Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
File:                     SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft (raw, json)
Hash identifier:          XhC4ecKbteAGvP1itxktdfDqU8nJlQ5cRIh71mUd08c=
Subject key identifier:   CA:6B:7B:C1:A0:B0:E8:B9:E7:65:D3:F1:49:57:02:C7:4F:D5:1B:48
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Certificate issuer:       /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
Manifest number:          72
Signing time:             Mon 19 Oct 2026 08:36:11 +0000
Manifest this update:     Mon 19 Oct 2026 08:36:10 +0000
Manifest next update:     Mon 26 Oct 2026 08:36:10 +0000
Files and hashes:         1: SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl (hash: +tNBrzUS4w8zJnRYW0H6houKvPzJ1iijYFrwNTXR20k=)
                          2: D6CF9ED61D5611F1A0EA4997233D8C67.roa (hash: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
        Validity
            Not Before: Oct 19 08:36:10 2026 GMT
            Not After : Oct 26 08:36:10 2026 GMT
        Subject: CN=6ad5d67a-1e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:ab:2b:66:27:c6:f3:7b:dc:17:b2:06:2f:
                    b5:cd:65:be:0b:a2:83:03:19:53:8c:8d:50:d3:9a:
                    6f:31:6d:15:bc:53:88:51:a1:b6:bf:73:b1:1f:db:
                    24:a7:0b:e5:5e:88:9b:15:e4:f0:42:19:d3:4e:5a:
                    16:ed:55:c3:93:2a:97:2b:1f:68:22:c9:59:5f:14:
                    81:6b:ad:9a:f4:16:1f:15:d4:a9:0a:c1:ab:fc:c4:
                    51:05:0d:09:0c:b9:6f:56:cb:ac:9d:6e:57:fc:b1:
                    81:39:64:96:c1:70:1b:70:60:bb:a6:0b:eb:46:16:
                    e2:07:19:79:77:4b:e5:c0:75:3e:e6:a8:28:72:ed:
                    96:5b:4d:be:b8:fd:1d:c5:72:f8:c4:b2:b1:ff:a2:
                    dd:5c:b0:76:19:a9:62:4e:87:fc:ef:a0:cb:41:d1:
                    28:51:42:7e:3d:27:d2:17:c5:72:00:9f:14:42:29:
                    05:bd:aa:cc:ad:7b:58:47:2e:a3:66:ea:f0:48:3e:
                    0b:05:10:e6:0e:73:a8:a4:b7:c0:d8:b4:ad:cf:10:
                    21:80:41:0b:02:ef:bc:49:e3:c5:02:6c:e6:c0:20:
                    a4:3c:66:1c:89:47:6a:1d:45:e8:c1:83:55:6b:0d:
                    be:b1:e8:7e:0a:11:64:fc:44:db:2a:70:25:8e:67:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:7B:C1:A0:B0:E8:B9:E7:65:D3:F1:49:57:02:C7:4F:D5:1B:48
            X509v3 Authority Key Identifier:
                keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b4:5f:47:5d:15:f5:6d:eb:9f:5c:72:76:0c:f8:90:4a:5a:
         a2:2f:b6:3a:ba:c5:19:81:0a:41:d9:a1:19:8f:99:5c:0b:9e:
         f0:42:b0:f4:16:ee:d9:83:cd:3d:ff:b4:8e:dd:e7:68:cc:dc:
         9c:a6:d7:b4:75:8d:51:b1:03:6f:36:58:3e:51:88:d0:c8:36:
         58:4a:d6:0e:ca:c2:70:27:2d:50:e2:5a:a2:b9:b1:02:0d:ed:
         c7:e2:34:3e:e6:86:0b:05:9a:19:e4:3a:e9:66:df:2b:55:10:
         1c:24:0a:9e:24:92:18:78:1a:3c:27:c6:af:1e:18:9a:79:f3:
         d2:c5:76:d2:90:20:65:eb:42:ec:4f:11:35:23:8b:42:ec:24:
         75:2a:12:da:8c:b5:f9:70:8a:4d:0d:5f:6f:9e:cf:3a:f8:b8:
         d2:8b:ce:19:f3:f8:a0:e1:d2:3a:f1:1e:60:74:bf:21:dd:39:
         69:69:ee:74:ee:ac:c7:ea:b8:4b:28:4a:c1:e2:85:7a:c1:79:
         55:4a:f4:f8:4b:5d:4b:0d:fa:d5:0d:cb:d7:e3:3f:79:7e:fd:
         22:f1:5c:e5:e7:60:8a:73:7a:ec:94:50:e2:0b:10:8d:78:55:
         ec:92:e4:eb:c3:43:c2:4b:8e:ca:f3:76:ce:d4:60:0e:b2:17:
         15:bd:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:04:44 2026 by rpki-client