Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File:                     SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier:          jNz2NxkVPShvvquPHGcOIAsNmQ9HTjtTHeFTJVnPkpI=
Subject key identifier:   CA:16:DE:80:C4:83:CB:7C:16:6C:20:F2:4D:B5:41:F8:20:C0:68:36
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer:       /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial:       0BAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number:          0B94
Signing time:             Sat 04 Apr 2026 18:57:11 +0000
Manifest this update:     Sat 04 Apr 2026 18:57:11 +0000
Manifest next update:     Sat 11 Apr 2026 18:57:11 +0000
Files and hashes:         1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: a62Do0IQ+nyTaEjl53xdh3qG2mCtMtGmrrwyokvRau0=)
                          2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: KzRK2aas8eOCnSmqY3CGoTXt2kRSyd0CQk65Ns8wG6U=)
                          3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: KuN44DKGBq1IgfFCnFPCdEKjgAmIvKASFe1F8KZvnoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
                          rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2989 (0xbad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
        Validity
            Not Before: Apr  4 18:57:11 2026 GMT
            Not After : Apr 11 18:57:11 2026 GMT
        Subject: CN=69d15f07-d71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:3c:7d:5e:62:9e:80:a5:20:30:12:f9:d6:
                    34:a1:d1:b8:10:b7:b1:e1:44:7a:6c:1e:be:51:dd:
                    cb:0a:05:83:d9:1b:6e:46:a4:4b:b1:d9:19:d0:86:
                    0f:30:cd:e8:0d:b8:f7:bf:d5:8c:1d:e5:60:9f:d9:
                    3a:33:0b:28:17:ef:c7:9e:3e:31:d5:6a:94:cc:fc:
                    73:95:54:a0:1f:25:15:0d:f4:bf:a7:9d:5a:ec:a1:
                    a9:ca:ca:ec:29:f2:81:61:40:22:10:b0:69:30:de:
                    8b:eb:f5:16:ec:47:72:a0:46:2c:ca:32:c7:f8:b2:
                    0d:f4:ff:7e:48:dd:a7:d4:89:5a:26:fe:4b:b7:54:
                    f1:60:af:35:91:ae:c3:ae:59:bc:d7:03:3c:93:49:
                    2a:f8:b4:cd:33:bb:3f:db:eb:55:44:a8:18:a5:a3:
                    70:fd:7a:04:20:43:2f:99:ce:8b:93:7a:e3:e4:fd:
                    aa:a7:24:0e:1c:a5:31:36:11:57:94:f0:80:71:fc:
                    b5:18:96:ca:58:d7:de:77:23:08:39:72:3f:e5:d0:
                    23:cc:c4:08:54:1d:9d:9a:0a:77:33:53:2e:e3:7c:
                    70:0d:4d:59:8b:4d:28:13:23:b1:06:1f:f6:38:f6:
                    82:41:72:e3:d1:ad:a7:68:7f:55:ef:a7:be:ef:be:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:16:DE:80:C4:83:CB:7C:16:6C:20:F2:4D:B5:41:F8:20:C0:68:36
            X509v3 Authority Key Identifier:
                keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:ef:ed:3c:12:0c:41:a4:e3:be:d5:8c:63:10:04:26:31:
         f5:0c:2f:ae:10:af:e5:80:6c:ea:ca:94:17:a2:09:e2:f0:80:
         76:c7:de:d7:e6:a9:4b:6e:ec:c9:5d:9e:9f:40:ea:43:28:76:
         6a:a8:58:33:5e:79:77:5e:20:1a:85:71:9b:ed:15:8a:37:7a:
         42:27:e2:64:5d:8f:cd:f9:d9:c9:58:d6:9e:86:a5:cc:ae:22:
         0a:04:c8:af:5d:f5:a0:5c:80:73:05:81:c7:bb:c9:5f:b8:0d:
         43:94:0d:b4:ff:d5:ed:85:e2:04:3a:c1:ed:5d:f4:6d:73:fa:
         5d:1e:6d:62:1f:a2:a3:57:f8:fd:a7:95:76:80:31:15:1e:09:
         33:44:b0:e4:63:38:57:9f:e6:03:89:23:1b:11:e4:68:48:ab:
         50:cf:66:b4:fa:8a:95:d6:1a:f9:f6:fe:ca:b8:e4:62:2f:4d:
         e6:df:2e:2f:c9:90:38:5e:d0:68:20:a0:ea:ef:f3:27:e0:05:
         09:15:f1:1c:a4:8b:40:04:50:67:81:95:bc:ad:e8:d9:e3:a3:
         72:12:78:76:17:2b:72:95:a3:1c:5f:3c:7e:5d:2c:a2:c1:cf:
         23:27:b4:85:06:50:ad:2f:06:b1:1f:cc:e5:fd:6c:61:d6:97:
         01:02:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:40:07 2026 by rpki-client