Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File:                     if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier:          9xN3c2UB9kjGIjvvc5gJdrn5ZE05zFVhfFCzSlGgz4A=
Subject key identifier:   B5:F5:63:36:BA:1C:FB:FC:9D:72:D9:13:3D:05:DD:65:9C:80:36:6E
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer:       /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial:       35D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number:          35AB
Signing time:             Sat 14 Nov 2026 15:01:48 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:47 +0000
Manifest next update:     Sat 21 Nov 2026 15:01:47 +0000
Files and hashes:         1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: sKTVjn48ZgTDP5oXYZQW1bIH9ko8rz42WcwlnFf5bFA=)
                          2: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=)
                          3: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: mK8qf/GYIQuZCVYCSo1wm8LPq+SV519KPVQtz/qeeLk=)
                          4: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=)
                          5: CE938F9ABC9111F19DF02D856011F970.roa (hash: afocyrJS0CezSphS0mhmaopPCzgPtuU3vwPZuoDk+qc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
                          rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13780 (0x35d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
        Validity
            Not Before: Nov 14 15:01:47 2026 GMT
            Not After : Nov 21 15:01:47 2026 GMT
        Subject: CN=6af877db-f2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4d:b0:cc:6a:f0:e9:02:39:7a:d8:eb:17:12:
                    97:e7:7f:31:47:7a:b1:7c:2f:da:49:95:25:f4:3f:
                    2c:d6:23:9f:f8:ad:f9:e7:32:e8:3b:11:42:6c:99:
                    1f:02:a6:9d:47:f1:7f:4f:42:d2:90:95:f7:c9:38:
                    6d:c0:82:8e:e5:f7:cf:aa:12:29:80:ff:96:5c:48:
                    08:c7:24:e3:fe:6e:ba:91:60:63:ea:6a:e6:c4:75:
                    e8:16:70:f6:1c:41:d5:50:9d:bb:15:ef:24:80:ae:
                    b0:73:c3:b5:b8:db:70:a5:ee:0b:3c:a0:86:7d:2c:
                    43:7b:64:46:f0:17:43:61:6a:9c:68:09:b1:28:f3:
                    e1:f7:13:2d:c1:95:ff:4d:a4:f7:69:ed:e9:f1:0a:
                    fe:d4:1e:56:45:c0:f8:58:5b:14:c3:f8:95:36:43:
                    42:9c:8d:de:17:8b:8c:d4:df:d4:bd:30:ff:64:5a:
                    25:b4:a2:97:2b:24:ef:71:4b:b6:be:5b:cb:be:d8:
                    70:aa:72:99:e2:75:da:8b:ed:9a:2d:fc:e9:40:af:
                    29:bb:95:9d:49:fa:9c:59:4f:b4:15:f1:ad:cd:c9:
                    28:c0:a0:e2:73:93:99:27:3e:e0:3a:c7:11:de:d5:
                    cb:73:83:96:14:c5:3f:51:4c:fd:2a:67:04:f2:09:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F5:63:36:BA:1C:FB:FC:9D:72:D9:13:3D:05:DD:65:9C:80:36:6E
            X509v3 Authority Key Identifier:
                keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e5:70:5c:1e:70:84:eb:b7:5c:f2:b4:e2:85:3e:20:e6:3b:
         c2:51:3e:a1:9a:14:89:f1:cf:75:29:4b:be:a6:02:a0:a0:48:
         54:f3:e0:e1:89:c0:3f:52:8a:52:7a:4c:22:d1:96:c4:fa:28:
         30:22:49:a0:d7:2a:6e:98:13:8c:60:93:90:ee:ec:f7:e1:ae:
         6c:1f:ab:12:f7:17:5b:cd:e2:25:c4:a9:51:32:b9:5e:f3:e3:
         d8:9a:bc:d6:aa:75:e4:2c:4b:ce:ca:bf:7f:26:10:f5:4c:ac:
         72:d0:8a:e5:41:ab:9d:f7:48:03:f2:8e:d2:76:98:29:84:bd:
         86:c7:7e:f4:20:18:ad:38:ff:a1:c3:56:6d:5d:df:e5:3b:45:
         26:74:f6:55:39:02:fa:e7:46:1b:47:df:88:f5:25:5d:b0:ac:
         2b:c5:26:dd:17:c7:f5:48:0f:b1:47:c1:d1:47:00:13:09:d0:
         41:d0:24:07:34:7b:b8:b3:e3:86:70:4d:23:6f:28:2a:3f:8d:
         6b:43:63:45:31:0e:18:fd:dc:93:17:e2:fe:88:ae:cd:80:46:
         fe:b2:a8:d2:f8:b3:e2:80:e9:75:c5:b0:76:73:86:fb:1d:b3:
         84:84:6e:59:45:22:77:2f:5a:86:b2:8c:b1:9c:2e:09:54:85:
         f2:ff:55:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz
MTE4NTgwMEIwHhcNMjYxMTE0MTUwMTQ3WhcNMjYxMTIxMTUwMTQ3WjAYMRYwFAYD
VQQDEw02YWY4NzdkYi1mMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA702wzGrw6QI5etjrFxKX538xR3qxfC/aSZUl9D8s1iOf+K355zLoOxFCbJkf
AqadR/F/T0LSkJX3yThtwIKO5ffPqhIpgP+WXEgIxyTj/m66kWBj6mrmxHXoFnD2
HEHVUJ27Fe8kgK6wc8O1uNtwpe4LPKCGfSxDe2RG8BdDYWqcaAmxKPPh9xMtwZX/
TaT3ae3p8Qr+1B5WRcD4WFsUw/iVNkNCnI3eF4uM1N/UvTD/ZFoltKKXKyTvcUu2
vlvLvthwqnKZ4nXai+2aLfzpQK8pu5WdSfqcWU+0FfGtzckowKDic5OZJz7gOscR
3tXLc4OWFMU/UUz9KmcE8gnUAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLX1Yza6
HPv8nXLZEz0F3WWcgDZuMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE
QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ
UVNLV19ycHM1dGd4R0ZnQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl+VwXB5whOu3XPK04oU+IOY7wlE+oZoUifHPdSlLvqYCoKBIVPPg4YnAP1KK
UnpMItGWxPooMCJJoNcqbpgTjGCTkO7s9+GubB+rEvcXW83iJcSpUTK5XvPj2Jq8
1qp15CxLzsq/fyYQ9UysctCK5UGrnfdIA/KO0naYKYS9hsd+9CAYrTj/ocNWbV3f
5TtFJnT2VTkC+udGG0ffiPUlXbCsK8Um3RfH9UgPsUfB0UcAEwnQQdAkBzR7uLPj
hnBNI28oKj+Na0NjRTEOGP3ckxfi/oiuzYBG/rKo0viz4oDpdcWwdnOG+x2zhIRu
WUUidy9ahrKMsZwuCVSF8v9V7A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:58:22 2026 by rpki-client