Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
File:                     sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json)
Hash identifier:          9YD8hhdp9/ICByud9QR2JC4tEUC4BK+jFQs3V58+nLs=
Subject key identifier:   C9:C2:61:9D:11:6B:DB:46:70:4E:AE:A3:57:88:82:EC:AF:82:C2:AE
Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
Certificate issuer:       /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
Manifest number:          015B
Signing time:             Sun 27 Sep 2026 05:41:04 +0000
Manifest this update:     Sun 27 Sep 2026 05:41:04 +0000
Manifest next update:     Sun 04 Oct 2026 05:41:04 +0000
Files and hashes:         1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: bXkEWZbRHn+qQSvqtA+FZgeuJR3tknoA90RB10LOrnk=)
                          2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: IetKqAIBooa+U8zye1p9cy/XtE+vQXfntEYYvrxJfuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
                          rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
        Validity
            Not Before: Sep 27 05:41:04 2026 GMT
            Not After : Oct  4 05:41:04 2026 GMT
        Subject: CN=6ab8ac70-8c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:4d:61:3f:99:af:93:d2:67:6d:3c:05:dd:
                    74:7e:06:2f:89:2d:4e:66:29:f6:06:54:31:77:1b:
                    d0:dc:ab:93:29:3e:10:59:4c:3d:db:fc:cc:c2:77:
                    e3:ec:ca:82:25:f8:24:1d:6a:e4:62:c4:aa:08:40:
                    e9:d0:47:5f:bb:f2:b8:a8:d7:58:de:4d:23:23:7e:
                    1d:c9:b8:8c:4b:7c:01:e4:ce:6c:8b:24:53:fd:d0:
                    4d:d3:0c:a2:26:00:ae:4e:c6:1e:f6:06:73:6e:d0:
                    a0:d4:d8:04:27:f4:81:8c:60:4d:55:76:43:b5:be:
                    a8:3e:61:08:c6:ee:87:77:c1:78:bb:12:ff:16:20:
                    5a:d4:78:72:d0:2a:20:3b:ed:1f:37:44:1e:1e:61:
                    a6:c0:22:9e:f1:bd:c6:e0:47:c8:ed:99:02:97:59:
                    63:22:bb:e0:14:28:a4:5c:83:01:bb:4e:fa:7d:30:
                    51:b8:e1:a4:64:0d:b7:cc:48:08:f4:ba:cd:2f:89:
                    42:4e:38:61:be:36:ea:34:61:1c:b7:35:fd:72:a0:
                    83:fd:9a:15:35:1b:88:21:0b:0f:84:b8:a0:0a:34:
                    bd:25:c4:87:8d:8a:80:a6:99:87:b4:0a:99:e7:3d:
                    7a:5d:3d:67:43:72:5f:2f:35:32:ce:7d:84:2b:56:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C2:61:9D:11:6B:DB:46:70:4E:AE:A3:57:88:82:EC:AF:82:C2:AE
            X509v3 Authority Key Identifier:
                keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:21:ec:3e:f1:43:b9:62:ed:09:3e:95:92:9d:79:d1:d7:3d:
         9f:76:38:25:4b:50:3c:68:e8:63:b3:69:c4:67:12:a0:22:ac:
         fe:25:37:f0:ae:bc:df:93:a4:38:67:fb:10:9f:d6:ee:ea:2d:
         0a:36:73:08:1f:cf:c3:77:4a:b9:02:af:be:9e:be:e1:6a:f9:
         12:66:1f:8d:e1:2a:42:28:86:76:ec:7a:b8:3a:52:18:87:6f:
         8d:70:ae:2b:a5:b5:ed:d1:a9:6d:c2:e7:6e:18:bd:36:c6:c0:
         8b:8e:d6:fc:40:08:b7:81:9f:a0:31:dd:08:2a:d4:64:b3:ad:
         ca:84:44:7f:3d:b4:43:d8:f3:7c:bf:e9:2c:4d:d1:14:73:df:
         55:a1:e0:34:ce:44:64:48:f4:71:a6:3c:b7:69:e1:bc:be:a1:
         9e:5b:ab:c6:97:0b:6c:2b:0f:d6:03:19:cb:47:be:f6:01:02:
         9b:e7:70:b2:c0:ae:26:7e:26:d4:bd:db:12:f0:34:00:f9:9a:
         85:47:58:b2:6f:8d:0e:8a:f4:1d:ce:05:83:67:47:11:6a:fc:
         78:4d:4f:2a:03:38:ed:1f:57:79:dc:a6:44:b6:4a:ed:13:84:
         30:ee:93:65:e9:1b:09:c4:11:a2:75:7a:47:d4:2a:71:25:c7:
         63:de:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:53:43 2026 by rpki-client