Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
File:                     SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json)
Hash identifier:          mguLznS1j4AokZ39d2ygIQKzUPp9LPHMNck3Q1HiyBM=
Subject key identifier:   9F:61:F3:42:64:60:72:84:D4:E4:47:D2:0B:D7:6E:48:8F:19:C4:90
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Certificate issuer:       /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
Manifest number:          058B
Signing time:             Fri 02 Oct 2026 23:34:17 +0000
Manifest this update:     Fri 02 Oct 2026 23:34:16 +0000
Manifest next update:     Fri 09 Oct 2026 23:34:16 +0000
Files and hashes:         1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: RwnY/pVEweVTCnf8uxNxb+sS9u8x/8XcvMB+3LgQEWw=)
                          2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: 2VF4ZBcYU1NgumYKCnjL8hY4a3QKesS7mGAqok92V4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
                          rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
        Validity
            Not Before: Oct  2 23:34:16 2026 GMT
            Not After : Oct  9 23:34:16 2026 GMT
        Subject: CN=6ac03f78-4a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:d2:a5:de:97:30:c8:ff:c3:d1:7f:cb:74:
                    33:ec:13:b3:f9:97:06:17:1e:24:12:66:29:49:aa:
                    2b:5b:53:e3:d0:64:25:b4:81:3c:14:48:99:e2:2f:
                    c8:ab:4b:a5:02:69:5c:37:51:35:d7:5c:be:36:14:
                    d9:15:15:12:ef:52:9e:58:4d:2f:32:51:23:56:90:
                    12:6c:a5:ba:e2:82:5e:c2:58:55:54:67:6d:ba:2f:
                    89:da:4e:c6:9d:9d:7a:a4:fa:bf:bd:06:1c:8a:65:
                    e9:1d:c2:4a:27:bb:bc:5b:71:39:47:5a:a9:ea:fe:
                    0a:2e:25:32:3f:52:fc:d5:37:b5:68:7a:07:e8:90:
                    5f:82:34:b3:28:24:63:3a:20:9b:03:16:c3:e8:4b:
                    73:62:17:d6:d7:30:11:54:b4:f7:5c:af:40:24:eb:
                    d4:84:bf:c5:71:9f:0d:b0:aa:4c:2c:6d:79:13:87:
                    b8:8f:33:ed:fd:57:7c:2c:fd:4b:b0:87:14:cd:2e:
                    51:1c:91:64:2c:ec:87:57:74:89:f9:fd:0d:62:ef:
                    3c:e0:0b:75:91:8b:4b:17:95:60:1f:16:3f:c8:f6:
                    3f:93:06:f2:d4:ed:c2:ea:87:59:02:f8:64:dc:0d:
                    cb:e4:e8:e1:24:fc:eb:89:27:b7:29:e4:e4:7c:95:
                    90:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:F3:42:64:60:72:84:D4:E4:47:D2:0B:D7:6E:48:8F:19:C4:90
            X509v3 Authority Key Identifier:
                keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:0e:4a:71:11:c6:3c:15:cf:5c:4a:5d:e9:16:b2:27:58:
         8a:00:93:63:74:1b:2a:96:be:2a:8d:b3:e0:2f:e0:53:84:42:
         96:ad:69:65:84:91:8e:74:94:40:64:36:4f:86:f2:08:4b:62:
         df:44:0a:ca:34:a4:95:06:8f:1c:a8:25:1d:cd:e7:8e:fa:67:
         a7:2c:f3:45:54:2a:8c:78:08:bf:45:2b:10:e7:33:ba:1c:ee:
         5b:1d:3b:b2:51:b4:8c:a1:cb:7e:41:81:96:1f:6b:d6:b3:bb:
         64:2e:c4:aa:e0:f8:69:fd:8f:4c:cf:8e:cb:ec:74:ab:60:82:
         9b:6a:3b:9d:22:48:6d:22:c4:29:ac:9d:53:be:29:77:b7:ca:
         ff:4d:bf:ae:2a:3e:13:88:4d:f8:83:a9:97:db:7d:3b:bf:b5:
         86:d1:31:e0:ba:86:e5:00:3f:f2:98:8d:16:95:60:da:01:b8:
         c4:c8:dc:fd:66:92:e4:f3:9c:a3:ee:ad:66:b9:c0:db:dd:a1:
         82:b8:2f:37:d8:98:fb:a0:20:65:c6:c0:11:84:d7:c7:19:21:
         4d:82:5c:7d:a7:b6:f7:d4:96:d0:21:54:6c:40:3b:50:ef:0a:
         8f:28:9e:ee:b9:fb:8c:8a:32:f6:24:97:4e:f0:36:eb:5d:8d:
         3d:23:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:24:12 2026 by rpki-client