Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
File:                     SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft (raw, json)
Hash identifier:          l2kdR01KGSV/ZfZc6CUkXlbwWZ9UiEZnGGx7kjuSItE=
Subject key identifier:   31:95:68:08:A6:C6:0A:DE:3D:86:EF:9E:8F:0D:DA:C7:C2:AC:1C:70
Authority key identifier: 48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
Certificate issuer:       /CN=A9154C6E/serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
Manifest number:          5C
Signing time:             Thu 23 Jul 2026 10:11:07 +0000
Manifest this update:     Thu 23 Jul 2026 10:11:06 +0000
Manifest next update:     Thu 30 Jul 2026 10:11:06 +0000
Files and hashes:         1: SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl (hash: RAxKm+S0+t3eSZ3Sgi00bIX6qPL57loSoRUjaYc3AdU=)
                          2: A1DC8404684D11F1A6C7E6E99747A888.roa (hash: ngNJK+0LZfBPO2VlnhkTqA6lop0/Ha7ck3GNNL+/LPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154C6E, serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
        Validity
            Not Before: Jul 23 10:11:06 2026 GMT
            Not After : Jul 30 10:11:06 2026 GMT
        Subject: CN=6a61e8ba-1344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:8b:0e:cf:eb:76:d3:85:8b:7d:d4:57:bd:
                    d1:ce:d1:3a:43:77:66:95:21:3b:bb:33:d4:74:6b:
                    01:3a:d2:d2:93:65:fd:cd:f3:14:f5:9a:7e:4a:c0:
                    45:fb:9c:dc:96:38:e8:fd:06:24:a7:a9:aa:a4:e5:
                    b0:c4:33:fe:1b:4c:03:65:76:4d:0e:22:38:6b:dc:
                    20:e6:12:97:bd:20:63:60:5e:6a:e4:8d:35:29:75:
                    69:1d:10:e4:fb:ca:4c:c6:b9:96:b0:bc:bc:a5:64:
                    22:ae:07:73:73:49:48:d3:ea:33:96:30:42:b6:7e:
                    7a:20:bc:fb:4d:15:4c:8a:56:37:75:e9:41:f5:e1:
                    53:20:57:8d:7c:5a:51:bd:4f:34:7b:73:bc:0c:e6:
                    85:01:1d:13:f8:a6:cf:a8:22:51:d0:8f:18:9b:5c:
                    98:20:24:0c:92:09:f8:de:c8:3f:1c:4d:d1:6a:b9:
                    e6:3d:d6:80:33:aa:0c:ac:12:d4:60:98:7a:1c:d5:
                    87:0e:e0:6a:04:b5:3c:f6:c0:f9:60:de:ce:f0:59:
                    96:d2:eb:9d:94:5b:30:e5:26:fa:9b:c6:09:1b:dd:
                    2a:e8:ba:b0:09:19:be:8d:aa:cc:50:8f:35:83:5a:
                    0d:e5:fb:2c:b6:6c:bf:a2:49:3e:ad:a0:0b:10:5f:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:95:68:08:A6:C6:0A:DE:3D:86:EF:9E:8F:0D:DA:C7:C2:AC:1C:70
            X509v3 Authority Key Identifier:
                keyid:48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:23:76:30:28:74:e6:77:31:7b:73:77:af:90:ac:95:46:2a:
         cd:e6:a1:3d:2b:89:b3:65:86:25:72:e3:0e:b8:06:e7:95:35:
         d4:f5:11:56:e9:b3:2d:fa:3b:08:85:7d:57:90:ca:d6:77:f9:
         b4:ac:a4:61:35:b3:46:ea:1b:5b:b5:52:b3:3a:a3:04:75:cb:
         48:86:14:2d:f6:4b:fd:30:b3:86:6c:81:2b:ef:1a:07:7a:91:
         7c:8b:74:85:0f:c8:f2:e8:1b:c8:4d:35:2a:08:e4:39:9e:c2:
         bd:74:9c:c4:3b:79:38:13:f5:3b:82:5b:13:3a:08:54:c8:d5:
         a5:19:e5:2a:97:09:81:d2:d1:c8:ba:6f:2a:ea:2f:3b:bb:87:
         45:26:4f:ee:41:44:55:67:7c:c3:3b:fd:65:f3:4f:fc:eb:f1:
         33:88:7c:d9:7d:8f:21:71:bd:86:10:f9:57:87:01:af:0d:23:
         03:76:55:02:a8:8b:6d:69:2f:9c:9e:2b:62:d2:a4:48:e3:c4:
         3f:13:52:14:cd:0c:57:63:9b:3a:b6:e9:a0:3a:34:f2:eb:40:
         b3:b9:22:a6:35:a6:37:2d:ff:60:75:90:7e:b4:84:d9:c1:4f:
         7f:a1:cb:51:a6:4c:c5:1f:d3:ef:37:df:d8:ea:ca:86:a2:06:
         f5:2c:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:03 2026 by rpki-client