Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
File:                     sbozBTw5ulhlU3dDESOJ4wDEiAc.mft (raw, json)
Hash identifier:          rtfJmFnNByzpWo3w4w+4DRpVEcOcd/SFENmGG2UO46w=
Subject key identifier:   AF:70:5A:CB:5F:76:3D:7C:02:98:8B:A0:24:CC:71:FD:E8:10:E5:BE
Authority key identifier: B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
Certificate issuer:       /CN=A9150384/serialNumber=B1BA33053C39BA5865537743112389E300C48807
Certificate serial:       0D56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
Manifest number:          0D3C
Signing time:             Fri 12 Jun 2026 18:05:27 +0000
Manifest this update:     Fri 12 Jun 2026 18:05:27 +0000
Manifest next update:     Fri 19 Jun 2026 18:05:27 +0000
Files and hashes:         1: sbozBTw5ulhlU3dDESOJ4wDEiAc.crl (hash: Lnd13CsrkXcHCTEzxSFLfynFmjYqgz8FIzZIGnw5lQc=)
                          2: 3240ED82D62D11EFB0442B5DC4F9AE02.roa (hash: goxpVgCyktDRuj+zXY8IwkJZe67SlMAI6ql6BNqLFHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
                          rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3414 (0xd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150384, serialNumber=B1BA33053C39BA5865537743112389E300C48807
        Validity
            Not Before: Jun 12 18:05:27 2026 GMT
            Not After : Jun 19 18:05:27 2026 GMT
        Subject: CN=6a2c4a67-f92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:6d:6c:0f:e0:c1:2f:09:87:e1:20:54:08:
                    30:53:ff:30:58:00:8e:09:5b:73:6f:a1:14:ec:0a:
                    5c:3f:20:2a:c5:0c:d4:62:dc:23:4b:c4:e3:88:3d:
                    d6:4e:01:11:fc:b9:fa:ae:39:57:0e:bf:3a:71:22:
                    cc:c3:46:1e:4f:85:18:db:e6:d0:89:45:b0:7b:e6:
                    28:fe:25:fc:bd:52:1f:a8:39:7e:bd:f3:cd:5f:41:
                    91:ca:ae:30:a2:74:c4:5b:e0:49:dd:4a:e1:a4:9d:
                    1e:15:d5:89:8c:cc:6b:46:88:38:0e:00:16:fb:03:
                    ff:73:2e:b7:33:2c:1e:cd:43:bc:33:ea:16:c3:84:
                    d1:6d:57:8c:67:67:ed:07:3a:b8:69:76:4b:af:b0:
                    24:af:8e:09:aa:b4:21:9c:4d:a4:1d:23:38:51:9c:
                    21:f8:1d:56:e5:48:e1:65:0c:d6:02:8c:17:50:ad:
                    d4:3e:f3:23:4e:e9:4b:79:df:d2:17:6f:aa:63:26:
                    eb:3e:cb:59:c3:43:8d:76:62:36:c1:fe:df:c5:8b:
                    a4:41:c3:3e:31:b9:aa:6b:ff:8e:b9:73:39:21:dd:
                    e2:99:fe:ea:f1:f4:a2:d2:3e:b1:5f:6b:8c:cc:61:
                    95:4f:76:15:33:39:e8:94:0f:d1:ab:8c:3d:5c:b4:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:70:5A:CB:5F:76:3D:7C:02:98:8B:A0:24:CC:71:FD:E8:10:E5:BE
