Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
File:                     SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft (raw, json)
Hash identifier:          D5f4F4gslGFdn5OJe1ZAvexOn3JlerCNH5Vl4VHbRc0=
Subject key identifier:   C6:DA:B1:D2:0B:60:C4:CD:C2:49:26:65:EE:EE:8E:74:F4:C0:78:49
Authority key identifier: 48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
Certificate issuer:       /CN=A9154C6E/serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
Manifest number:          1D
Signing time:             Wed 25 Mar 2026 08:07:27 +0000
Manifest this update:     Wed 25 Mar 2026 08:07:26 +0000
Manifest next update:     Wed 01 Apr 2026 08:07:26 +0000
Files and hashes:         1: SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl (hash: u8Jn5nG3YGhsmy6qlV1yVlPD9hF7kakwlViV8Ao/lxI=)
                          2: 2F9BA582021311F19CF662E3456F56BC.roa (hash: u0IV4WpfZVo/gGclcgn/9zhDLwmJapXxrIYkkYa+G0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154C6E, serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
        Validity
            Not Before: Mar 25 08:07:26 2026 GMT
            Not After : Apr  1 08:07:26 2026 GMT
        Subject: CN=69c397bf-56cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:28:ed:d8:bc:ea:10:d3:8e:2f:16:4a:4a:
                    b1:b7:6a:f1:a6:5e:e8:c1:2a:46:21:b1:03:06:2b:
                    eb:eb:ca:0b:e1:10:c0:5c:31:2d:ae:7a:78:61:cf:
                    b3:56:2e:f3:fa:62:6e:94:fd:74:33:9a:43:54:00:
                    c6:f1:70:ba:a3:aa:da:09:6e:d4:4e:ba:5f:35:10:
                    f0:51:c2:b6:a9:43:dc:2a:7a:14:ee:5d:67:6c:bc:
                    85:c0:66:50:4b:de:56:f0:a5:89:40:7b:db:ee:4b:
                    02:32:ae:72:37:dd:43:4f:b8:53:bb:28:d7:4e:1e:
                    c5:8f:80:c9:7a:95:a8:c4:eb:5d:1e:12:d5:67:12:
                    2c:27:6e:d4:da:9e:d6:06:11:66:f7:7d:f0:83:35:
                    9b:86:03:bc:32:7c:7f:6f:5d:a4:44:e9:ad:39:cc:
                    8f:9c:88:43:31:2b:89:8a:c2:22:cf:72:ab:04:23:
                    19:7b:63:a1:52:83:cd:e3:fd:50:cb:2f:65:80:fd:
                    5f:d9:ec:fb:36:20:a3:9a:e2:4e:bc:a0:f8:66:7d:
                    2e:84:0c:59:12:61:b3:56:0f:e2:62:a5:d7:61:7a:
                    7d:d3:1b:58:30:b2:bc:44:ce:d4:d7:f1:38:9f:ee:
                    5e:3d:83:ed:3c:f1:1a:7a:4a:4a:cc:89:be:70:f8:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:B1:D2:0B:60:C4:CD:C2:49:26:65:EE:EE:8E:74:F4:C0:78:49
            X509v3 Authority Key Identifier:
                keyid:48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7f:f1:8c:60:1e:a9:65:3b:a1:a6:ab:bd:59:00:2e:82:c7:
         1b:ce:7e:00:80:15:76:36:61:20:8d:10:1c:de:17:61:20:fe:
         aa:b1:57:6e:a9:85:e7:6d:2b:0f:b0:be:95:89:93:ec:81:66:
         0a:ac:7d:26:81:5b:3b:42:80:46:a1:57:a1:56:81:87:49:e2:
         b0:11:13:7a:4a:59:bf:2c:af:e2:30:d8:8a:be:ff:2a:47:a0:
         66:16:27:64:6c:cd:ac:1a:df:41:90:a5:08:f0:5e:c4:e1:22:
         3a:da:0c:3d:9a:d6:f5:92:91:fa:7e:2c:d9:f4:23:4f:8c:6a:
         72:fa:b2:d3:58:f1:79:fd:d1:6e:0b:3b:fb:1a:38:4f:78:46:
         b1:07:4e:aa:30:33:3b:0c:70:0e:cb:5d:1c:09:af:ef:6a:f6:
         4d:9b:d5:50:4b:25:73:d1:2f:da:e5:52:42:c1:6b:de:90:74:
         34:46:b2:79:27:1b:c5:77:9d:3e:e0:69:80:c8:76:88:a5:da:
         b4:86:ee:3e:4f:dc:95:c3:e4:a2:38:37:a9:9a:f8:e4:0e:0f:
         81:2d:e0:55:01:17:c2:b8:42:f8:0c:77:9a:ee:fe:7b:67:e9:
         a7:91:e5:3a:14:fc:9d:96:ef:94:74:6d:64:5f:83:28:fe:d3:
         b2:69:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:30 2026 by rpki-client