Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft
File:                     SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft (raw, json)
Hash identifier:          Ohjpj6eJ+RytthPMa0uiQQgMik5GlXUxR5htVVeqn+k=
Subject key identifier:   D4:54:53:70:DA:63:22:EF:73:E3:A2:47:2C:32:97:3A:F5:13:5D:BD
Authority key identifier: 48:95:4B:5B:25:F9:41:3A:A8:05:4E:54:13:C1:1E:93:1A:DA:F7:F4
Certificate issuer:       /CN=A917FD40/serialNumber=48954B5B25F9413AA8054E5413C11E931ADAF7F4
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft
Manifest number:          068C
Signing time:             Tue 24 Mar 2026 22:53:05 +0000
Manifest this update:     Tue 24 Mar 2026 22:53:04 +0000
Manifest next update:     Tue 31 Mar 2026 22:53:04 +0000
Files and hashes:         1: SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl (hash: KzOZqOLvWMNKnmotJtneZn6O0TsFPfAfDHb5O9KhpOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl
                          rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FD40, serialNumber=48954B5B25F9413AA8054E5413C11E931ADAF7F4
        Validity
            Not Before: Mar 24 22:53:04 2026 GMT
            Not After : Mar 31 22:53:04 2026 GMT
        Subject: CN=69c315d1-8b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cb:ec:16:ea:35:30:d7:f9:db:69:d6:c0:76:
                    99:0b:46:56:8c:10:bd:b6:4f:ea:d3:21:06:22:15:
                    11:9b:b8:be:95:ab:69:49:83:90:45:c1:44:2c:5e:
                    f0:53:81:99:d0:37:91:0c:c0:dc:9f:51:86:61:df:
                    81:76:0b:e3:d3:73:df:3f:43:ec:3e:12:dc:13:1c:
                    28:77:1c:fb:d3:d2:00:17:72:3b:0b:f8:ff:74:8b:
                    5b:be:89:d3:e8:58:b2:9b:d7:3e:db:b7:b3:93:86:
                    4d:3a:c7:2f:d5:bc:d8:43:ee:6b:91:06:01:bc:1d:
                    e1:89:b6:e6:39:e0:d9:87:9f:b3:8c:07:cc:17:da:
                    71:a8:d9:8f:ec:0f:91:b0:64:0e:03:82:da:40:be:
                    c3:46:ac:3c:bb:9d:e4:15:2e:6e:06:0a:0e:3a:8c:
                    46:7c:ee:a4:3f:7b:4f:7e:94:32:c7:6a:51:9a:85:
                    5c:f4:f8:f4:06:a3:22:e2:3d:49:6c:e0:27:b5:c8:
                    20:c4:f3:a6:bc:bf:a4:c2:59:4c:d6:4b:18:ba:eb:
                    b0:6a:22:09:23:08:06:d5:f0:9c:07:41:eb:15:16:
                    d3:e3:92:98:f7:b6:cf:df:73:6c:2d:ae:63:8c:af:
                    7d:60:13:38:43:98:49:8d:d7:56:f0:a4:aa:04:2b:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:54:53:70:DA:63:22:EF:73:E3:A2:47:2C:32:97:3A:F5:13:5D:BD
            X509v3 Authority Key Identifier:
                keyid:48:95:4B:5B:25:F9:41:3A:A8:05:4E:54:13:C1:1E:93:1A:DA:F7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:00:3f:65:5b:3d:4c:57:2e:f5:fb:3d:a9:cb:50:4f:cd:6a:
         e4:8c:a0:64:e6:a6:61:01:b2:f2:31:d3:f6:d5:c1:2a:6d:9a:
         ac:9a:b2:54:52:00:f7:81:77:c0:6e:39:cb:93:05:0e:67:1c:
         39:8c:07:67:fe:41:8c:10:9f:fd:3c:e2:30:b5:d0:d1:9a:95:
         3b:4b:f9:18:89:13:e4:d4:83:f6:22:35:ea:b8:53:ab:e1:3f:
         83:75:75:be:87:1a:47:5e:ab:49:e3:fc:d1:76:d7:53:47:9d:
         92:95:42:0d:0f:96:d1:4a:7d:38:f0:e1:77:51:d4:be:5d:95:
         db:b0:ca:31:68:eb:05:ac:6a:c9:31:2e:3a:0e:e6:64:61:59:
         ea:36:6c:98:97:19:9f:8a:b4:1e:50:6f:0a:a5:8d:d2:2f:be:
         f1:49:4b:62:b8:a5:c5:4e:35:65:2b:f5:88:f2:63:92:ef:8d:
         d9:0d:32:2a:1d:68:a4:f0:e3:66:4c:ca:6c:7c:c6:39:e3:29:
         72:f9:4d:7f:77:04:04:8b:8a:7b:8b:64:c4:73:b5:a6:dd:99:
         a7:4c:f3:3d:23:2c:52:02:ec:db:10:8f:4e:68:bc:30:f0:fc:
         99:10:da:5d:3a:15:bf:18:83:29:d4:85:64:c6:c2:83:e8:16:
         15:41:ef:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZENDAxMTAvBgNVBAUTKDQ4OTU0QjVCMjVGOTQxM0FBODA1NEU1NDEzQzExRTkz
MUFEQUY3RjQwHhcNMjYwMzI0MjI1MzA0WhcNMjYwMzMxMjI1MzA0WjAYMRYwFAYD
VQQDEw02OWMzMTVkMS04YjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8cvsFuo1MNf522nWwHaZC0ZWjBC9tk/q0yEGIhURm7i+latpSYOQRcFELF7w
U4GZ0DeRDMDcn1GGYd+Bdgvj03PfP0PsPhLcExwodxz709IAF3I7C/j/dItbvonT
6Fiym9c+27ezk4ZNOscv1bzYQ+5rkQYBvB3hibbmOeDZh5+zjAfMF9pxqNmP7A+R
sGQOA4LaQL7DRqw8u53kFS5uBgoOOoxGfO6kP3tPfpQyx2pRmoVc9Pj0BqMi4j1J
bOAntcggxPOmvL+kwllM1ksYuuuwaiIJIwgG1fCcB0HrFRbT45KY97bP33NsLa5j
jK99YBM4Q5hJjddW8KSqBCs9uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRUU3Da
YyLvc+OiRywylzr1E129MB8GA1UdIwQYMBaAFEiVS1sl+UE6qAVOVBPBHpMa2vf0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC
RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9TSlZMV3lYNVFUcW9CVTVVRThFZWt4cmE5
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NKVkxXeVg1UVRxb0JVNVVFOEVla3hyYTlfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9TSlZMV3lYNVFU
cW9CVTVVRThFZWt4cmE5X1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsQA/ZVs9TFcu9fs9qctQT81q5IygZOamYQGy8jHT9tXBKm2arJqyVFIA94F3
wG45y5MFDmccOYwHZ/5BjBCf/TziMLXQ0ZqVO0v5GIkT5NSD9iI16rhTq+E/g3V1
vocaR16rSeP80XbXU0edkpVCDQ+W0Up9OPDhd1HUvl2V27DKMWjrBaxqyTEuOg7m
ZGFZ6jZsmJcZn4q0HlBvCqWN0i++8UlLYrilxU41ZSv1iPJjku+N2Q0yKh1opPDj
ZkzKbHzGOeMpcvlNf3cEBIuKe4tkxHO1pt2Zp0zzPSMsUgLs2xCPTmi8MPD8mRDa
XToVvxiDKdSFZMbCg+gWFUHvuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:22 2026 by rpki-client