Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
File:                     shmdscl5XUlnt_7Voe9wn6LpaGE.mft (raw, json)
Hash identifier:          X1FDrI/JFyipRRKAeb2sgmc5+zCrkMcW5Bidb+w3Jo4=
Subject key identifier:   D9:E3:06:EF:AC:16:2D:84:59:75:6B:A8:79:FE:57:E0:AF:B6:1E:E4
Authority key identifier: B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61
Certificate issuer:       /CN=A9111D65/serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
Manifest number:          06
Signing time:             Wed 25 Mar 2026 08:22:37 +0000
Manifest this update:     Wed 25 Mar 2026 08:22:37 +0000
Manifest next update:     Wed 01 Apr 2026 08:22:37 +0000
Files and hashes:         1: shmdscl5XUlnt_7Voe9wn6LpaGE.crl (hash: dRwrMmbijNMHHswDz9PdeJtMMNGOOjsbEiAYlJfJ9DA=)
                          2: D5931DD822A911F1B999B242B5833773.roa (hash: 9CC6O07iFUNLEts6pdhGBre/dsBGCYzcLM8YjPj0LWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl
                          rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D65, serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861
        Validity
            Not Before: Mar 25 08:22:37 2026 GMT
            Not After : Apr  1 08:22:37 2026 GMT
        Subject: CN=69c39b4d-bf81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:59:e6:12:06:75:d4:df:d7:bf:8e:f1:b4:
                    08:71:07:79:25:52:5b:69:35:50:4c:6c:60:a0:2d:
                    8c:12:41:b3:1f:b2:98:59:0d:82:28:c3:36:a5:37:
                    c5:45:e5:5c:ee:da:11:1f:f6:bb:93:f0:de:d5:c8:
                    87:47:55:df:94:ac:e4:00:8e:d6:0c:d0:db:b7:aa:
                    66:a4:53:fb:e9:08:21:97:39:fb:60:2c:43:e0:b8:
                    8c:96:f1:e1:44:da:e2:9c:4e:ea:78:cc:da:1c:88:
                    c9:e9:f2:d6:3e:9a:8f:8a:45:75:e2:15:4e:ac:ea:
                    f4:41:80:25:fc:af:e2:6b:89:ed:dc:63:6e:42:6f:
                    2b:74:d0:32:47:43:66:06:1d:ee:08:d3:d0:22:5a:
                    ad:d7:99:8f:a6:ae:ba:97:1f:40:68:ca:a0:99:15:
                    f0:7c:68:10:80:b7:71:78:f0:f8:23:f9:15:ae:8d:
                    07:06:40:61:b1:0f:bb:77:58:5f:43:28:dd:98:f7:
                    18:51:53:58:9c:70:f9:a1:3c:86:4b:d2:c6:0c:0f:
                    4c:7a:d5:3c:7f:df:db:0d:72:65:3d:04:d6:92:c9:
                    e3:49:c6:f6:43:be:c6:ae:28:27:10:b1:83:d2:38:
                    67:ce:10:88:55:9c:3b:9c:85:8d:75:33:72:77:d9:
                    82:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E3:06:EF:AC:16:2D:84:59:75:6B:A8:79:FE:57:E0:AF:B6:1E:E4
            X509v3 Authority Key Identifier:
                keyid:B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c8:3a:31:e3:c3:eb:de:f5:0d:e5:93:3c:0e:71:bf:f2:fb:
         28:0c:89:80:22:dc:7c:0d:c2:54:76:e7:80:6c:b7:26:5b:bb:
         4c:c7:31:db:a7:43:73:59:ac:da:27:fe:5a:7d:48:20:d0:e4:
         0d:ee:c4:1d:79:2f:50:e4:8a:d3:fe:2b:66:af:98:3f:32:08:
         e8:f1:4e:10:a7:59:45:95:a6:45:eb:1c:b6:0b:6e:ff:3e:fc:
         94:33:17:b6:ba:11:d7:6d:1f:12:77:dd:2e:d2:35:c4:17:54:
         2b:15:12:60:19:da:49:e4:4e:25:3e:df:7e:eb:27:4f:b9:54:
         e2:04:ca:1c:44:d5:af:c2:9c:28:42:cc:3d:82:6a:58:89:d2:
         66:aa:3d:bb:26:46:64:94:50:33:19:48:e3:d9:8b:3f:71:a4:
         74:38:cc:15:12:67:2e:a7:ab:04:4c:c8:08:2a:68:1a:a5:3e:
         f5:34:04:66:d4:03:88:24:06:6d:9b:1b:d4:40:8d:00:a3:04:
         5f:5d:6c:95:01:7f:2f:cf:a0:08:93:f7:cb:4e:0f:ef:7f:39:
         e4:f6:50:9f:07:ec:1a:d4:9d:b3:66:74:69:ab:ee:e3:bd:8c:
         9e:58:52:2e:d2:b2:45:22:97:4a:e8:8f:59:2f:30:8a:2a:32:
         ca:76:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:26:26 2026 by rpki-client