Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
File:                     SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json)
Hash identifier:          3TXHRO6n+Osp2dY70WyID0p8VPlC0sGihXJfBqhyLj4=
Subject key identifier:   C4:8C:F6:59:8D:85:BD:BD:F3:1B:E5:2A:9B:BE:EA:E9:CC:7C:FE:7C
Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
Certificate issuer:       /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
Manifest number:          89
Signing time:             Mon 11 May 2026 07:43:04 +0000
Manifest this update:     Mon 11 May 2026 07:43:03 +0000
Manifest next update:     Mon 18 May 2026 07:43:03 +0000
Files and hashes:         1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: idVQwqxm4BNWdXQaV3AregUc89eH03vDtT224yrNcX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl
                          rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0
        Validity
            Not Before: May 11 07:43:03 2026 GMT
            Not After : May 18 07:43:03 2026 GMT
        Subject: CN=6a018888-c3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1b:48:cc:82:17:d4:0a:33:5d:f5:bd:79:e2:
                    bd:5a:71:cb:8f:7f:a9:52:2f:4c:0b:9f:3d:6d:f2:
                    e0:e4:38:08:2f:ac:09:bc:62:51:81:9d:72:96:8a:
                    12:15:10:c4:92:54:c4:c5:f8:16:e7:de:01:a9:b0:
                    c4:8b:63:d2:cb:2f:5b:e3:2c:78:14:cb:cd:ac:39:
                    05:73:d0:cc:3e:03:27:26:b6:bc:fc:4d:fa:bb:c6:
                    ed:2f:7e:da:50:eb:c6:68:65:db:2b:93:48:49:d6:
                    87:ba:f5:f0:9d:73:db:e8:6b:e2:d6:9a:b1:70:2c:
                    fd:c7:52:21:86:d0:67:65:3c:5c:71:e3:23:13:80:
                    7b:ae:61:23:97:d2:75:48:00:10:10:8f:5d:51:bb:
                    8d:3d:4d:da:10:f4:c1:35:b9:f9:2b:b0:8c:ef:04:
                    a9:02:fd:30:6d:07:47:06:b3:b4:58:d6:06:ec:e9:
                    af:46:fc:bc:51:58:31:97:3c:34:06:2f:62:52:74:
                    32:49:ba:4e:2a:a7:1d:c3:b2:66:7b:8d:8c:03:45:
                    db:6e:27:cd:42:bd:47:26:07:58:6a:70:9e:6d:6c:
                    18:14:ce:ae:5e:e8:a3:21:f9:80:ca:40:ed:22:7b:
                    34:91:b0:b5:97:f1:90:9d:b3:f9:e8:ad:7b:7e:f8:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:F6:59:8D:85:BD:BD:F3:1B:E5:2A:9B:BE:EA:E9:CC:7C:FE:7C
            X509v3 Authority Key Identifier:
                keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:e2:31:59:96:e8:a0:42:fe:33:d5:93:41:d9:9b:93:63:
         b5:aa:3f:35:f7:5f:ed:08:15:44:59:ac:c8:0d:b8:ac:e2:50:
         ea:6a:b2:ac:4f:93:25:86:b2:44:88:a1:51:df:f1:ef:8e:62:
         c5:d5:8a:6f:f1:e0:34:2e:f6:ac:30:01:0e:08:fd:75:7a:d7:
         f9:4e:9e:05:37:f9:69:74:09:c0:c3:f7:1a:3d:12:04:1d:3f:
         6a:96:9c:48:b5:da:ea:ed:c4:98:6e:30:8f:55:01:03:b5:23:
         ab:4e:aa:2f:b9:ab:69:7d:81:33:43:96:f1:89:c5:a5:8f:48:
         1f:b3:45:d0:26:2c:dd:49:19:07:f0:8b:93:2f:af:17:9e:a7:
         fc:8a:0d:48:a9:bb:0d:45:55:90:0d:c1:aa:65:55:cd:9c:16:
         df:90:74:cf:97:c1:fc:e4:49:3f:b9:14:78:ca:5f:ff:d0:58:
         1b:56:54:22:d0:93:2f:17:ba:5e:dd:59:f1:69:1a:1a:63:6f:
         49:6d:d4:83:be:94:e5:2b:94:22:32:01:56:b1:40:b1:26:42:
         61:6c:71:eb:81:b8:21:40:27:d5:43:c4:b9:bf:37:9c:da:b6:
         13:fb:05:ba:18:dd:03:c8:9c:d7:d5:97:4b:e5:ef:b9:2b:1e:
         8b:1a:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:01 2026 by rpki-client