Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          UE3cHi8xARiCcesvsrn1aV2bgp50GzwLHMCmHoifZlw=
Subject key identifier:   7C:9A:B8:E5:8C:00:36:4C:B5:7E:EF:72:F2:30:E0:2D:BC:93:72:23
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3341
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          31F6
Signing time:             Thu 26 Mar 2026 15:28:09 +0000
Manifest this update:     Thu 26 Mar 2026 15:28:08 +0000
Manifest next update:     Thu 02 Apr 2026 15:28:08 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: ltCigJ36XLtfTsmH18cdhgOVO3FA2bgLzB9h4zkDlEs=)
                          2: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: aLEfT4bz2lONE3Z6tiYFlCUQQ7W4a5Jjb6n/TTXscv8=)
                          3: 6A721236977E11EBB7908378C4F9AE02.roa (hash: hlItmVrTld/H6VupX4GDTIZfW62BGqHzeXgz7JKRhHg=)
                          4: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: VwR7ciSw9K0cAPZ0/q0g7mvGXQVhOuUIe5YkFLUBvNM=)
                          5: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: sDukY+4vNyFTdEUh0TFnFVqsNmB2SFOIOqE9443URz8=)
                          6: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 7rpBX3OAFbXzSQsSCfiWv0jLzZ4CuFbqEu38r2Hi6ik=)
                          7: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: sNdT6MxrCuaojFi/BDrMhSBDkMs2xAxh6yY0O2/s+BE=)
                          8: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: DNpKV16jRaDVCMLZofIBpwfB3coox1f1YBts1IyzQeQ=)
                          9: 3E745A08803611ECB2187650C4F9AE02.roa (hash: Z0vH4g67LYRMUkDn33Xr1DacFCEO5gl+Mwlp4YCfqyI=)
                          10: 6DCD9050DCB011F09F01EF94466F56BC.roa (hash: CSTSsRORHJGkJ2OxQbDpWa4wIhPnwdisgm8MwAHVU6g=)
                          11: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: 6DiADTjHWOW4PhIupgiZTCqOgHxAcBfnE/zFUrFC5Uw=)
                          12: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: ZGTkEaop0Njy1O1CMAVof6Q9yXcRtZbEuTTl/ZxOWKs=)
                          13: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: GkFlzgc/nIyiS1LN/Cef4dU4OvlK6843acK12BI773w=)
                          14: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: S8DC6sajQu2v4AHH91DNQHiJ5wKp3+cyj/HTStHK1mI=)
                          15: 827529FE283811F185E40F22CC833773.roa (hash: 3SFrAFUK1HrkltbcG3Odys4KYSWvaaQdOZhMhBM1EuU=)
                          16: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: iIncNlkzDLncSdr4CvW4y2W5fyCiIPivB8IWCNWoJP0=)
                          17: 4BBB7E087DAD11F0BE453F16C4F9AE02.roa (hash: XZ29XXcAij2P0CNlcOiJ9wYaMzviwlMI9k1pwyCRJ2w=)
                          18: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: NqUuMy9p0TMFnr1hdFcOl63uXOxUFf6DtVkGnXJ//oQ=)
                          19: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: b1PlRjXuvw+bPWKNzR8yhRB1i2vQr1i31nAKPCd+jB4=)
                          20: BE430FFA699011EE96387F19C4F9AE02.roa (hash: nwAVGj9pFy222zqjuMW5VtHya2o6VVMIrsOdD04utTg=)
                          21: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: u0qwTK26crlyMuoa9QfDuqp5CWzIdI2WQad6/Sn3dko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13121 (0x3341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Mar 26 15:28:08 2026 GMT
            Not After : Apr  2 15:28:08 2026 GMT
        Subject: CN=69c55089-beb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:08:c4:2d:16:e2:14:bb:64:92:22:ab:4f:
                    65:f3:3f:80:0c:7f:57:1d:a0:1b:03:24:87:b8:7d:
                    35:37:b4:ad:b8:be:d0:9c:31:29:0b:0a:78:19:83:
                    45:e0:5e:c3:be:ac:f0:30:5a:14:9e:47:5e:61:d2:
                    31:b2:cb:cc:6d:14:2c:0e:88:96:2a:60:59:b2:ce:
                    88:2c:20:a0:3b:86:95:03:b1:b5:f9:19:94:42:c6:
                    2f:67:eb:6b:1a:f6:4b:aa:5e:ff:50:aa:83:24:e0:
                    a3:ab:0e:06:37:5b:ca:a6:fe:4f:5f:b8:e8:7a:81:
                    56:84:1e:bd:f0:6d:08:c0:c2:d5:58:01:58:66:b1:
                    cf:99:a2:26:52:4c:a5:fe:7f:ba:bc:c8:ab:c8:a0:
                    f0:20:a4:2f:75:da:25:a1:af:a8:cf:22:a3:5d:de:
                    46:4b:96:13:9c:4d:13:bb:15:1e:40:aa:bf:49:50:
                    2f:b8:43:45:6f:de:c2:db:9d:c8:e9:df:b4:3c:3e:
                    73:29:15:81:68:b2:3b:aa:7d:0a:3d:76:3e:59:d4:
                    a5:b8:92:c0:d4:7f:d7:81:75:4a:52:0b:c6:7f:41:
                    26:67:73:57:d0:5e:c2:5f:3a:f8:05:1f:a9:a5:f7:
                    f2:8d:43:06:8b:12:79:3f:64:77:41:61:c2:20:9e:
                    3f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9A:B8:E5:8C:00:36:4C:B5:7E:EF:72:F2:30:E0:2D:BC:93:72:23
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8e:40:5b:07:63:bb:41:82:ca:3c:30:d0:aa:8f:2e:d0:f7:
         93:db:55:ae:ad:88:e1:d4:8c:76:56:91:43:76:2b:2f:a9:bf:
         fe:c1:a8:00:72:df:4c:e3:0c:f0:37:67:5c:3c:67:0a:4e:6f:
         9a:12:aa:db:cc:9d:fe:c1:85:93:08:43:eb:d6:11:3c:46:34:
         59:05:cb:f2:12:a2:6a:d1:5b:ce:5a:1d:16:33:78:ab:73:2b:
         0d:f7:05:02:7e:70:4f:c8:c4:33:f7:18:bb:e4:8c:59:f5:56:
         e3:d2:6b:03:df:7b:8f:f2:0c:1f:95:74:9e:58:75:62:10:b4:
         21:17:ed:dc:f9:d9:54:fd:11:9f:82:4b:a1:a2:91:10:6a:b7:
         d7:d0:cb:4d:14:b8:01:e8:0a:94:aa:b2:2f:c2:30:9b:3f:51:
         5e:66:e1:d5:db:47:dd:70:da:ac:52:15:b8:53:cc:16:52:23:
         7c:e8:2b:2a:ed:3e:b4:15:35:cb:3d:68:f3:1c:aa:a3:5b:50:
         18:98:0c:2e:4c:68:8c:6a:1f:c6:e0:ea:f8:74:29:1e:39:10:
         10:50:55:b0:20:62:81:bb:45:1e:70:c8:b4:29:c7:ec:ba:2a:
         0d:c1:dc:11:96:b6:1b:d5:40:9e:d1:31:77:b3:49:7e:c7:1b:
         db:b7:e9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:45:38 2026 by rpki-client