Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
File:                     SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft (raw, json)
Hash identifier:          1XWioBEO2njtT50LO/lBf5ITbBTU0fxZbXZN4OpJGdw=
Subject key identifier:   FE:00:A0:7A:C2:B6:AB:BB:0D:59:03:8B:95:D2:70:79:A5:56:A1:16
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Certificate issuer:       /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
Manifest number:          09
Signing time:             Wed 25 Mar 2026 08:20:47 +0000
Manifest this update:     Wed 25 Mar 2026 08:20:46 +0000
Manifest next update:     Wed 01 Apr 2026 08:20:46 +0000
Files and hashes:         1: SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl (hash: YMTJBtuMtfkL+EosWXNG3AlwaPQRhAcjvSU0mr/0peI=)
                          2: D6CF9ED61D5611F1A0EA4997233D8C67.roa (hash: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
        Validity
            Not Before: Mar 25 08:20:46 2026 GMT
            Not After : Apr  1 08:20:46 2026 GMT
        Subject: CN=69c39adf-9b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:0c:46:ee:b4:3d:10:92:42:29:61:30:4d:
                    ad:50:cf:a7:20:7c:6a:12:98:0c:07:69:96:8b:ed:
                    d0:38:e9:64:da:4e:54:7b:92:22:2b:dc:47:4a:34:
                    3e:bc:6b:8c:26:da:0c:06:89:3a:76:16:ac:08:74:
                    dd:e9:a6:37:f6:5d:98:55:0a:c6:f7:23:b5:6e:ff:
                    e7:76:64:c7:54:4d:19:33:7e:cc:12:a7:48:53:ea:
                    c8:8f:c8:41:56:d7:3e:cf:f2:01:d6:c5:51:62:27:
                    33:1c:5f:b0:07:1d:07:bb:48:90:70:d6:4d:71:ee:
                    4f:33:97:54:53:b2:67:28:3a:ad:e9:c6:73:de:f4:
                    ed:c4:48:fb:40:e5:5a:b6:96:da:f1:e3:72:ef:cc:
                    6b:5f:78:af:7b:ce:92:28:eb:36:c9:1f:8a:99:e8:
                    b8:ca:b7:48:ce:1a:01:b4:dc:d1:21:8f:01:52:0f:
                    03:48:a2:f1:dc:ce:14:f3:6d:55:3d:94:35:a6:a7:
                    69:8d:b5:89:e2:bd:0e:17:02:88:57:11:1e:d7:93:
                    6d:3d:61:2b:bc:19:39:05:34:7e:21:98:fa:81:77:
                    10:4f:6d:d7:1b:b6:07:21:4b:8f:f7:9d:46:6b:de:
                    c1:20:18:36:4b:e7:0e:c3:01:67:f7:03:c2:0c:83:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:00:A0:7A:C2:B6:AB:BB:0D:59:03:8B:95:D2:70:79:A5:56:A1:16
            X509v3 Authority Key Identifier:
                keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:66:22:38:25:97:7c:29:8a:40:04:c0:22:e2:9b:4b:fd:10:
         ba:fe:11:e9:40:ea:33:87:32:62:b1:36:f4:43:89:ad:44:c9:
         aa:b9:09:2e:0f:f4:e0:d9:b2:91:61:2b:8c:d2:56:97:79:05:
         1c:a8:3f:a1:17:d5:f0:54:61:22:c8:5b:18:e0:2e:64:d9:74:
         1e:2a:88:07:ee:3c:1d:a1:4a:04:00:24:19:f9:03:48:b3:2a:
         c2:5f:0c:aa:fa:d3:43:59:8c:03:71:e8:f8:38:c1:47:68:9b:
         f5:be:f8:57:6e:3c:80:c5:af:f3:2d:7e:1c:7a:b7:ab:4d:45:
         d7:6b:cd:99:60:0b:a5:34:b6:ec:01:31:d0:eb:0d:33:68:29:
         14:fb:34:33:93:21:b9:e8:37:1e:6c:9d:7a:44:6f:f1:3a:c4:
         c8:d2:34:eb:b8:c4:89:d1:74:c8:c2:10:ef:9f:58:32:b2:d3:
         93:6a:7a:f7:ed:e0:9a:5c:c7:32:b2:40:6e:59:ef:6d:c0:89:
         2d:48:fa:42:93:a1:cc:c4:11:b3:cb:99:86:c5:7c:88:4f:d9:
         e0:58:9e:d7:91:45:75:be:7b:61:42:ce:91:cf:f8:0a:91:61:
         d3:47:fc:b7:4c:1c:6b:ea:fe:25:48:d3:ca:69:c8:65:78:b2:
         9b:5f:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:22 2026 by rpki-client