Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
File:                     SiRb8P512qERSrxQ5rme1DbDLGk.mft (raw, json)
Hash identifier:          LhK13owKqXOjifzSB8aAu4jK3c+QgjNee+8YUv4sn9k=
Subject key identifier:   56:C6:70:DA:C4:75:9A:45:87:66:EF:81:D1:7B:B7:09:70:77:D2:3F
Authority key identifier: 4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69
Certificate issuer:       /CN=A914D3D0/serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
Manifest number:          61
Signing time:             Mon 21 Sep 2026 08:06:05 +0000
Manifest this update:     Mon 21 Sep 2026 08:06:04 +0000
Manifest next update:     Mon 28 Sep 2026 08:06:04 +0000
Files and hashes:         1: SiRb8P512qERSrxQ5rme1DbDLGk.crl (hash: 0qHm6jDPl0VpBODG6M7jTp8YYAlmRmlH8xSUIrQ6wLc=)
                          2: D11E6E8224CB11F1A3AB4FF6A7833773.roa (hash: x6uhNShvVOgmcKuVqlrOttACB4glBVZA83SSQpSH+7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl
                          rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3D0, serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
        Validity
            Not Before: Sep 21 08:06:04 2026 GMT
            Not After : Sep 28 08:06:04 2026 GMT
        Subject: CN=6ab0e56d-05ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:58:3a:0e:b6:21:49:fb:bb:d1:1a:3c:bb:
                    70:cc:ef:ea:99:48:bb:54:a6:ee:24:2f:23:a8:95:
                    72:54:36:82:0c:33:8d:45:1f:24:b9:fa:09:48:f8:
                    f1:4b:08:71:a3:d6:f4:9c:f6:b8:9d:9c:8e:2d:d5:
                    9d:46:67:d1:b6:e4:a5:d5:96:a7:b7:0d:3d:9a:12:
                    2f:45:bd:82:02:e9:74:fc:37:75:4c:02:ad:77:f5:
                    5b:a1:7a:6f:1c:1d:94:4c:2c:b8:22:a9:c6:d0:e7:
                    17:d0:0d:67:64:a0:4c:5b:dd:5c:68:06:4d:2a:0c:
                    9f:47:87:a1:6e:ae:36:48:72:24:9f:a2:9a:8e:c4:
                    ab:50:cf:3d:94:ac:63:9a:32:ed:39:ac:54:b9:35:
                    0e:23:ce:73:85:05:7a:e1:39:a2:82:48:3e:fd:82:
                    59:ab:45:0e:25:6c:9d:a4:71:19:25:86:68:68:95:
                    01:54:54:76:77:37:ae:9a:17:46:15:36:b8:29:7e:
                    41:30:79:d0:30:30:91:9d:35:26:a9:b8:10:0c:b2:
                    e1:66:bf:4c:05:51:f8:4c:61:4e:66:4c:b8:1b:24:
                    52:b7:b9:37:99:3a:df:1a:98:a2:fb:94:8e:45:7f:
                    54:6b:26:5d:d2:96:92:ff:69:0f:d7:7a:ab:c3:18:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C6:70:DA:C4:75:9A:45:87:66:EF:81:D1:7B:B7:09:70:77:D2:3F
            X509v3 Authority Key Identifier:
                keyid:4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:8a:8b:f4:82:6a:71:c4:de:be:2a:52:9b:cc:ed:31:96:
         91:6e:10:01:11:61:a4:c4:ae:79:f2:7d:cd:1e:b9:a9:33:fd:
         fc:35:49:3f:5e:ab:9f:0b:ed:b2:e2:0b:b0:f0:2e:ee:43:98:
         a3:71:97:25:06:99:a7:15:f0:de:29:03:be:20:98:ea:6d:7a:
         fc:f0:94:d7:04:8f:21:0d:ea:e4:c7:31:6d:22:67:9b:a4:89:
         2c:16:59:2f:78:f6:14:da:e4:bd:23:aa:af:05:a4:08:66:30:
         34:a2:d5:37:f5:2c:80:bf:87:af:8b:33:3a:41:8c:84:97:a0:
         e1:59:d8:7c:9e:ec:f5:89:75:98:3d:d3:28:d1:ad:f6:5f:79:
         2f:8d:15:87:97:89:ac:fd:8c:9a:5e:a8:44:75:26:75:22:c0:
         6a:ff:87:cd:84:97:ad:4a:c7:bf:15:47:e1:a7:80:c8:ca:ea:
         4e:28:8a:87:52:db:ed:70:b9:10:1f:4e:7e:71:ea:34:f5:82:
         a8:0a:cb:61:bb:cc:1b:4b:27:9b:91:b4:86:50:29:0c:52:24:
         b3:d3:ea:3d:14:16:22:77:9f:26:69:0a:c2:90:55:ae:54:6f:
         2a:c4:52:a7:ba:86:ca:c1:19:5b:38:43:8c:9a:fb:77:cd:7c:
         94:11:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:59:14 2026 by rpki-client