Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
File:                     SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json)
Hash identifier:          DQWgPXiv788r37JM5cls5TQEyd/ITQ5YByVY594aZ64=
Subject key identifier:   74:AD:FC:B2:A9:58:5F:9D:B5:59:0A:55:CB:07:98:3E:40:FC:79:DC
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Certificate issuer:       /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial:       05B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
Manifest number:          059A
Signing time:             Wed 22 Jul 2026 23:58:41 +0000
Manifest this update:     Wed 22 Jul 2026 23:58:40 +0000
Manifest next update:     Wed 29 Jul 2026 23:58:40 +0000
Files and hashes:         1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: OYERtNqZpRaVaNZ/Pu2LehwIImAS7JwsxbS32z2q1Wg=)
                          2: A64296622BAA11EC9618D864C4F9AE02.roa (hash: 8H4igkdyvSrlee6FsZvSUQfDkv8BaE7hXMId+JKjlHg=)
                          3: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: bl7MGI+s+GfSmkdUWGV0SRhTk0mPX6Nm2mcc4YlHOsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
                          rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
        Validity
            Not Before: Jul 22 23:58:40 2026 GMT
            Not After : Jul 29 23:58:40 2026 GMT
        Subject: CN=6a615930-45bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:2c:49:35:e3:15:4e:ff:ff:4f:bc:0b:eb:
                    20:ba:85:05:7d:77:68:fe:b8:4c:3c:16:eb:e1:c3:
                    24:3e:40:d3:a7:9a:cc:eb:cb:1e:b9:24:fd:65:f8:
                    69:96:c1:4e:8e:36:6c:c4:53:db:f3:3e:cd:07:51:
                    56:56:86:21:23:00:80:a7:d1:cb:1f:6a:ff:dc:57:
                    fe:27:07:d0:24:b7:33:b7:40:9f:f1:27:36:d1:a2:
                    68:86:29:50:cb:6e:25:2e:d2:e9:aa:af:d7:4e:e5:
                    60:ac:46:fa:c9:a6:a8:9d:4c:66:61:06:b4:1c:14:
                    c0:2c:c1:5f:a9:21:95:0b:93:0c:a4:34:4a:84:be:
                    8b:99:7e:ea:b2:4f:04:a1:8a:d7:a5:df:62:09:13:
                    24:23:10:01:e0:b0:84:15:32:14:9c:ad:aa:e2:03:
                    c2:b6:9d:9e:0f:c5:d9:fc:df:13:97:ba:cf:b1:ec:
                    2e:38:bf:84:17:c3:ce:d0:00:da:00:ad:84:3b:25:
                    b2:bc:09:48:20:39:fe:f9:f4:80:f9:1d:f6:94:88:
                    94:d8:18:56:a0:1e:64:94:6a:01:66:6e:b5:2c:12:
                    98:87:7c:f5:ab:a3:45:52:c3:56:d8:91:0a:23:95:
                    83:23:89:57:d0:c6:27:62:4a:2f:e0:8c:36:d2:14:
                    aa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AD:FC:B2:A9:58:5F:9D:B5:59:0A:55:CB:07:98:3E:40:FC:79:DC
            X509v3 Authority Key Identifier:
                keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:18:dd:3d:97:e4:08:e0:4c:41:9a:df:56:58:b7:19:bf:
         45:71:ba:db:16:06:fa:72:67:d4:be:57:63:df:8f:cb:20:f7:
         7d:82:90:92:80:56:cf:78:80:46:b1:26:be:db:a5:c6:83:00:
         d7:6f:7c:b4:ea:d4:84:78:7f:fd:d4:76:bd:94:8b:49:70:a3:
         f2:76:59:79:4e:8b:ba:22:af:db:fd:c3:91:61:2b:b9:c7:53:
         51:bd:b3:46:e9:9f:97:c5:20:31:03:cb:d6:4b:78:2c:04:a2:
         8d:ef:8f:e0:28:22:b9:80:c7:8d:4c:14:98:b1:94:58:e8:6b:
         1a:52:03:82:9c:80:a8:e4:6e:40:3f:9c:a3:8d:db:ac:c5:e3:
         59:14:3b:7e:55:d6:51:3f:ab:f8:7d:47:a5:43:42:d2:06:b0:
         1e:50:c2:13:44:db:79:fa:88:eb:df:3d:7f:69:34:6c:13:3f:
         5e:f7:f6:f2:19:ab:0b:2e:84:03:55:7e:82:4b:1a:cb:81:41:
         de:02:94:bb:a9:ec:08:b9:f1:7a:e3:c1:d4:bd:08:07:40:7a:
         ee:fb:d9:65:fb:69:45:24:6f:54:64:01:05:99:87:92:47:dc:
         f1:a0:2f:16:9f:ea:35:f5:d9:24:16:3a:7f:70:82:1e:43:b7:
         f7:45:36:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIzNzMxMTAvBgNVBAUTKDRBMjg2NTFBOTRBQzYzOUY2QUIxMzI0NzREMzFFQjBE
RkNFNkRDNzkwHhcNMjYwNzIyMjM1ODQwWhcNMjYwNzI5MjM1ODQwWjAYMRYwFAYD
VQQDEw02YTYxNTkzMC00NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnG0sSTXjFU7//0+8C+sguoUFfXdo/rhMPBbr4cMkPkDTp5rM68seuST9Zfhp
lsFOjjZsxFPb8z7NB1FWVoYhIwCAp9HLH2r/3Ff+JwfQJLczt0Cf8Sc20aJohilQ
y24lLtLpqq/XTuVgrEb6yaaonUxmYQa0HBTALMFfqSGVC5MMpDRKhL6LmX7qsk8E
oYrXpd9iCRMkIxAB4LCEFTIUnK2q4gPCtp2eD8XZ/N8Tl7rPsewuOL+EF8PO0ADa
AK2EOyWyvAlIIDn++fSA+R32lIiU2BhWoB5klGoBZm61LBKYh3z1q6NFUsNW2JEK
I5WDI4lX0MYnYkov4Iw20hSqwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSt/LKp
WF+dtVkKVcsHmD5A/HncMB8GA1UdIwQYMBaAFEooZRqUrGOfarEyR00x6w385tx5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM3My8yQzAwNkJCODJC
MkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1OXFzVEpIVFRIckRmem0z
SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NpaGxHcFNzWTU5cXNUSkhUVEhyRGZ6bTNIay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjM3My8yQzAwNkJCODJCMkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1
OXFzVEpIVFRIckRmem0zSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAleEY3T2X5AjgTEGa31ZYtxm/RXG62xYG+nJn1L5XY9+PyyD3fYKQkoBWz3iA
RrEmvtulxoMA1298tOrUhHh//dR2vZSLSXCj8nZZeU6LuiKv2/3DkWErucdTUb2z
Rumfl8UgMQPL1kt4LASije+P4CgiuYDHjUwUmLGUWOhrGlIDgpyAqORuQD+co43b
rMXjWRQ7flXWUT+r+H1HpUNC0gawHlDCE0TbefqI6989f2k0bBM/Xvf28hmrCy6E
A1V+gksay4FB3gKUu6nsCLnxeuPB1L0IB0B67vvZZftpRSRvVGQBBZmHkkfc8aAv
Fp/qNfXZJBY6f3CCHkO390U2ZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:57 2026 by rpki-client