Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
File:                     sbozBTw5ulhlU3dDESOJ4wDEiAc.mft (raw, json)
Hash identifier:          aX5hgAWk5BMWRv130zJNMV9JlDwN1xhFXC/CXJG799k=
Subject key identifier:   45:75:B3:92:3F:A2:D9:D4:9D:9A:61:D3:B9:8C:1A:CA:BC:6E:E2:91
Authority key identifier: B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
Certificate issuer:       /CN=A9150384/serialNumber=B1BA33053C39BA5865537743112389E300C48807
Certificate serial:       0D2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
Manifest number:          0D14
Signing time:             Thu 26 Mar 2026 18:04:55 +0000
Manifest this update:     Thu 26 Mar 2026 18:04:54 +0000
Manifest next update:     Thu 02 Apr 2026 18:04:54 +0000
Files and hashes:         1: sbozBTw5ulhlU3dDESOJ4wDEiAc.crl (hash: GE15k325wSh4oZ+7rKuD15KJXl8YwXAHR4u08U6fIDw=)
                          2: 3240ED82D62D11EFB0442B5DC4F9AE02.roa (hash: goxpVgCyktDRuj+zXY8IwkJZe67SlMAI6ql6BNqLFHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
                          rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3374 (0xd2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150384, serialNumber=B1BA33053C39BA5865537743112389E300C48807
        Validity
            Not Before: Mar 26 18:04:54 2026 GMT
            Not After : Apr  2 18:04:54 2026 GMT
        Subject: CN=69c57546-1751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9b:bb:a9:cc:b8:1f:29:d3:b6:eb:ad:b7:a2:
                    07:4d:db:e1:56:24:ae:79:a0:3e:94:ea:5a:82:f6:
                    ad:40:65:e2:61:6c:63:65:37:af:a7:61:b8:eb:93:
                    00:a2:df:f8:d3:c0:8b:7c:74:96:1a:ae:1c:cb:9f:
                    d4:04:89:1d:e6:73:6f:d1:a9:e5:2a:7d:1c:3c:2c:
                    af:13:3c:bf:25:98:cc:ba:39:ff:bb:f6:54:76:17:
                    fc:e1:e7:9a:42:85:07:d1:94:a3:f1:7a:25:96:cb:
                    d1:ed:a3:2c:2b:90:06:b0:77:f0:21:b1:50:2c:71:
                    0f:98:f8:a6:ca:42:4f:57:3f:f9:cd:42:4e:ba:c6:
                    af:2e:4b:2c:70:4d:94:bb:6a:79:63:bd:f6:7d:a6:
                    51:6a:1c:c4:eb:f4:d1:ae:0b:1b:f9:56:13:38:ab:
                    f0:ec:ff:ad:77:14:5a:63:44:cb:80:7f:8c:21:ef:
                    e8:f3:d3:86:3d:b2:7a:9e:1d:37:f5:b1:7a:67:aa:
                    79:49:94:f6:c5:95:a2:cb:78:3a:28:7d:e0:4b:93:
                    f3:29:21:60:58:dd:cb:c7:14:b1:f9:a1:92:aa:73:
                    b9:2e:42:88:de:cc:5b:dd:cd:39:5b:0a:8b:1b:ac:
                    fe:f6:56:46:4e:b7:55:a6:bf:18:29:c1:a8:88:99:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:B3:92:3F:A2:D9:D4:9D:9A:61:D3:B9:8C:1A:CA:BC:6E:E2:91
            X509v3 Authority Key Identifier:
                keyid:B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:75:a6:f7:09:ee:ed:61:6a:2e:aa:94:51:33:90:f4:db:
         f1:a6:28:61:75:c1:ca:c2:84:2f:a4:03:64:bf:4b:9d:93:ba:
         f9:da:9a:68:0e:6b:b9:93:f2:00:ba:5f:b7:2b:72:48:60:56:
         c1:ae:46:39:5f:b5:99:75:78:ea:34:a8:d2:a3:dc:c7:f2:24:
         74:89:34:d2:71:b7:0f:20:13:55:b3:01:58:37:6d:2b:0d:09:
         2f:d6:e7:99:d3:e4:ec:a9:03:7b:c6:e7:bf:a1:61:9a:7c:15:
         19:13:04:43:0c:f4:86:33:ab:59:a8:a1:5e:12:de:56:b3:c4:
         50:2e:b9:02:9e:e4:1d:aa:f7:1f:1e:5d:bb:de:7b:7b:85:69:
         c2:fb:ff:4b:22:a5:f4:82:5c:e1:7e:55:c8:7f:fc:e2:66:b6:
         1e:c3:48:7b:2d:2f:f5:37:24:11:65:9a:61:3a:d5:9d:80:99:
         aa:3b:de:37:4e:0a:65:ec:96:64:9c:51:90:1f:46:56:cf:83:
         74:f8:9c:89:6b:89:fc:3e:c4:19:73:bf:0e:07:e3:f8:f8:00:
         96:3f:21:05:4e:84:b9:e5:e8:2b:8d:bb:fc:9b:61:58:98:48:
         d7:c3:72:a0:c7:4e:94:84:0d:5b:0e:0c:f9:21:57:1e:27:c1:
         ee:37:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:33 2026 by rpki-client