Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
File:                     ShBYcSoe344SOQfrNw8JHcdDNfo.mft (raw, json)
Hash identifier:          tt9wLksGBTkZzfw3PGXaQLfEjK56634N3y50T73Sr+c=
Subject key identifier:   5C:19:15:9C:EC:22:EE:68:05:F1:FC:4C:5F:84:F1:1F:97:9C:B5:23
Authority key identifier: 4A:10:58:71:2A:1E:DF:8E:12:39:07:EB:37:0F:09:1D:C7:43:35:FA
Certificate issuer:       /CN=A913738D/serialNumber=4A1058712A1EDF8E123907EB370F091DC74335FA
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
Manifest number:          12
Signing time:             Thu 11 Jun 2026 11:25:41 +0000
Manifest this update:     Thu 11 Jun 2026 11:25:40 +0000
Manifest next update:     Thu 18 Jun 2026 11:25:40 +0000
Files and hashes:         1: ShBYcSoe344SOQfrNw8JHcdDNfo.crl (hash: bZcq4GDxSW8zhw2iwc6ITx9kzMlshnTglI7hTTjww8I=)
                          2: D6315EBC4EA011F18D123533BE833773.roa (hash: +uy/rfP0mfTiKOrRLiTzZGPfW5GTzYympoeDw/BIW+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.crl
                          rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913738D, serialNumber=4A1058712A1EDF8E123907EB370F091DC74335FA
        Validity
            Not Before: Jun 11 11:25:40 2026 GMT
            Not After : Jun 18 11:25:40 2026 GMT
        Subject: CN=6a2a9b34-a1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:fd:29:0a:94:21:25:1d:9f:b9:f5:28:12:
                    91:7b:e5:de:ff:36:b3:ca:9a:30:05:d7:b9:ed:19:
                    26:9b:b9:ee:5a:37:29:de:10:d4:95:32:2b:69:c0:
                    ba:bc:da:79:12:d9:41:df:21:f9:f8:08:b8:09:60:
                    a5:f4:65:6a:21:82:8b:ec:32:46:4f:48:64:a2:5b:
                    00:1e:87:36:b3:b6:17:2c:6f:8d:d5:49:76:d8:03:
                    14:c1:f0:de:ac:98:4b:2c:7a:32:f9:29:7b:0b:31:
                    62:e5:bc:5d:df:6b:b4:a3:a0:cf:df:19:01:c3:9b:
                    ec:40:70:b1:8f:f3:aa:2b:b1:09:61:e4:05:22:1f:
                    63:0d:78:c5:49:bd:8b:e5:83:2d:14:eb:2c:31:01:
                    57:e4:9a:57:b8:8e:8b:8d:16:89:70:29:7d:7d:47:
                    54:3b:ef:37:b9:3b:fe:fa:db:e0:c7:94:4a:16:47:
                    04:a9:0e:f8:2e:b5:28:22:47:3c:2d:35:cf:ce:e7:
                    da:48:da:2b:a7:fd:45:59:8a:ea:36:1a:4d:b1:ad:
                    18:d6:84:06:bd:f0:67:6c:64:d8:4e:2e:65:91:0f:
                    3d:2b:08:8a:1e:66:66:e5:e4:c2:ca:90:40:ca:b3:
                    22:5e:a2:4a:ba:77:0c:af:14:d7:86:fd:7d:6c:b4:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:19:15:9C:EC:22:EE:68:05:F1:FC:4C:5F:84:F1:1F:97:9C:B5:23
            X509v3 Authority Key Identifier:
                keyid:4A:10:58:71:2A:1E:DF:8E:12:39:07:EB:37:0F:09:1D:C7:43:35:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ee:9a:cf:3e:62:5b:76:ee:f5:81:37:47:f0:54:c1:d5:b9:
         de:84:84:20:2d:e5:37:af:4f:10:74:02:79:ac:a0:a0:f3:05:
         3e:a7:ac:42:e9:ec:04:ac:17:9d:c2:ba:ca:28:3d:fa:69:d0:
         21:a3:43:61:10:18:75:e2:e1:d1:d1:76:af:6a:5a:61:1c:bf:
         a4:02:93:06:99:43:00:4a:f3:36:01:81:42:6e:89:a6:bf:62:
         cf:ac:c6:64:30:03:92:f5:ed:45:70:0d:2b:9e:88:0a:a9:8b:
         e9:4a:fb:84:6f:6c:81:12:d5:01:0e:c8:d4:0f:e6:fd:88:37:
         b9:a0:b9:28:43:ca:bc:16:90:7e:e3:2e:d2:f6:8c:69:59:d3:
         56:26:1f:1a:d9:28:f5:a1:1d:fc:e0:37:d6:0c:ce:58:d5:19:
         2f:d5:c1:ab:6f:b3:36:73:b7:f7:d8:86:55:ce:d7:43:23:78:
         89:31:05:02:a1:8a:c8:7d:85:15:59:c5:ef:87:fc:d0:8a:55:
         ef:7d:7e:92:87:62:7c:ad:7a:ff:7b:02:1d:e0:40:e6:62:20:
         93:4b:2d:ab:04:dc:51:fc:7a:a0:02:6c:3a:b4:a0:6f:80:47:
         1e:0a:70:4a:b1:69:37:5a:ab:33:63:68:ef:01:24:94:c2:50:
         33:54:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:14 2026 by rpki-client