Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
File:                     sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json)
Hash identifier:          2Yu53X8xA4xC7zpIRfdm1b1B8X3GFkPq4zIfd6oGZJc=
Subject key identifier:   30:BA:57:EE:39:86:25:09:C5:F1:86:60:B0:01:0E:41:82:C0:AE:4B
Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
Certificate issuer:       /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
Manifest number:          015A
Signing time:             Fri 25 Sep 2026 05:17:01 +0000
Manifest this update:     Fri 25 Sep 2026 05:17:00 +0000
Manifest next update:     Fri 02 Oct 2026 05:17:00 +0000
Files and hashes:         1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: ivsBmjKL9vPl8bAzCxnqej+iAsNZFeiPeSebTfJrkvQ=)
                          2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: IetKqAIBooa+U8zye1p9cy/XtE+vQXfntEYYvrxJfuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
                          rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
        Validity
            Not Before: Sep 25 05:17:00 2026 GMT
            Not After : Oct  2 05:17:00 2026 GMT
        Subject: CN=6ab603cd-6202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:82:a6:9e:fb:97:83:65:de:78:05:2b:ff:
                    29:e4:ea:9f:15:53:27:79:8b:0f:00:64:fd:34:eb:
                    04:c5:e0:69:b2:70:32:03:a5:69:df:86:65:0d:e9:
                    fe:75:f2:01:16:3f:14:4e:ef:5b:78:8a:b3:e8:e3:
                    e9:df:b0:94:50:61:1a:8c:f3:07:c2:58:77:af:0d:
                    60:aa:3f:f3:1e:45:b5:ac:6a:ef:a0:ae:ee:85:81:
                    f6:c3:a9:80:f7:cf:cf:89:f9:c6:e6:d6:13:fe:87:
                    05:d2:de:a7:48:86:2e:46:9a:e5:e3:d0:7e:05:c2:
                    de:37:d6:06:2d:bc:14:1a:ed:76:46:91:d7:be:83:
                    9f:e6:da:a9:94:ba:8f:e0:d4:2b:fa:58:e0:69:60:
                    b2:bb:2c:53:2b:e6:77:61:2b:81:3f:eb:92:80:62:
                    23:e2:35:67:a8:d5:5d:d1:a1:ea:de:d6:37:8c:f9:
                    1e:01:1d:d0:82:8d:99:9e:39:7b:9e:b2:c9:17:1c:
                    76:98:b9:5d:6f:84:ba:a7:4c:5c:96:cd:f5:0c:9c:
                    64:16:b5:6a:33:a0:a3:45:51:24:11:5c:93:ee:a6:
                    d4:41:cc:79:31:a2:db:1e:73:02:ce:a1:d7:0d:a8:
                    b1:5a:5e:f8:73:93:b2:be:e1:d3:a8:7b:4c:1e:d1:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BA:57:EE:39:86:25:09:C5:F1:86:60:B0:01:0E:41:82:C0:AE:4B
            X509v3 Authority Key Identifier:
                keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:21:ad:d8:0d:f1:33:e9:44:04:8d:b0:0c:05:e1:54:33:18:
         83:7c:93:e0:c0:c4:ea:84:e9:df:73:ed:e7:7e:99:d3:56:e7:
         97:21:e7:13:b1:f2:9c:77:9a:52:83:1b:46:78:a0:5e:57:98:
         a5:8b:e2:52:6b:00:67:e0:95:64:ab:fa:fe:63:05:17:0a:c5:
         9b:95:6b:1b:c1:f1:31:32:56:20:dc:21:be:94:b1:90:fb:69:
         25:d6:f9:1e:a7:da:24:1d:4b:05:be:65:f6:89:33:06:06:0f:
         a1:53:db:6e:87:fb:ac:14:e9:12:3c:f9:b5:c1:04:33:43:2c:
         f5:07:b7:62:e6:8c:32:01:49:ee:dd:e5:6c:8c:16:47:e5:51:
         2f:95:7e:a8:d8:82:b0:55:b6:e2:08:c6:25:fd:81:54:f1:94:
         45:5a:74:b8:c0:2c:1a:5a:ad:a4:ba:b9:52:23:17:00:79:7f:
         3a:0c:c8:44:7f:ae:35:98:56:e0:3d:53:3b:10:f1:26:28:60:
         6e:fd:a3:fe:c4:22:2f:36:54:40:4f:49:ab:ab:4e:1b:b2:36:
         e5:92:4f:04:b7:63:3f:c3:e3:b5:d4:a3:bd:39:6b:18:9f:79:
         cb:82:ab:36:6d:ff:ad:12:b8:41:c2:33:1d:47:21:e5:82:2e:
         95:96:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:51:45 2026 by rpki-client