            X509v3 Authority Key Identifier:
                keyid:B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:d1:b1:1d:99:c6:e6:6d:fc:9e:73:ee:8d:ae:ee:b3:6a:
         ed:de:aa:fa:d8:67:d3:e1:48:71:09:c5:7c:62:54:aa:0c:db:
         3b:ae:8c:6b:d9:37:aa:00:57:05:6d:48:5b:3e:d3:f8:5e:ff:
         eb:f5:46:3e:ac:da:54:69:a9:57:56:4b:a7:3e:7d:e6:85:c5:
         28:fe:25:28:9c:2b:06:68:1a:15:14:3b:69:55:65:31:ad:d1:
         b1:8f:ab:71:56:2d:04:da:43:a0:02:84:0d:68:ed:13:35:04:
         31:90:31:ca:b4:6c:d9:60:a7:81:28:c7:46:16:a2:e6:4b:53:
         cd:9e:15:3a:d3:00:40:a6:56:a0:bc:f2:8c:26:d1:ce:71:4d:
         7f:15:cb:97:5a:5c:08:a4:d3:42:85:1f:1d:da:79:18:27:36:
         f3:0c:40:60:f0:25:df:cf:93:6b:30:f9:bc:24:91:b5:ab:83:
         bc:1b:b4:a3:26:cd:e6:9c:0e:03:4b:69:ee:1d:24:5c:06:09:
         6c:28:be:ab:2a:8d:ab:51:f4:7f:ea:98:aa:c0:67:9f:6a:ef:
         73:66:00:44:06:19:c1:03:6c:de:27:dc:a5:85:a5:6a:e6:4e:
         00:d8:40:e1:3f:89:0a:34:71:4b:04:d3:17:3e:38:7f:6f:ba:
         fb:c4:b8:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzODQxMTAvBgNVBAUTKEIxQkEzMzA1M0MzOUJBNTg2NTUzNzc0MzExMjM4OUUz
MDBDNDg4MDcwHhcNMjYwNjEyMTgwNTI3WhcNMjYwNjE5MTgwNTI3WjAYMRYwFAYD
VQQDEw02YTJjNGE2Ny1mOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtT1tbA/gwS8Jh+EgVAgwU/8wWACOCVtzb6EU7ApcPyAqxQzUYtwjS8TjiD3W
TgER/Ln6rjlXDr86cSLMw0YeT4UY2+bQiUWwe+Yo/iX8vVIfqDl+vfPNX0GRyq4w
onTEW+BJ3UrhpJ0eFdWJjMxrRog4DgAW+wP/cy63MywezUO8M+oWw4TRbVeMZ2ft
Bzq4aXZLr7Akr44JqrQhnE2kHSM4UZwh+B1W5UjhZQzWAowXUK3UPvMjTulLed/S
F2+qYybrPstZw0ONdmI2wf7fxYukQcM+Mbmqa/+OuXM5Id3imf7q8fSi0j6xX2uM
zGGVT3YVMznolA/Rq4w9XLT8awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9wWstf
dj18ApiLoCTMcf3oEOW+MB8GA1UdIwQYMBaAFLG6MwU8ObpYZVN3QxEjieMAxIgH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDM4NC85MzdGMzcyRTAw
NUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVsaGxVM2RERVNPSjR3REVp
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Nib3pCVHc1dWxobFUzZERFU09KNHdERWlBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDM4NC85MzdGMzcyRTAwNUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVs
aGxVM2RERVNPSjR3REVpQWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUqTRsR2ZxuZt/J5z7o2u7rNq7d6q+thn0+FIcQnFfGJUqgzbO66Ma9k3qgBX
BW1IWz7T+F7/6/VGPqzaVGmpV1ZLpz595oXFKP4lKJwrBmgaFRQ7aVVlMa3RsY+r
cVYtBNpDoAKEDWjtEzUEMZAxyrRs2WCngSjHRhai5ktTzZ4VOtMAQKZWoLzyjCbR
znFNfxXLl1pcCKTTQoUfHdp5GCc28wxAYPAl38+TazD5vCSRtauDvBu0oybN5pwO
A0tp7h0kXAYJbCi+qyqNq1H0f+qYqsBnn2rvc2YARAYZwQNs3ifcpYWlauZOANhA
4T+JCjRxSwTTFz44f2+6+8S4TQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:52:25 2026 by rpki-client