Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
File:                     SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft (raw, json)
Hash identifier:          B4FJitu42jzZbhAPIv+kH4gxg7ETJYQWZ9ZWlhtLW5w=
Subject key identifier:   DC:63:92:C8:1F:0F:67:93:E0:29:36:74:9A:D8:75:FE:B4:26:7D:12
Authority key identifier: 48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
Certificate issuer:       /CN=A9154C6E/serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
Manifest number:          11
Signing time:             Sun 01 Mar 2026 10:35:31 +0000
Manifest this update:     Sun 01 Mar 2026 10:35:31 +0000
Manifest next update:     Sun 08 Mar 2026 10:35:31 +0000
Files and hashes:         1: SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl (hash: kv10ZfWN6B1kbt/+JaHBKLOIhoevqLrqhmYWOFvcWII=)
                          2: 2F9BA582021311F19CF662E3456F56BC.roa (hash: u0IV4WpfZVo/gGclcgn/9zhDLwmJapXxrIYkkYa+G0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154C6E, serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
        Validity
            Not Before: Mar  1 10:35:31 2026 GMT
            Not After : Mar  8 10:35:31 2026 GMT
        Subject: CN=69a41673-42c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:80:4b:1c:81:17:e5:e3:be:67:b1:50:21:
                    61:78:77:ce:71:db:9e:10:1f:79:fd:a7:7f:9a:01:
                    c9:6d:89:83:1b:fd:c2:53:7b:87:1c:72:53:d0:ff:
                    61:4b:e6:5b:eb:16:e7:57:39:4c:95:e4:a1:38:5c:
                    6b:fe:e4:c6:02:11:8b:f2:45:01:e6:11:d4:5e:98:
                    28:25:3c:b7:d6:f8:0e:d2:b2:0a:b5:44:a0:67:00:
                    bd:35:62:5d:63:8b:2b:d8:f7:28:b1:52:a7:82:ab:
                    b8:a8:e6:e1:83:18:95:bf:c3:d5:b5:c5:8d:2e:61:
                    6e:ea:ea:44:ba:56:0d:cf:d9:e6:2a:8f:85:b4:f6:
                    1c:27:93:de:80:55:a5:98:66:94:ef:64:86:fa:35:
                    b3:5e:c4:d2:a8:02:71:eb:bf:0a:a9:9e:5f:ba:a3:
                    e8:73:78:eb:e8:6a:56:1f:56:f3:11:ef:a1:36:a0:
                    d1:c9:5f:3e:b6:9b:25:2f:6b:c2:6d:db:8c:d6:66:
                    9d:db:ed:c1:bc:4e:b2:55:61:31:81:d7:52:7d:a1:
                    a0:cd:2d:7b:05:f3:a0:d1:69:5f:34:87:3a:86:cb:
                    61:d6:33:69:c9:d0:af:77:aa:e8:29:80:d0:05:c2:
                    c8:e8:9b:50:ee:7e:42:36:ab:84:2b:87:75:7d:cb:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:63:92:C8:1F:0F:67:93:E0:29:36:74:9A:D8:75:FE:B4:26:7D:12
            X509v3 Authority Key Identifier:
                keyid:48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1b:8f:17:ea:59:76:82:89:3e:34:25:52:eb:ad:a0:40:c3:
         67:a2:03:88:1b:ee:f3:3d:2a:2e:93:56:30:03:ff:c4:f0:e8:
         5b:9b:aa:50:75:fc:72:58:81:b4:06:93:85:17:f1:0e:31:4b:
         44:46:51:ad:29:91:c4:f4:e8:b8:2f:98:0a:1c:98:ee:04:86:
         cb:97:ba:ac:a8:ba:a7:90:19:eb:45:21:34:f2:2a:6d:65:ba:
         a6:df:de:bf:9d:d5:13:24:06:f8:3f:fc:c3:39:68:5c:43:93:
         8f:4c:62:7f:a7:5c:c8:c5:77:58:d6:e9:25:78:28:c1:c1:da:
         fd:55:98:fe:8a:5d:fd:a6:cd:71:be:b7:8b:f1:cd:38:05:07:
         27:ee:59:1a:1b:38:87:55:22:62:ae:6c:59:0b:f5:cc:ea:19:
         3e:a4:92:8a:c2:22:4c:9f:73:6a:dd:ed:a6:09:d2:62:db:eb:
         44:84:9f:e0:df:a4:87:94:85:f9:68:14:81:96:91:a0:ed:de:
         e1:ba:f3:56:8f:8b:5d:ab:ae:6f:77:2c:55:3c:fa:29:b3:1c:
         97:7c:1a:01:be:ce:74:92:f2:a0:21:a0:81:cb:97:0b:80:0e:
         94:7f:1d:48:bd:71:e5:57:95:56:bc:80:ee:35:00:05:80:ac:
         c4:de:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:53:32 2026 by rpki-client