Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
File:                     SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json)
Hash identifier:          MFlwNB3HsfIvztjljZcaZw4kaOTIAmWEY3wTGw/rdZo=
Subject key identifier:   9D:67:CE:B6:90:E0:D4:C2:A0:1B:D4:75:99:A1:7D:8A:B1:4A:2A:EA
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Certificate issuer:       /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
Manifest number:          025A
Signing time:             Wed 07 Oct 2026 02:39:10 +0000
Manifest this update:     Wed 07 Oct 2026 02:39:10 +0000
Manifest next update:     Wed 14 Oct 2026 02:39:10 +0000
Files and hashes:         1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: GSGrFHBCoGyb5fKeGGm2et2PwjCAEv7/vxX562DTHL4=)
                          2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: nfSDHyxIpYxuJaa572+JGo1gsCxYp6fGEhVukj2YiGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
                          rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
        Validity
            Not Before: Oct  7 02:39:10 2026 GMT
            Not After : Oct 14 02:39:10 2026 GMT
        Subject: CN=6ac5b0ce-2afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:28:4f:64:71:2c:a8:a1:2b:26:1b:00:d0:
                    e6:40:7d:82:d8:7e:59:94:f8:e1:a4:34:af:97:45:
                    83:9e:9a:5c:19:70:3f:a7:c8:b0:74:d5:22:80:b8:
                    05:2c:e9:31:7b:99:af:d3:eb:31:0f:9d:ef:ee:6a:
                    34:a3:91:c3:21:06:b8:c9:a1:c8:21:16:3f:9f:70:
                    76:0c:cf:4d:e8:ce:4e:23:80:da:47:51:d6:dd:2d:
                    07:ad:19:82:b4:a9:5c:79:22:6c:3e:58:ed:35:c9:
                    c4:3b:c2:26:97:d2:f8:0b:10:27:a2:db:4f:f1:03:
                    80:0c:5e:7a:79:d9:28:ef:7e:4c:ed:89:aa:3f:b0:
                    29:65:7b:9e:0a:b6:4c:3c:32:30:fd:2c:44:72:34:
                    9a:d8:a1:bf:a5:d7:2d:53:af:e4:b6:50:87:24:c2:
                    98:51:c5:71:b8:50:87:0a:4e:d4:36:7d:44:e4:c4:
                    f5:c3:53:91:3c:78:f7:44:ef:a1:2e:ae:93:99:c9:
                    b4:c6:46:9d:17:bb:9f:c7:1b:9e:d4:23:12:dd:9d:
                    01:2d:06:82:02:e9:71:e7:9d:b3:49:89:8d:68:a6:
                    c5:0a:0e:e9:82:af:d6:ad:25:1d:cc:75:24:cf:a2:
                    6f:e9:ac:f1:27:3a:ce:29:69:21:bb:83:b3:0a:9e:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:67:CE:B6:90:E0:D4:C2:A0:1B:D4:75:99:A1:7D:8A:B1:4A:2A:EA
            X509v3 Authority Key Identifier:
                keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:37:8f:f7:fe:63:e6:40:84:60:ab:25:fb:e3:c0:81:2f:
         ae:85:61:4a:d2:98:df:e4:21:8b:12:5e:fb:e6:e2:a0:b4:85:
         bf:33:3f:1a:cc:b5:b6:e1:31:df:5a:65:4d:1a:56:36:86:14:
         77:47:dc:e2:b0:7e:4c:ba:8c:b8:32:34:eb:fb:7d:64:b9:fc:
         9e:a4:95:c3:03:82:5b:c3:9d:64:b3:18:44:21:94:cb:58:51:
         44:00:e0:c7:b0:a4:f2:3f:90:35:3e:25:29:c7:7c:71:b9:b3:
         28:62:53:ad:ce:a6:23:f3:5f:af:21:86:63:ea:dd:96:87:d6:
         95:03:73:b3:9e:83:7f:d5:eb:73:4d:4e:b6:5c:e6:a6:51:38:
         26:37:b5:14:ef:0b:d6:ab:f0:60:76:3d:16:1f:93:c9:52:a0:
         09:e9:b9:c1:f6:4a:87:fe:68:e3:80:df:4a:a0:7a:cd:43:ce:
         34:df:b9:ab:e7:b0:2c:68:aa:d1:18:89:74:e7:d0:6e:25:27:
         5e:27:3c:21:8b:5d:72:d1:b4:7c:f2:75:64:5e:11:9c:0a:da:
         88:2c:57:02:bc:63:7a:d7:d8:26:cf:ec:c5:54:11:e1:19:05:
         d2:64:38:06:f4:89:bf:fe:23:b2:ea:5a:79:30:e3:c9:e7:3a:
         7b:37:b3:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I2NzUxMTAvBgNVBAUTKDRBQjVDQTEwQzJBQzIyMjgyQTk5QUU2QkY2MjRGOTM3
NTY4NDNGOEEwHhcNMjYxMDA3MDIzOTEwWhcNMjYxMDE0MDIzOTEwWjAYMRYwFAYD
VQQDEw02YWM1YjBjZS0yYWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxrYoT2RxLKihKyYbANDmQH2C2H5ZlPjhpDSvl0WDnppcGXA/p8iwdNUigLgF
LOkxe5mv0+sxD53v7mo0o5HDIQa4yaHIIRY/n3B2DM9N6M5OI4DaR1HW3S0HrRmC
tKlceSJsPljtNcnEO8Iml9L4CxAnottP8QOADF56edko735M7YmqP7ApZXueCrZM
PDIw/SxEcjSa2KG/pdctU6/ktlCHJMKYUcVxuFCHCk7UNn1E5MT1w1ORPHj3RO+h
Lq6Tmcm0xkadF7ufxxue1CMS3Z0BLQaCAulx552zSYmNaKbFCg7pgq/WrSUdzHUk
z6Jv6azxJzrOKWkhu4OzCp6WoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1nzraQ
4NTCoBvUdZmhfYqxSirqMB8GA1UdIwQYMBaAFEq1yhDCrCIoKpmua/Yk+TdWhD+K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjY3NS9EQ0FEMjdGQzJB
MDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lpZ3FtYTVyOWlUNU4xYUVQ
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyWEtFTUtzSWlncW1hNXI5aVQ1TjFhRVA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjY3NS9EQ0FEMjdGQzJBMDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lp
Z3FtYTVyOWlUNU4xYUVQNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC9Y3j/f+Y+ZAhGCrJfvjwIEvroVhStKY3+QhixJe++bioLSFvzM/Gsy1tuEx
31plTRpWNoYUd0fc4rB+TLqMuDI06/t9ZLn8nqSVwwOCW8OdZLMYRCGUy1hRRADg
x7Ck8j+QNT4lKcd8cbmzKGJTrc6mI/NfryGGY+rdlofWlQNzs56Df9Xrc01Otlzm
plE4Jje1FO8L1qvwYHY9Fh+TyVKgCem5wfZKh/5o44DfSqB6zUPONN+5q+ewLGiq
0RiJdOfQbiUnXic8IYtdctG0fPJ1ZF4RnAraiCxXArxjetfYJs/sxVQR4RkF0mQ4
BvSJv/4jsupaeTDjyec6ezeznA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:55:52 2026 by rpki-client