 Authority Key Identifier:
                keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a4:ac:3d:77:8f:e9:c2:cc:0b:9c:c5:c0:ea:3c:84:c0:5f:
         dc:77:cc:62:59:da:70:1d:80:19:7f:5c:33:64:ef:49:7d:3d:
         89:ad:65:82:36:6b:55:f0:8b:97:0b:b3:b6:ab:9b:7e:0b:14:
         ab:b4:9a:8b:17:2a:89:50:00:3a:bd:01:e4:84:0c:6d:e7:44:
         1c:0d:55:7b:25:9a:33:e8:62:74:c7:a4:b6:57:cf:e8:61:3a:
         51:1b:e7:e1:ca:20:75:f4:3a:77:f6:f3:f5:7c:d9:bb:04:0b:
         68:f9:a5:9a:ad:46:93:11:96:8c:00:52:ee:2b:a5:68:71:76:
         29:fb:ed:42:79:f5:e5:7e:4d:c0:15:22:71:8e:8b:01:cf:73:
         b5:9d:ae:f4:a5:41:2a:75:4c:f8:59:1b:a6:86:32:f0:22:a3:
         a0:10:e0:c3:0a:1f:ed:f1:17:18:b3:c3:3d:a8:5a:ad:e1:6d:
         9d:1b:0b:d2:90:5e:65:70:1f:97:2a:39:e6:10:ee:2d:cf:81:
         7f:8d:ce:57:33:b4:b0:ef:b3:c9:6f:ef:13:a6:ef:02:f6:46:
         82:79:14:1f:06:12:06:fb:fc:97:cd:a1:a4:8e:f9:f0:40:6e:
         0a:d9:b2:24:fe:ab:3b:a6:11:8c:22:06:cb:28:b3:e2:a8:f0:
         d5:95:04:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDREYxMTAvBgNVBAUTKDQ4NTJFODcyNkMxNDQ4QTEwNDBDQ0ZBMDQzQjgzMTRB
QUU0QzRFOUEwHhcNMjYxMDEyMTcwNTM4WhcNMjYxMDE5MTcwNTM4WjAYMRYwFAYD
VQQDEw02YWNkMTM2Mi1kZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlYnqDUlxbzKaebMRpvpRwiPW1pHtMws36GDIuv9V7w2mfi1HWk4dJKcb1fwv
VMJINuo4gjQJb/XD9LkOVQ6C9deLXqcf9jHNNSjlKr5Cweu1inHFvV3OWyiS60X3
oYjLOfGqcdMOuO2SEU5RR63HgxFYps2X3sFwHadM8QrJu0a6vXU3OmsiysUtHC79
wWYv584QTRQxVmZjCEhLTbRI7hwsq+yUFTRVtz5/s1tbRmGcjiyG9H2PDXE7i7kV
NQIGVC4OKGVIkb26rjlHQhT+MlLwaLUb7S6mEWSZJIauLPj4TQFD9rP/r8zutu7g
ffipGnndL+0DzO4w1khLGogKRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYdg1u2
yd0axMYVfsj8xf2qg49MMB8GA1UdIwQYMBaAFEhS6HJsFEihBAzPoEO4MUquTE6a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9DMUNCMkRGMjEw
RDgxMUVBOUJEMUE1NURDNEY5QUUwMi9TRkxvY213VVNLRUVETS1nUTdneFNxNU1U
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1NGTG9jbXdVU0tFRURNLWdRN2d4U3E1TVRwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkNERi9DMUNCMkRGMjEwRDgxMUVBOUJEMUE1NURDNEY5QUUwMi9TRkxvY213VVNL
RUVETS1nUTdneFNxNU1UcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMKSsPXeP6cLMC5zFwOo8hMBf3HfMYlnacB2AGX9cM2TvSX09ia1lgjZrVfCL
lwuztqubfgsUq7SaixcqiVAAOr0B5IQMbedEHA1VeyWaM+hidMektlfP6GE6URvn
4cogdfQ6d/bz9XzZuwQLaPmlmq1GkxGWjABS7iulaHF2KfvtQnn15X5NwBUicY6L
Ac9ztZ2u9KVBKnVM+FkbpoYy8CKjoBDgwwof7fEXGLPDPahareFtnRsL0pBeZXAf
lyo55hDuLc+Bf43OVzO0sO+zyW/vE6bvAvZGgnkUHwYSBvv8l82hpI758EBuCtmy
JP6rO6YRjCIGyyiz4qjw1ZUEEw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:16:29 2026 by rpki-client