Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
File:                     SiRb8P512qERSrxQ5rme1DbDLGk.mft (raw, json)
Hash identifier:          VM3F80EYfflH3XxkIpFDF/TjPBf0qVMYVEn73ZlJYuI=
Subject key identifier:   9E:BA:8E:99:E3:79:76:3B:AC:A5:72:05:55:C9:8C:A2:4F:B1:5B:65
Authority key identifier: 4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69
Certificate issuer:       /CN=A914D3D0/serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
Manifest number:          42
Signing time:             Thu 23 Jul 2026 10:29:30 +0000
Manifest this update:     Thu 23 Jul 2026 10:29:29 +0000
Manifest next update:     Thu 30 Jul 2026 10:29:29 +0000
Files and hashes:         1: SiRb8P512qERSrxQ5rme1DbDLGk.crl (hash: o9zI8M0rYLp1Eq9eXblRevWktSdE+oC4TyRMhh3duXQ=)
                          2: D11E6E8224CB11F1A3AB4FF6A7833773.roa (hash: x6uhNShvVOgmcKuVqlrOttACB4glBVZA83SSQpSH+7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl
                          rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3D0, serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
        Validity
            Not Before: Jul 23 10:29:29 2026 GMT
            Not After : Jul 30 10:29:29 2026 GMT
        Subject: CN=6a61ed0a-d0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:61:e9:53:86:ae:60:76:49:d2:2f:fd:e4:
                    fb:f6:eb:1b:c8:06:9b:f4:e1:06:c5:01:bb:c1:9d:
                    9b:04:e3:9a:9f:30:2d:8c:6d:9b:9b:78:f7:79:9f:
                    8d:f8:83:cf:f9:e2:33:99:af:c0:fb:26:90:10:35:
                    3d:7a:8c:01:8d:11:11:53:e8:f9:09:46:d1:f4:16:
                    6d:83:24:57:bb:9d:2b:13:fa:61:df:f7:aa:c9:f5:
                    4f:a7:58:d0:ea:f5:ab:ea:cb:c8:e6:ac:f2:31:e4:
                    22:2f:6d:12:cf:4b:92:36:06:ef:ae:ad:85:fb:94:
                    62:51:e4:dc:6a:89:9c:ab:88:a0:36:cf:ed:98:a4:
                    24:d8:b1:56:33:51:19:0d:17:eb:89:ff:62:49:f5:
                    65:90:2f:71:8a:2e:e9:76:10:d6:34:4c:94:d1:aa:
                    cb:51:cf:0f:a0:aa:9d:16:f1:d9:27:91:c6:0d:a3:
                    85:84:52:f5:33:0c:0f:4d:14:ad:20:01:ea:3c:5e:
                    5b:81:85:09:3b:0d:d8:f9:74:ea:45:87:3b:48:49:
                    aa:b6:ab:cc:dd:3e:2a:23:3f:de:c5:9c:a2:d4:d7:
                    db:c1:c1:82:19:1e:b5:40:34:be:42:a2:37:20:85:
                    b2:ed:c2:2b:a9:5f:16:cf:f0:42:2a:42:57:9a:e4:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:8E:99:E3:79:76:3B:AC:A5:72:05:55:C9:8C:A2:4F:B1:5B:65
            X509v3 Authority Key Identifier:
                keyid:4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:15:b5:fb:b7:5c:94:d3:88:3e:ca:ee:6f:5c:6e:53:62:
         53:f9:6d:49:4a:9a:36:d8:50:e1:23:7f:37:fd:05:87:6e:f1:
         ac:71:8b:65:64:0c:b0:df:23:cb:16:35:58:78:fb:04:e3:3a:
         2d:eb:d6:ac:28:4d:ea:07:74:93:f2:b3:28:6d:10:12:34:48:
         14:ff:8c:72:8b:47:a2:0e:0e:20:b1:9f:cf:5e:d5:c9:00:24:
         87:3a:cb:76:64:c5:8c:56:a1:17:b2:57:c5:94:49:11:a6:7f:
         f3:09:30:6e:9e:58:cc:87:6c:ce:a3:e0:b1:f9:db:87:04:b7:
         c2:ec:fa:10:b8:d1:e6:21:85:7a:92:a0:36:08:d7:5a:f8:ef:
         23:2b:52:8f:3f:d4:1b:9b:0a:59:b8:81:b3:fe:59:13:28:3a:
         7b:64:33:6e:b9:e8:26:13:4d:82:2e:2b:88:78:a1:8f:52:6d:
         4d:ad:69:25:00:80:a9:8f:cc:9c:4f:26:3e:78:a7:60:c0:b0:
         4c:2c:f9:ee:53:b0:4f:eb:65:9c:41:47:bf:52:72:e0:5b:30:
         61:c4:9d:ee:ed:4c:26:22:1b:1f:35:6b:55:87:a5:47:88:0d:
         cb:dc:d5:c3:6b:eb:f9:c3:b8:99:2e:4c:83:e5:04:31:c8:b9:
         42:87:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:35 2026 by rpki-client