Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
File:                     sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json)
Hash identifier:          XULb3afRYNh0W29Zt5basmTftqaBZY+OyPML1VxzGT0=
Subject key identifier:   5C:64:A4:D4:D6:95:9D:1C:5C:48:D1:44:44:06:D5:2F:85:CB:47:15
Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
Certificate issuer:       /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
Manifest number:          019B
Signing time:             Thu 21 May 2026 04:17:11 +0000
Manifest this update:     Thu 21 May 2026 04:17:11 +0000
Manifest next update:     Thu 28 May 2026 04:17:11 +0000
Files and hashes:         1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: W0u840zq3cC/If74Fs4llqc443BULgr9Cw5NvINLyRU=)
                          2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: XGT7f3N6d7VyR5B4Z12+X5V0xJRoN3FoBvQSpbBJPeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
                          rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
        Validity
            Not Before: May 21 04:17:11 2026 GMT
            Not After : May 28 04:17:11 2026 GMT
        Subject: CN=6a0e8747-a26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:08:ef:09:4d:49:2b:29:95:c0:ca:a0:28:
                    ba:d1:32:ff:a4:6d:fa:10:05:ab:6f:70:f2:ac:2b:
                    6a:20:5e:4b:30:4e:af:0d:44:0c:f0:ee:8c:76:c7:
                    93:8c:0a:a1:f7:fa:c5:41:90:0d:90:ae:2a:d6:58:
                    4f:bc:cd:a9:d1:a1:de:2c:42:20:5d:6a:71:cf:44:
                    4f:18:36:ac:93:dc:86:c2:34:1b:b0:0f:0d:89:f7:
                    8b:ee:2c:dd:04:ab:72:27:67:83:41:a1:0b:95:1f:
                    f5:99:06:7e:05:ab:95:62:bf:fd:6c:52:8a:a3:31:
                    33:f2:80:a1:b9:c6:76:eb:a1:e2:ab:d3:1f:0a:c3:
                    5e:a5:6d:0f:37:b3:9c:1f:3b:1f:43:d0:82:60:0e:
                    0a:c7:37:91:e4:a5:7b:31:47:37:71:f9:5c:ce:b6:
                    e8:d7:38:09:c4:5f:5c:08:9b:02:2b:00:78:af:90:
                    f3:6d:e4:1d:0d:49:79:9a:d0:93:e7:aa:08:b4:b9:
                    d3:35:6c:d0:e6:64:3e:cc:ea:d8:1c:ae:fa:0c:b6:
                    7b:bb:16:71:02:5f:5e:6f:93:4b:48:b8:41:fc:c8:
                    9f:50:c0:3b:dc:d3:7d:6d:dc:a9:2a:fd:75:18:e0:
                    a0:7f:e1:6d:04:50:dd:b8:63:f8:02:44:a6:1c:ba:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:64:A4:D4:D6:95:9D:1C:5C:48:D1:44:44:06:D5:2F:85:CB:47:15
            X509v3 Authority Key Identifier:
                keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:54:cb:e8:bc:52:c8:2e:a4:b7:97:44:6b:ba:f2:a7:9a:9b:
         31:0b:3e:0a:6d:27:91:4b:4f:c8:a7:fd:e5:84:9e:10:7c:09:
         dd:a9:11:14:2e:21:28:c1:a9:b0:c1:aa:4b:c3:7b:fc:78:1a:
         76:1a:fb:50:2c:f5:2a:7a:79:f3:c0:dc:7c:2e:86:62:df:7e:
         00:fd:5d:96:6c:5f:d4:c3:54:8b:3a:36:c9:a7:48:09:82:e7:
         e1:0a:f9:7e:a0:38:62:98:92:46:3a:c0:c5:18:79:9c:73:06:
         1c:c9:82:0e:8e:e7:88:cb:87:4c:10:cf:e4:8e:65:98:40:da:
         38:fd:f8:20:79:26:cc:da:d5:df:e7:20:8e:fe:74:c6:8f:1a:
         d3:4f:a0:07:26:c5:e2:3a:1f:ca:78:2a:db:1a:f8:17:07:0a:
         44:9d:56:46:bb:7d:f8:54:ef:64:9a:26:52:97:ae:c6:21:d7:
         92:e5:85:6a:f8:77:a9:e6:13:1e:e6:26:3a:64:bd:1d:39:f9:
         98:4d:45:a3:35:b2:7a:61:79:50:fe:3f:23:0d:c7:2a:62:7b:
         e8:4d:a8:3f:e4:87:ad:49:c9:55:87:98:0f:8b:8e:a7:bd:9e:
         de:ff:f1:2d:53:9e:ab:56:0a:2b:52:69:9f:1e:5d:51:96:35:
         42:a6:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:49 2026 by rpki-client