Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          99u+LFPsRQQRCX0iN3Dl0DRZLqwFzDZzZPg06vypV+I=
Subject key identifier:   E2:C5:6F:17:42:B1:AD:49:8C:66:CA:EA:7A:80:B0:D4:D0:C0:40:AB
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          01A3
Signing time:             Wed 17 Jun 2026 04:20:54 +0000
Manifest this update:     Wed 17 Jun 2026 04:20:53 +0000
Manifest next update:     Wed 24 Jun 2026 04:20:53 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: QadmSvclAa00MbW5Mfvgrc7qY9+D5xagLc8pyDIOMkM=)
                          2: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: lh7b/tPQgjVztJOWiRH2xasWEweYYWz05xpd/0kRPZY=)
                          3: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: GDPqygOrsBj+fJmh7WunU6Q2CU+hKV7/kXJqiMPQcIA=)
                          4: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: pdsufyCA0ZYcLSO/LH6YX7jVCEnEECjdZU8H8hRFMrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Jun 17 04:20:53 2026 GMT
            Not After : Jun 24 04:20:53 2026 GMT
        Subject: CN=6a3220a5-720d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:27:ea:2f:cf:88:b0:32:49:70:19:db:0b:
                    06:70:3b:8a:2f:42:37:2f:59:69:30:ba:45:95:35:
                    e7:93:09:5a:e1:49:a8:81:bf:2f:0f:89:5a:73:c4:
                    bb:07:77:be:7e:47:de:ab:30:96:ee:65:49:b7:e9:
                    65:2d:ab:f2:90:f5:6c:07:75:ee:c4:24:27:22:ef:
                    ce:27:73:88:19:b6:5e:ac:fc:46:c9:5b:dc:d8:eb:
                    ae:12:48:62:33:2a:b9:c6:43:17:30:1d:9f:19:7c:
                    aa:0b:64:f6:aa:ab:d2:8b:98:0b:b9:de:44:ab:32:
                    11:19:7f:44:a4:58:ec:48:71:f6:fa:26:9e:45:a8:
                    98:5d:a7:81:f3:05:2c:1a:0b:75:ab:de:6f:60:80:
                    ba:c0:a3:62:db:c8:8c:fa:ea:05:33:47:aa:c3:8e:
                    c1:f9:c0:08:7c:d6:26:7f:12:87:77:79:51:5d:28:
                    e7:e3:d5:56:4b:89:cc:17:ec:e3:55:3a:10:71:0d:
                    c4:2f:5d:94:bc:a5:2b:04:5d:b8:0f:58:80:e0:c2:
                    1d:e8:92:fd:01:ab:9d:f7:14:3b:91:10:5d:bf:b3:
                    5c:ba:01:4b:15:2e:23:b8:3c:35:ff:62:94:94:08:
                    22:65:61:3c:f6:fe:85:d3:07:a5:59:7f:f4:78:fa:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C5:6F:17:42:B1:AD:49:8C:66:CA:EA:7A:80:B0:D4:D0:C0:40:AB
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b8:99:c5:35:2a:ab:25:d6:08:c8:c2:40:aa:59:26:bb:6a:
         51:8d:b2:0c:2a:dc:ae:2b:63:03:8d:ab:82:82:ad:17:03:95:
         42:92:c0:f2:ae:e8:f0:42:a9:93:7f:23:4a:3b:ec:92:46:fd:
         98:50:8f:3e:60:cb:9d:c0:85:53:f9:c9:39:93:22:8d:04:a8:
         76:98:2b:91:88:83:0d:ed:45:4d:62:77:e6:5f:b4:93:80:0d:
         82:86:30:6c:11:13:f3:e6:9f:4f:e9:9f:e6:64:e3:e0:98:f8:
         d6:01:50:f3:af:56:5e:a0:f7:83:08:eb:3b:60:18:88:35:50:
         b3:ad:fd:f4:2e:e4:a6:88:13:20:51:f8:f4:f7:46:70:eb:c6:
         1b:52:5f:a8:af:c2:b2:63:5f:2f:fd:01:e4:08:de:62:d1:83:
         32:92:fe:e4:67:c9:b3:bd:dc:25:94:95:a0:b6:e8:95:c8:cf:
         15:85:0f:e0:e8:13:f0:ad:9f:34:09:99:13:83:81:53:13:93:
         90:03:d8:5e:ed:2a:3d:a4:59:04:59:f1:cc:d6:b9:96:ea:c6:
         31:0e:9d:68:6a:ac:5e:e7:6f:1f:15:e6:bb:53:12:d5:6f:1a:
         83:cb:b0:e2:32:a8:20:b4:51:49:0b:8a:0b:d2:7f:37:79:fb:
         e8:17:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:10:15 2026 by rpki-client