Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
File:                     sgBZBkA-medoWaqrsdy92uRCBvY.mft (raw, json)
Hash identifier:          LL+dUV7hOVvDzRjILQiF7h72Cqd9tG5Ydrj3fKPjUfE=
Subject key identifier:   59:8F:B1:97:76:6A:66:4B:9E:45:D8:CC:3A:6F:77:00:47:33:87:BB
Authority key identifier: B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6
Certificate issuer:       /CN=A913A748/serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
Manifest number:          0144
Signing time:             Sun 05 Apr 2026 04:40:10 +0000
Manifest this update:     Sun 05 Apr 2026 04:40:10 +0000
Manifest next update:     Sun 12 Apr 2026 04:40:10 +0000
Files and hashes:         1: sgBZBkA-medoWaqrsdy92uRCBvY.crl (hash: EfkQB+mcwv9FzpINbPMg6bq7DgK2JU+5Avv97xA/D3o=)
                          2: 0B7CF64642B211EF82734679C4F9AE02.roa (hash: T+tFwZ72UNIrl9WKmwRdVjWlTQRqs/Ap4+Ll+pZb1ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
        Validity
            Not Before: Apr  5 04:40:10 2026 GMT
            Not After : Apr 12 04:40:10 2026 GMT
        Subject: CN=69d1e7aa-9ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:61:3e:b7:80:aa:10:09:59:ef:ab:89:d3:
                    79:dc:c3:96:a9:ac:96:82:37:d4:84:c3:1c:65:a5:
                    a1:75:ec:69:63:56:e8:a8:dd:58:de:40:72:16:63:
                    55:4b:f5:dd:b1:5c:d8:9c:eb:1e:38:5b:7f:94:36:
                    49:ee:a1:b1:3b:75:05:42:3f:88:29:f3:86:b8:49:
                    39:91:f5:89:eb:ed:b3:0e:de:77:56:37:47:85:ba:
                    6e:c4:34:40:85:52:c3:03:c3:e9:27:4b:b0:69:34:
                    d4:d1:94:3b:a1:9d:a5:e6:cd:c4:44:fe:c0:82:a3:
                    ba:92:7e:5c:95:5b:6f:12:e6:4c:50:04:29:23:71:
                    3b:d1:83:08:3e:37:18:fa:aa:ce:47:f8:7b:27:2d:
                    4a:b2:07:46:5b:d5:1a:b4:25:9a:92:f7:9a:e8:55:
                    d4:df:33:43:f7:d4:71:50:3f:a9:24:f6:67:09:20:
                    88:33:6f:76:ff:91:fb:db:68:36:1a:51:d6:08:46:
                    55:e2:3f:3d:8d:fe:35:a1:17:84:17:97:b4:99:90:
                    a1:e3:e2:ff:d3:fa:e5:fb:51:6d:d4:72:a8:e8:e3:
                    5e:35:d6:ee:f3:02:03:63:2f:34:87:02:b5:e7:bb:
                    08:1f:a5:15:a1:c5:0a:7a:89:96:5b:07:41:66:cd:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8F:B1:97:76:6A:66:4B:9E:45:D8:CC:3A:6F:77:00:47:33:87:BB
            X509v3 Authority Key Identifier:
                keyid:B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:eb:16:a4:a5:f2:aa:87:6b:9c:f6:8e:10:8e:93:30:f5:42:
         d6:ef:c2:28:dc:63:8b:e0:fe:c0:31:71:2f:b0:99:bb:70:81:
         32:2e:67:3f:96:e8:20:d3:4b:f5:c7:73:58:0d:b4:11:2d:0b:
         41:4b:c1:9b:73:2c:60:82:32:ff:f1:d0:5f:33:cb:aa:5d:ee:
         bf:eb:66:5a:1e:f3:36:a9:8e:83:2f:84:23:db:cb:af:08:f1:
         28:59:fa:ff:00:7f:ac:a9:5c:9c:5c:e0:91:27:04:f3:94:f5:
         a5:d5:05:48:52:17:cc:7e:19:77:82:9c:10:eb:87:21:7c:2e:
         84:30:74:40:e7:ed:f3:7a:b5:76:d4:01:42:9f:32:d1:b4:9b:
         e6:48:38:64:94:3a:36:7c:2b:8a:25:04:ce:45:84:cf:39:b8:
         7a:2d:6e:89:05:38:38:ec:4c:cb:6b:c4:9f:12:fb:81:28:67:
         8f:60:a1:0e:2b:a3:05:1d:12:06:29:0b:64:b5:38:4b:b2:14:
         b2:46:5c:da:96:5f:af:16:dd:0a:14:30:cf:a3:ac:ac:e8:69:
         65:bf:f7:f2:a5:95:e3:a8:f5:94:31:cb:52:b8:ed:41:fe:37:
         47:a1:bc:39:04:b3:2c:c5:54:2a:42:7f:81:75:b1:52:55:0c:
         62:28:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:39 2026 by rpki-client