Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File:                     STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier:          GbghFBWVsem6PK7inF7MgswhkChwL+Q7FepWm5G+Kx0=
Subject key identifier:   CF:1D:3E:DC:0F:BD:1B:35:9D:C4:67:0C:80:C1:10:9B:BD:A4:B9:C7
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number:          0120
Signing time:             Mon 01 Jun 2026 06:35:23 +0000
Manifest this update:     Mon 01 Jun 2026 06:35:23 +0000
Manifest next update:     Mon 08 Jun 2026 06:35:23 +0000
Files and hashes:         1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: w1nRmKmAODYff7UA9eKjz0TzDlYnuNslixZE6USh1+o=)
                          2: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
                          3: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
                          4: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Jun  1 06:35:23 2026 GMT
            Not After : Jun  8 06:35:23 2026 GMT
        Subject: CN=6a1d282b-de49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:b1:ef:1b:9e:36:f4:fe:31:60:76:47:64:
                    f4:7e:6a:a0:cf:1b:ff:6b:c5:3b:ce:d6:29:7b:00:
                    64:fd:ff:1f:f4:62:8c:46:f3:fd:19:ca:94:ae:5d:
                    22:84:2b:80:03:a3:8c:e1:f0:b9:fd:e3:1f:ca:26:
                    40:b6:03:5f:b2:84:73:0e:17:69:30:1c:52:d1:69:
                    db:3a:40:08:fc:68:63:9f:dc:a8:36:9f:1a:21:e4:
                    3f:8e:a3:15:3d:9c:87:7e:63:16:18:4e:04:8e:95:
                    2c:7e:1f:83:1d:3b:85:9b:5e:08:e6:ac:66:37:3e:
                    8d:6e:c4:9b:82:66:00:57:a9:22:59:4b:4f:de:c9:
                    96:a1:25:bc:78:14:7d:86:49:88:9a:92:9f:45:09:
                    bc:96:92:18:7a:d1:27:42:7c:7a:4f:0d:94:a7:95:
                    19:61:66:e6:6f:06:1e:99:3b:1d:83:b3:b9:65:02:
                    b7:4a:65:bc:86:f6:36:0a:ab:73:e3:11:7e:29:ed:
                    f1:be:ba:fd:d0:c7:98:14:15:89:47:bf:d6:9d:7e:
                    6e:45:44:a5:59:18:e4:e8:53:d2:9f:b4:dd:44:15:
                    4e:cc:a0:ff:4c:58:e1:ad:8e:c5:31:47:cc:cb:60:
                    f4:7a:ba:dd:0f:bc:37:eb:cf:87:58:00:ed:3d:7d:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1D:3E:DC:0F:BD:1B:35:9D:C4:67:0C:80:C1:10:9B:BD:A4:B9:C7
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:35:fa:78:be:b7:5a:e5:ee:87:43:4e:95:58:a5:31:1e:0f:
         32:dc:52:ab:33:64:08:93:a8:4a:27:e5:98:9a:c7:b0:0b:34:
         4c:8e:e8:5b:ee:9a:a2:f6:75:fe:d7:19:8c:5b:6c:d7:42:00:
         fb:cf:0e:4a:a4:77:58:09:70:f3:cb:ff:aa:ad:ca:49:49:0f:
         62:a7:ee:8c:79:04:7f:df:f3:56:92:4b:0f:54:d9:e2:bb:17:
         b8:cd:6c:b6:67:f9:52:df:4f:65:16:52:3a:69:b1:59:1f:85:
         71:c7:e2:7c:ca:ac:72:c2:09:e0:6a:90:a1:cf:b9:af:13:d4:
         47:66:29:84:1e:b3:a9:5f:20:a8:fd:d9:21:04:d3:f3:7a:2a:
         3b:9e:f7:6a:c1:c3:2d:be:4e:8c:d8:57:87:7b:28:69:7b:12:
         18:48:c4:21:88:b0:50:d6:73:45:14:9c:73:eb:0b:fc:f5:18:
         72:50:fd:c6:6b:3a:38:97:24:3d:0f:47:53:5d:20:42:c7:c7:
         b4:72:ab:f4:de:52:22:7b:9f:69:85:3f:14:89:51:7e:79:a2:
         79:24:8b:a9:8b:c3:a4:a4:d3:e0:d2:7e:be:74:82:70:ec:8a:
         7a:5d:9a:75:37:38:c0:ed:c4:8b:b6:31:7c:37:66:c6:1d:d3:
         49:f9:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:38 2026 by rpki-client