Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
File:                     SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft (raw, json)
Hash identifier:          dEAPbewvbk20ttihPD9ZAWsXPCZJiwhJoAOyJjgo9NE=
Subject key identifier:   7F:5D:41:6C:6C:18:D3:B5:1D:BF:AE:6F:96:9E:B5:35:CB:A9:73:EA
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Certificate issuer:       /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
Manifest number:          45
Signing time:             Thu 23 Jul 2026 10:26:02 +0000
Manifest this update:     Thu 23 Jul 2026 10:26:02 +0000
Manifest next update:     Thu 30 Jul 2026 10:26:02 +0000
Files and hashes:         1: SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl (hash: Z0FYErI1UK5Yjrih/fpajFuv65cb4zJTAZO58DCKROY=)
                          2: D6CF9ED61D5611F1A0EA4997233D8C67.roa (hash: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
        Validity
            Not Before: Jul 23 10:26:02 2026 GMT
            Not After : Jul 30 10:26:02 2026 GMT
        Subject: CN=6a61ec3a-9074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:67:a1:57:a0:8a:b0:ee:53:0e:1e:49:9b:
                    05:7a:f0:ad:5b:ee:00:ed:e5:9c:0d:07:d5:4d:2c:
                    3b:64:fa:bd:84:7e:ce:dc:de:3a:49:5f:b7:98:56:
                    82:38:52:19:b5:cf:ed:23:66:38:76:f7:ea:e2:f8:
                    da:a5:d8:40:30:cf:19:1f:ef:f8:3d:1b:f2:fd:f8:
                    a6:a5:10:ca:30:8b:b3:06:2e:95:86:70:42:b9:3f:
                    4e:50:d1:54:ae:44:05:c5:ed:53:cb:08:74:5b:7a:
                    9d:05:77:72:07:23:b0:aa:74:c4:53:78:0e:0f:98:
                    94:9d:09:c9:70:37:27:ea:24:51:63:d5:21:e2:39:
                    6a:79:f4:8d:ae:65:14:e4:30:f2:72:99:e8:e1:05:
                    b2:37:e2:cb:87:25:cf:d0:37:53:f3:8a:1f:7b:2a:
                    5b:97:2e:d7:37:96:9b:7a:c4:6c:c8:23:b8:7b:db:
                    75:bc:31:65:31:10:87:aa:0a:df:22:a6:48:9b:e0:
                    1c:a2:31:83:e3:28:20:5d:c8:cd:c3:13:9a:c4:74:
                    ba:53:c2:a8:83:8f:0a:fe:8c:1a:4b:b6:f6:d4:19:
                    d0:a8:88:29:ab:57:30:e5:69:7a:2d:2e:bc:1e:62:
                    cc:a2:6f:45:58:ca:62:ca:c5:4f:78:08:8d:40:a6:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5D:41:6C:6C:18:D3:B5:1D:BF:AE:6F:96:9E:B5:35:CB:A9:73:EA
            X509v3 Authority Key Identifier:
                keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:da:f7:d2:7a:72:2a:b9:ab:02:a8:03:bd:67:93:03:78:de:
         b6:8b:6a:b6:4a:58:85:ca:78:f4:f3:e7:d3:f5:bd:07:a7:7f:
         4e:f4:dc:ac:96:b9:59:ab:6a:18:82:e9:75:8d:cb:62:d6:ca:
         30:11:4f:46:a2:e8:71:f5:5e:d3:9a:21:4e:ae:89:50:d3:05:
         d1:5b:dd:ba:18:1a:fd:cc:7b:df:da:8a:f0:95:0a:d5:3c:93:
         c9:d9:29:61:db:08:da:bb:39:79:3b:83:29:e3:17:57:1e:47:
         e7:0d:5e:05:02:b0:86:90:da:8e:41:18:d8:06:87:27:19:2e:
         29:04:ef:4e:81:ad:7e:9e:d3:fb:2f:be:73:8b:8d:ef:8d:8c:
         2b:bc:10:8e:4d:27:a1:c9:ad:71:82:82:9d:98:1c:c7:46:58:
         88:df:40:a1:f1:58:13:b3:c1:96:68:52:07:39:44:e4:f8:25:
         a2:67:b6:76:f1:a5:42:00:62:5a:31:43:25:41:cb:94:28:46:
         a3:f3:8c:80:90:ee:58:c0:ae:76:a4:b7:d6:77:3b:fb:e0:97:
         5b:45:fd:7d:1e:b1:fb:98:26:02:bd:b3:36:67:c0:c2:c6:e2:
         c7:46:1f:99:f3:33:e4:27:3f:b3:9a:62:47:98:1b:da:30:5b:
         c5:eb:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:00 2026 by rpki-client