Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
File:                     SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft (raw, json)
Hash identifier:          fSbPPOJqu3P1rJxfpmh/7FLRwugqBzSBk1ScNlyuQkE=
Subject key identifier:   2C:D7:53:F7:F0:93:E3:33:DC:12:A9:2E:B2:7A:D1:FF:BF:0D:27:20
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Certificate issuer:       /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
Manifest number:          31
Signing time:             Sat 13 Jun 2026 08:44:09 +0000
Manifest this update:     Sat 13 Jun 2026 08:44:09 +0000
Manifest next update:     Sat 20 Jun 2026 08:44:09 +0000
Files and hashes:         1: SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl (hash: akho5JOdrijSEiR6DmPeyR6xYEVLwPQAtGcRyHxYBEI=)
                          2: D6CF9ED61D5611F1A0EA4997233D8C67.roa (hash: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
        Validity
            Not Before: Jun 13 08:44:09 2026 GMT
            Not After : Jun 20 08:44:09 2026 GMT
        Subject: CN=6a2d1859-7ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:9d:88:aa:fd:dc:8d:49:9b:84:5a:37:29:
                    4c:42:fe:f0:92:ae:57:6b:af:5d:01:09:ca:07:6d:
                    c1:05:41:1b:62:64:d0:e4:91:18:89:3e:35:69:66:
                    3f:f4:a9:c6:6a:bc:fb:e8:2e:e8:c6:86:ca:4a:a4:
                    5c:96:b7:f4:f7:ea:ec:e0:0d:12:b1:23:ec:17:dd:
                    d7:bc:29:dc:5d:60:79:ea:7b:23:30:dd:30:d2:7d:
                    85:2c:40:b5:27:ef:ba:e1:97:c9:95:e6:47:b4:c1:
                    10:a9:29:77:4a:52:f4:e5:6f:c2:6e:f3:c6:b1:9e:
                    96:67:a9:94:b2:2e:34:38:b9:fc:8d:80:f0:f4:8f:
                    0f:1e:2b:66:76:6e:67:93:d0:bc:8d:0e:7f:fe:d8:
                    bd:45:3f:aa:f4:69:91:eb:ca:13:99:02:e7:2c:9f:
                    63:26:68:37:d1:a1:b3:f3:1f:b5:8a:d6:69:ba:a1:
                    8a:38:21:65:66:cc:23:d5:d7:26:7f:5a:e5:bb:5d:
                    a5:06:d7:b8:30:34:6e:e6:e8:9b:81:e3:ec:09:ca:
                    cb:04:ea:7b:9c:39:df:b7:cd:cc:9e:62:b5:98:5f:
                    12:17:43:57:59:e1:76:7f:50:d3:c5:0c:95:a5:24:
                    8c:fc:85:8d:cc:63:e8:a0:40:69:62:29:b2:82:21:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D7:53:F7:F0:93:E3:33:DC:12:A9:2E:B2:7A:D1:FF:BF:0D:27:20
            X509v3 Authority Key Identifier:
                keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7c:b5:8a:01:a4:6a:ba:44:f3:16:17:48:25:86:2d:1e:dc:
         a6:86:41:e4:59:1a:70:4d:17:01:f8:49:c8:e9:74:20:fe:74:
         8b:47:77:ef:07:4d:a6:c5:1c:27:f5:6b:b7:84:70:4d:fb:01:
         bd:d9:1f:18:94:92:35:8e:9b:37:82:36:e4:f3:cf:e6:32:8e:
         c2:cc:6b:a6:59:79:4f:72:b4:92:62:38:ad:bf:25:16:86:41:
         4f:9a:27:a8:dc:2b:12:77:1a:c9:c4:b3:80:43:6d:b8:31:1d:
         33:3a:8b:f2:25:8b:10:6c:05:b6:8e:a2:f6:8b:6b:78:06:95:
         64:58:1a:23:de:eb:55:1e:e8:43:29:fc:cb:72:00:f5:56:f4:
         2b:6f:d3:ca:17:0a:4b:26:b0:b4:7a:26:a6:23:98:bf:40:91:
         95:24:68:67:a7:f5:3a:4f:25:47:85:a1:77:c6:32:f3:81:5f:
         a1:1d:89:4b:c3:6e:aa:59:b9:5d:56:40:53:93:be:ea:4a:ef:
         e1:f3:93:0c:12:a1:78:a6:e2:05:e1:5c:f4:82:bc:bc:db:8c:
         c1:92:f4:48:50:c4:16:b7:62:42:37:db:04:2b:4f:1d:97:0a:
         ec:f1:cc:28:4f:a1:fb:df:ac:00:8f:4f:78:ec:38:43:7b:63:
         e1:9d:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:33 2026 by rpki-client