Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
File:                     SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json)
Hash identifier:          ml0ehAq5epJ+BUnEOmiU3dUls2kFK7+9bAYVVIAJgh0=
Subject key identifier:   2D:A8:BD:C0:20:64:24:B6:78:99:FE:18:C8:C6:0F:E3:79:B1:9E:2B
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Certificate issuer:       /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial:       0572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
Manifest number:          0563
Signing time:             Thu 16 Jul 2026 23:56:02 +0000
Manifest this update:     Thu 16 Jul 2026 23:56:01 +0000
Manifest next update:     Thu 23 Jul 2026 23:56:01 +0000
Files and hashes:         1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: ok0USerEcjtRtEaZgSnTB1Draz9INCWui2+hqSjDr6o=)
                          2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: 2VF4ZBcYU1NgumYKCnjL8hY4a3QKesS7mGAqok92V4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
                          rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
        Validity
            Not Before: Jul 16 23:56:01 2026 GMT
            Not After : Jul 23 23:56:01 2026 GMT
        Subject: CN=6a596f91-3e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:ae:d9:26:8b:69:3b:9b:8a:00:3d:a5:bc:
                    3b:c0:b1:18:e5:41:c8:38:dc:15:67:cc:0b:ad:68:
                    31:38:32:ba:01:5f:76:d0:1b:c9:c8:61:78:59:de:
                    5f:14:a3:a4:aa:99:63:d3:15:26:14:1c:f2:41:d9:
                    ed:25:2c:d5:17:64:8c:1a:86:c7:10:ac:4d:2e:f3:
                    72:d5:aa:65:9e:00:1e:77:fd:dc:24:c2:5b:7b:6f:
                    f4:85:39:cd:a6:38:8d:33:9f:33:5f:c7:a9:16:fb:
                    1a:9b:30:2c:cc:84:ab:f8:43:c0:f2:a0:d7:00:53:
                    db:ca:7a:bf:32:af:a7:75:d8:3e:66:1f:08:9c:02:
                    82:12:47:78:43:82:91:31:cc:fe:5d:fe:cb:4f:ab:
                    16:75:15:e4:01:b5:8d:71:38:10:1c:cc:30:38:75:
                    f0:ab:23:12:f6:c3:d0:8f:80:4f:86:00:2a:f5:45:
                    bc:98:b4:68:50:0e:84:9f:83:63:4e:96:a8:ac:7e:
                    36:f5:bc:0e:25:8e:00:42:95:d6:53:3f:ef:49:dd:
                    51:6c:a8:5f:16:f1:e8:ca:24:fb:82:1f:9d:4e:07:
                    b3:50:e8:a2:d9:20:a7:3c:10:83:4f:a8:a8:5c:da:
                    47:f5:5a:0c:2d:87:c3:64:cd:0f:9c:00:55:73:08:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:BD:C0:20:64:24:B6:78:99:FE:18:C8:C6:0F:E3:79:B1:9E:2B
            X509v3 Authority Key Identifier:
                keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:af:23:f3:b8:c4:4f:36:c3:3f:60:9a:73:12:15:3d:35:eb:
         ed:c9:62:59:27:24:ef:4d:50:3b:27:34:93:23:df:8b:1a:87:
         32:4e:ab:96:74:d6:f2:5b:f4:16:86:be:12:5e:08:9b:5c:07:
         d7:c0:bd:47:78:a5:6b:33:c5:07:88:7b:cb:d1:4c:81:c3:3b:
         41:00:3d:c9:56:48:82:a0:4f:95:de:32:34:97:f7:1e:85:bf:
         7a:88:3c:f9:89:4b:d5:14:26:39:4d:0b:79:fd:e8:26:0e:4f:
         b5:ba:1d:e8:67:e0:ce:34:74:e3:7e:5a:79:d6:74:18:80:13:
         43:16:0f:0b:2d:2b:85:52:a0:b2:5d:47:44:40:8a:35:42:d9:
         68:46:5e:9c:f3:a5:76:9a:cf:ea:d4:27:49:ca:88:5c:ed:ad:
         b6:c6:ab:f3:8f:b8:4e:6b:c1:5b:1c:dc:4a:36:cb:f1:1d:2f:
         f2:4c:ec:f4:2b:7a:13:c3:81:ad:cb:53:44:eb:39:ec:31:30:
         76:37:19:2c:c6:be:24:e1:f2:02:b8:bb:63:08:93:f7:5d:79:
         d0:93:e2:84:22:6c:6b:7a:39:7d:fe:e5:f8:45:01:de:62:3e:
         76:1d:1b:a1:0f:6b:de:e2:0f:61:55:58:d9:f5:ef:3e:a2:67:
         a5:0f:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:13:51 2026 by rpki-client