Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
File:                     ShBYcSoe344SOQfrNw8JHcdDNfo.mft (raw, json)
Hash identifier:          sfXXwumaCiWu0s8oN8Bnqj8hEA8FWsu8bFC54A1oHcY=
Subject key identifier:   42:E8:33:DF:A3:4D:3B:F5:12:2C:47:07:1B:3E:20:79:F1:DF:BB:B3
Authority key identifier: 4A:10:58:71:2A:1E:DF:8E:12:39:07:EB:37:0F:09:1D:C7:43:35:FA
Certificate issuer:       /CN=A913738D/serialNumber=4A1058712A1EDF8E123907EB370F091DC74335FA
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
Manifest number:          4C
Signing time:             Mon 05 Oct 2026 08:50:18 +0000
Manifest this update:     Mon 05 Oct 2026 08:50:17 +0000
Manifest next update:     Mon 12 Oct 2026 08:50:17 +0000
Files and hashes:         1: ShBYcSoe344SOQfrNw8JHcdDNfo.crl (hash: ZvigUiz8K8ITI2mwpWI1e8A1E1OCES5n+B2K01dHzGY=)
                          2: D6315EBC4EA011F18D123533BE833773.roa (hash: +uy/rfP0mfTiKOrRLiTzZGPfW5GTzYympoeDw/BIW+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.crl
                          rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913738D, serialNumber=4A1058712A1EDF8E123907EB370F091DC74335FA
        Validity
            Not Before: Oct  5 08:50:17 2026 GMT
            Not After : Oct 12 08:50:17 2026 GMT
        Subject: CN=6ac364ca-8cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:1d:79:e9:5e:38:0f:e8:78:a8:72:52:a9:
                    6a:e9:9c:4a:61:f4:d5:7b:6c:f3:db:7e:2f:ce:8e:
                    36:86:a3:03:13:42:72:a1:9c:3e:34:d5:78:82:01:
                    33:e2:7b:4e:bb:ed:38:17:74:98:b1:52:60:ad:d4:
                    5c:c5:41:2b:ec:6b:b6:fe:4d:8d:c7:75:ee:db:26:
                    9d:bc:19:de:d0:7c:b6:dc:1d:6d:78:78:35:6f:c3:
                    98:e1:bf:08:36:85:d3:1b:34:aa:b8:a3:73:40:3b:
                    56:e3:c7:33:69:14:d3:a8:e3:61:f4:4a:b4:00:2c:
                    4b:ed:eb:6a:ee:7f:17:38:16:fd:dc:00:b4:76:8c:
                    36:d5:62:09:4c:32:ad:93:4d:19:f1:21:eb:35:92:
                    d4:ca:16:2f:4f:90:e2:b4:99:4d:f3:cd:63:94:a2:
                    99:bb:73:60:6b:c3:2d:4f:69:5d:c1:de:05:6f:f9:
                    04:5d:6b:82:4f:6b:38:25:cd:07:fa:f7:44:e8:5e:
                    c3:b2:4c:0b:8c:0a:a7:3e:d6:d5:f4:74:86:0b:ba:
                    72:39:f4:e6:1c:e3:7a:75:6b:38:9d:0b:6a:bf:26:
                    b1:db:03:75:2b:88:e8:ab:53:7b:7f:59:fb:2e:37:
                    9b:e2:0c:64:4c:85:70:f6:59:88:bb:d8:2f:89:16:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E8:33:DF:A3:4D:3B:F5:12:2C:47:07:1B:3E:20:79:F1:DF:BB:B3
            X509v3 Authority Key Identifier:
                keyid:4A:10:58:71:2A:1E:DF:8E:12:39:07:EB:37:0F:09:1D:C7:43:35:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:c0:7f:7b:00:d6:21:d6:1f:6a:30:52:5a:22:d7:68:ed:35:
         21:13:48:d4:3c:4f:0f:ef:08:b0:f9:28:13:26:33:05:e5:32:
         fc:9c:79:80:83:bf:85:9d:7d:b1:8f:d2:e5:29:56:ea:85:b7:
         6f:b7:1c:b9:18:83:a4:f4:ed:98:83:a9:ce:bc:6d:e2:30:4b:
         be:45:eb:7a:df:8e:07:1d:c2:7e:da:38:3b:92:ad:34:ce:51:
         49:d0:93:af:c4:84:f0:05:24:92:53:1d:cc:f0:df:00:bc:f9:
         7a:51:dc:4f:57:de:2e:af:3f:d7:87:4d:26:10:36:5b:09:aa:
         e5:c8:42:ef:a7:ad:3e:b1:3e:56:89:4e:93:ec:bf:dc:c1:f3:
         6f:bc:3d:7c:7c:64:7a:6f:4e:02:ea:0f:02:2c:ee:bf:60:af:
         c9:f1:9f:25:35:f8:8a:12:43:96:a5:5f:a3:07:96:81:78:d0:
         42:c7:3e:b3:f6:1b:99:c4:1c:cc:27:29:a1:f6:44:ed:e5:e8:
         96:7e:07:47:a6:18:1f:53:0d:5a:1a:23:8b:56:cd:23:35:cf:
         14:f3:0a:42:63:2f:af:93:9a:f4:49:7a:67:d0:29:63:99:1b:
         86:a0:75:c9:1b:f2:8d:1d:cf:bf:21:f0:eb:eb:a7:88:cc:97:
         17:9c:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:45:50 2026 by rpki-client