Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
File:                     SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json)
Hash identifier:          eRv7R81Vu8Hb3JzlmK1DKS5bZbd1cKPOsD+o0Xclj9s=
Subject key identifier:   86:CE:4E:32:EC:BB:42:D1:69:1B:3F:4B:21:94:A6:48:14:3C:10:EF
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Certificate issuer:       /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial:       023A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
Manifest number:          0235
Signing time:             Mon 27 Jul 2026 04:04:39 +0000
Manifest this update:     Mon 27 Jul 2026 04:04:38 +0000
Manifest next update:     Mon 03 Aug 2026 04:04:38 +0000
Files and hashes:         1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: QR0rJlx3fmbs0nG5rHXkJuBqeYRMiJBRllCHU/fYPBI=)
                          2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: nfSDHyxIpYxuJaa572+JGo1gsCxYp6fGEhVukj2YiGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
                          rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
        Validity
            Not Before: Jul 27 04:04:38 2026 GMT
            Not After : Aug  3 04:04:38 2026 GMT
        Subject: CN=6a66d8d6-0675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:35:7d:3e:8d:47:62:c2:a8:ab:4f:f0:74:
                    a5:5e:37:cc:07:96:91:2f:bc:08:8d:00:94:18:95:
                    cf:1b:0f:0e:ce:11:2f:13:be:88:24:78:cc:cc:a9:
                    30:69:50:90:c5:8d:be:92:ad:59:cd:c4:24:f3:76:
                    53:89:ba:e5:85:0b:b9:4c:5b:0e:72:83:cd:a4:cb:
                    51:50:c8:ae:16:56:f0:1b:51:f8:55:84:c3:0a:e1:
                    fe:d8:c3:a2:00:f2:65:a0:87:5b:19:2e:01:58:13:
                    21:3f:6a:e6:21:74:19:c7:83:5b:bb:3d:b1:bf:e4:
                    3a:cf:2a:58:cd:ee:2a:b8:a0:fd:95:63:a8:bb:a1:
                    95:2b:04:43:6d:6f:89:94:a8:56:99:8e:fe:f0:e0:
                    12:e4:2e:c2:ec:e1:ab:97:8b:c8:68:b8:cd:a0:62:
                    17:bc:2b:96:2a:73:cb:44:ef:72:76:16:84:ff:85:
                    c9:10:6b:b7:1c:3f:b0:fb:b1:25:60:2f:cc:52:da:
                    2d:f0:55:62:4b:1e:0c:4a:e9:6c:b4:60:4d:e8:89:
                    77:1c:29:7c:a6:3f:81:b3:ca:0b:21:2f:27:d0:ad:
                    73:5f:f1:e7:6b:b5:f6:08:55:9b:65:c3:f5:ad:b8:
                    30:9d:44:26:39:30:c5:38:6c:fb:63:bf:0b:67:62:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CE:4E:32:EC:BB:42:D1:69:1B:3F:4B:21:94:A6:48:14:3C:10:EF
            X509v3 Authority Key Identifier:
                keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:15:b2:21:d4:d4:b2:97:b1:45:81:18:38:e4:a7:9b:94:
         4d:9d:06:26:c9:2b:9f:7a:61:2d:fa:ed:70:eb:ae:8d:b9:14:
         95:a3:f8:7a:25:17:3c:fe:8d:68:7e:57:0b:9d:ae:99:ea:f0:
         a5:b7:82:63:23:4c:da:55:a4:09:26:21:f6:15:4b:d8:0b:25:
         8a:44:ce:3d:4e:ee:8b:02:37:5b:e3:26:a5:6c:08:01:58:dd:
         36:38:4f:bd:70:87:54:f3:6a:09:91:2d:9b:8d:f2:1b:98:cd:
         ae:41:e2:15:ae:a6:73:28:05:ab:b4:38:d9:06:a9:eb:ef:8c:
         3c:5d:6a:d8:42:f9:74:df:2b:b7:3f:12:b4:32:2d:97:52:f9:
         70:4b:f8:92:15:bf:bb:c3:42:b3:0e:d4:8d:de:1b:4f:a7:52:
         d3:3b:78:c0:c9:20:a0:79:76:40:66:bc:41:fb:70:c4:3c:b8:
         8d:9f:2d:5f:a6:ee:74:95:45:9a:d5:3f:9a:1b:b6:69:c4:71:
         37:06:81:62:36:c1:8c:e0:a1:34:e2:96:ed:55:f8:e8:af:19:
         25:fa:50:dc:3a:35:53:fc:ca:07:4f:e6:e5:76:7a:65:79:ca:
         c3:41:fe:3a:56:b7:a2:e1:76:b2:5b:d4:bb:84:d2:22:17:8f:
         ee:c6:0c:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I2NzUxMTAvBgNVBAUTKDRBQjVDQTEwQzJBQzIyMjgyQTk5QUU2QkY2MjRGOTM3
NTY4NDNGOEEwHhcNMjYwNzI3MDQwNDM4WhcNMjYwODAzMDQwNDM4WjAYMRYwFAYD
VQQDEw02YTY2ZDhkNi0wNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHE1fT6NR2LCqKtP8HSlXjfMB5aRL7wIjQCUGJXPGw8OzhEvE76IJHjMzKkw
aVCQxY2+kq1ZzcQk83ZTibrlhQu5TFsOcoPNpMtRUMiuFlbwG1H4VYTDCuH+2MOi
APJloIdbGS4BWBMhP2rmIXQZx4Nbuz2xv+Q6zypYze4quKD9lWOou6GVKwRDbW+J
lKhWmY7+8OAS5C7C7OGrl4vIaLjNoGIXvCuWKnPLRO9ydhaE/4XJEGu3HD+w+7El
YC/MUtot8FViSx4MSulstGBN6Il3HCl8pj+Bs8oLIS8n0K1zX/Hna7X2CFWbZcP1
rbgwnUQmOTDFOGz7Y78LZ2KlYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbOTjLs
u0LRaRs/SyGUpkgUPBDvMB8GA1UdIwQYMBaAFEq1yhDCrCIoKpmua/Yk+TdWhD+K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjY3NS9EQ0FEMjdGQzJB
MDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lpZ3FtYTVyOWlUNU4xYUVQ
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyWEtFTUtzSWlncW1hNXI5aVQ1TjFhRVA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjY3NS9EQ0FEMjdGQzJBMDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lp
Z3FtYTVyOWlUNU4xYUVQNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXL8VsiHU1LKXsUWBGDjkp5uUTZ0GJskrn3phLfrtcOuujbkUlaP4eiUXPP6N
aH5XC52umerwpbeCYyNM2lWkCSYh9hVL2AslikTOPU7uiwI3W+MmpWwIAVjdNjhP
vXCHVPNqCZEtm43yG5jNrkHiFa6mcygFq7Q42Qap6++MPF1q2EL5dN8rtz8StDIt
l1L5cEv4khW/u8NCsw7Ujd4bT6dS0zt4wMkgoHl2QGa8QftwxDy4jZ8tX6budJVF
mtU/mhu2acRxNwaBYjbBjOChNOKW7VX46K8ZJfpQ3Do1U/zKB0/m5XZ6ZXnKw0H+
Ola3ouF2slvUu4TSIheP7sYM6w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:39 2026 by rpki-client