Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
File:                     SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json)
Hash identifier:          fNLmbrSf+JgA0NVp+OfFiaa0O+VhhOxa6WDEBUjV2AA=
Subject key identifier:   ED:E1:E5:70:38:1A:40:1C:57:E2:2A:66:61:AF:6C:DC:C6:51:59:92
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Certificate issuer:       /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
Manifest number:          0212
Signing time:             Thu 21 May 2026 02:56:12 +0000
Manifest this update:     Thu 21 May 2026 02:56:12 +0000
Manifest next update:     Thu 28 May 2026 02:56:12 +0000
Files and hashes:         1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: vJwZ7Hu+dUcQqQ6ljBQ9L36/nMWGtRueTejiHFo4Ft4=)
                          2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: KokSDbus0aBO0eU4DsUwFv5W4sAsc3V1iSHBb9lNujw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
                          rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
        Validity
            Not Before: May 21 02:56:12 2026 GMT
            Not After : May 28 02:56:12 2026 GMT
        Subject: CN=6a0e744c-b065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:c7:09:19:97:35:6d:f9:70:19:f4:08:e8:
                    3f:08:c7:f2:c2:80:12:94:1d:c1:31:7e:b7:c6:b8:
                    db:95:f3:1c:f9:7b:f7:08:47:f0:8b:3e:d0:72:5e:
                    b1:f1:c9:e4:53:ca:18:20:52:0d:bf:2b:d3:0f:33:
                    4b:c2:33:6e:a1:49:d0:9a:24:56:8f:9a:1d:6a:1b:
                    18:61:9c:95:e2:17:6e:d7:dc:15:6f:7e:2d:3a:26:
                    c2:a1:6a:c3:77:cd:2f:7a:f0:6e:3d:80:f2:06:08:
                    95:13:e9:fa:8b:6f:c8:11:c3:bc:9b:27:91:16:83:
                    42:d4:07:c7:8e:41:ce:07:0c:9e:63:e1:59:d3:6f:
                    4d:c0:21:a8:7e:83:e6:09:6c:83:c5:47:e1:ab:54:
                    1e:b1:7a:e8:55:e9:36:51:1d:c2:ea:bf:6b:a0:f5:
                    51:da:45:00:31:2a:6f:14:c8:c2:72:e0:e3:a2:de:
                    a1:e1:06:2c:e8:5b:9c:9d:54:cc:4c:a8:ad:2e:58:
                    91:4f:13:47:6b:28:13:44:f5:ca:99:ce:38:9e:46:
                    72:1c:7a:5a:08:54:45:a5:ca:92:8a:76:48:18:98:
                    52:7d:ea:60:bf:bd:9e:41:0a:53:cf:8b:d2:0c:ad:
                    89:b5:cb:c6:51:79:b8:8f:59:22:5f:f5:b4:02:37:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:E5:70:38:1A:40:1C:57:E2:2A:66:61:AF:6C:DC:C6:51:59:92
            X509v3 Authority Key Identifier:
                keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:95:d3:75:1b:00:c9:88:ee:f8:4f:b2:97:2f:05:f5:ba:87:
         54:aa:59:db:54:85:b9:ea:b0:6c:4a:ab:8c:67:af:d7:9b:20:
         86:69:ac:bb:a9:35:09:8c:50:cc:4a:1d:96:4c:05:ae:ce:f9:
         a6:e0:c0:5b:45:b5:70:53:1a:7b:90:89:c7:0c:b9:c5:f9:47:
         f4:64:28:c9:90:71:93:93:a5:b2:8b:cf:f4:c4:49:05:0e:9d:
         c6:73:16:e0:4f:e8:4c:6b:80:90:4d:a3:6d:30:dd:14:d8:94:
         87:0e:79:b7:f6:d5:2a:7f:ba:f3:92:f3:c1:18:a2:ae:e0:52:
         e5:79:55:96:c5:31:a6:aa:05:46:40:80:72:9a:87:a2:f4:6c:
         02:6a:d8:f7:70:dd:d4:4b:3d:54:9c:1a:dc:a5:e8:c0:b3:06:
         20:43:a0:9f:18:25:46:3e:f5:fc:d7:e9:26:44:21:63:3d:4f:
         4b:6f:72:0e:c1:8b:40:60:fe:b8:64:0b:14:a0:80:51:77:97:
         ad:e7:ea:73:27:e9:40:7e:ab:23:46:ea:56:0f:e5:91:20:03:
         17:3b:68:77:a0:37:bc:a4:33:b5:a8:35:27:5e:6d:1f:7d:30:
         4a:48:68:df:d9:44:44:ef:d5:90:86:51:85:72:e0:3d:76:8f:
         eb:a3:04:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:00 2026 by rpki-client