Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          ER5F1gbtdvyW5rG1tAZMM5xZMQOVChamWJPLeFkIQXw=
Subject key identifier:   90:4F:C4:C5:C6:EB:E7:4B:88:C7:4B:E7:4E:D8:49:B6:18:D2:13:A3
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       33BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          3247
Signing time:             Thu 23 Jul 2026 23:30:37 +0000
Manifest this update:     Thu 23 Jul 2026 23:30:37 +0000
Manifest next update:     Thu 30 Jul 2026 23:30:37 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: xOXtFT3stYnmk6d7TDhwflHrozmT32X9WEi9kBi7mCU=)
                          2: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: EdAk5zsf0r/PC02zoTLJLeSUQvTSrysLDW997KtgSaw=)
                          3: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: 09+nWZMjqXfgFdYjvibjiZOGUok2Ho8rCRGwwhhreRA=)
                          4: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: GGQfOCCTKM5uEJbHe5QQxWuS4zJHwzAM+PQrjofddOE=)
                          5: 6A721236977E11EBB7908378C4F9AE02.roa (hash: gC5e7sbYmpDbg44T5iAcfmpVsHLO+fp0RqFvY6+sRzM=)
                          6: BE430FFA699011EE96387F19C4F9AE02.roa (hash: LEWEzJWM+VDuaDPk2kAnTOmGLm/4RAqGfai+OLKDKI8=)
                          7: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: EGkCq903tBEUfpJq5v5xjpcF0h1b9GG/1EXxaZOLKu8=)
                          8: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: rpTh1tyT+irT3guuH3k6qdmgXIOh+Z8Qw6zKxFGPTng=)
                          9: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: jcG8jXTEcMWA0kyeBWJCt1XldDDQEQffdhhqylVF28w=)
                          10: 3E745A08803611ECB2187650C4F9AE02.roa (hash: AjLtnQtkAPQclAieWGuvtVrv0i+EnV+un4k9GjM/4H4=)
                          11: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: n/YbDaTHamqztSNTrdvyoK86w2NzWca60Rrf+3JLb04=)
                          12: 827529FE283811F185E40F22CC833773.roa (hash: dTzR/HStnSM70swmZgTsYMO6024GnB3cnIbw6SY7ol4=)
                          13: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: /RppCjU33GO0U3wO2YUROPH0xRm+4clHNfNv1e9sTdY=)
                          14: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: bBEzHGZESeot1MOPqUvtFroYp6GPlMWk1avvpXD+o9A=)
                          15: 6DCD9050DCB011F09F01EF94466F56BC.roa (hash: FHR5I+jMDdPdVs5j9capt040AAjx4n0xwQsKBMaPe4g=)
                          16: 7F82052C86EE11F19E006003A7EE528E.roa (hash: PVx/iNYWfKskJkMec04VfTHkELoytP4e/h69jelZqqM=)
                          17: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: E6n2N4AQMd5gVPeIOWYlkDo3h1T1AmCj4rCa/8Q6/d8=)
                          18: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: DfmxHIA5z45hjDjNTd19Co3C69izyn8G2LUBgBauMS0=)
                          19: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: Ss+FUQPG9F9hZM/4lQxz8L820kYuesvHrOBEmXhzsTQ=)
                          20: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: VOE8IEA3jtZkECGWWtAjNYHInClJ3+qemfqJlhoQGPs=)
                          21: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: a5QR6qFaLHW8X+pHKmc+aeeAQ06cOZZNDQiWNrIkUgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 23:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13242 (0x33ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Jul 23 23:30:37 2026 GMT
            Not After : Jul 30 23:30:37 2026 GMT
        Subject: CN=6a62a41d-1881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d9:df:fd:a8:6d:ed:52:2b:8d:6c:ab:d3:cf:
                    08:23:b9:23:a1:e6:b0:65:d8:d6:fe:2b:a6:1a:f0:
                    2d:2e:dc:41:5b:17:85:db:27:c9:df:cf:99:71:40:
                    22:b9:a8:4e:13:a9:47:61:d5:3f:6b:59:40:aa:61:
                    59:5a:07:ea:d5:86:02:bb:c3:88:2b:ed:2d:25:2e:
                    94:92:d6:43:d1:e2:d6:cf:77:49:d1:6a:0a:bd:9f:
                    37:aa:53:fa:70:d5:5c:f5:26:b2:84:b2:74:6c:67:
                    c1:7d:cf:aa:23:3c:03:92:f9:5c:a6:a8:f6:b0:dc:
                    e5:ef:ff:39:26:af:4c:e7:ce:c1:26:bc:55:17:ca:
                    1e:93:b3:bb:d4:71:81:ed:4e:69:81:3d:52:d7:60:
                    58:87:e1:e5:be:00:58:43:ec:45:ff:8b:ad:96:91:
                    fc:c3:3c:a5:67:53:22:6b:9e:af:ad:13:ae:0c:ea:
                    f7:44:f2:68:a4:0d:89:31:8f:6b:d3:61:ee:9c:87:
                    97:26:20:04:cb:53:97:72:f7:92:b7:74:05:54:06:
                    a1:39:f5:06:7b:b0:67:67:57:b7:1a:d1:07:77:be:
                    13:e4:d5:9a:72:92:f5:ae:7c:01:0c:43:07:f1:26:
                    c7:d1:03:03:13:fd:0a:fe:90:08:8e:2e:0f:54:81:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4F:C4:C5:C6:EB:E7:4B:88:C7:4B:E7:4E:D8:49:B6:18:D2:13:A3
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:56:58:7c:4a:42:62:79:77:a1:ed:02:41:17:3b:9d:4a:
         c0:a4:2d:9e:56:c8:a4:36:d2:b0:36:e4:a4:14:7e:d8:d2:53:
         bc:49:46:53:e4:a6:f8:d3:ea:d0:b0:65:65:11:2e:ba:2e:24:
         d8:8d:07:c8:2b:95:8e:44:6e:7e:2c:41:fc:f8:59:1b:a7:19:
         70:8f:e5:29:ff:52:33:b9:7e:13:aa:cb:b3:62:a9:a3:66:c9:
         f4:e5:5f:c4:54:bc:c0:07:46:ef:77:13:48:11:1a:5a:01:9e:
         db:20:29:44:a5:0e:75:db:80:4b:3e:f7:5e:ef:06:b5:6c:d3:
         a8:c9:d4:7b:81:d8:10:fe:e6:41:c6:6b:68:b5:84:39:79:34:
         89:38:80:99:9e:91:46:3a:25:83:c7:de:ba:9c:aa:87:e6:2d:
         b5:46:51:f8:f9:fe:55:fb:da:da:fa:97:dc:70:7b:db:98:b5:
         d6:1c:6b:9f:4c:16:ba:6f:10:de:8a:ce:eb:d4:e7:7a:9b:6a:
         79:34:a0:1f:7d:4c:c0:05:ab:75:bf:7a:54:da:8e:6b:2b:e3:
         37:89:cb:6b:8f:4a:dd:ca:35:72:49:bf:96:e1:84:3f:4b:97:
         6b:ae:30:91:ae:e5:b0:bc:66:5d:02:09:ca:36:e5:3a:78:82:
         8e:c2:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:22:17 2026 by rpki-client